src/compose.php

   1 <?php
   2
   3 /**
   4  * compose.php
   5  *
   6  * Copyright (c) 1999-2002 The SquirrelMail Project Team
   7  * Licensed under the GNU GPL. For full terms see the file COPYING.
   8  *
   9  * This code sends a mail.
  10  *
  11  * There are 4 modes of operation:
  12  *    - Start new mail
  13  *    - Add an attachment
  14  *    - Send mail
  15  *    - Save As Draft
  16  *
  17  * $Id$
  18  */
  19
  20 require_once('../src/validate.php');
  21 require_once('../functions/imap.php');
  22 require_once('../functions/date.php');
  23 require_once('../functions/mime.php');
  24 require_once('../functions/smtp.php');
  25 require_once('../functions/plugin.php');
  26 require_once('../functions/display_messages.php');
  27
  28 /* --------------------- Specific Functions ------------------------------ */
  29
  30 function replyAllString($header) {
  31    global $include_self_reply_all, $username, $data_dir;
  32    $excl_arr = array();
  33    /**
  34     * 1) Remove the addresses we'll be sending the message 'to'
  35     */
  36    $url_replytoall_avoid_addrs = '';
  37    if (isset($header->replyto)) {
  38       $excl_ar = $header->getAddr_a('replyto');
  39    }
  40    /**
  41     * 2) Remove our identities from the CC list (they still can be in the
  42     * TO list) only if $include_self_reply_all is turned off
  43     */
  44    if (!$include_self_reply_all) {
  45        $email_address = trim(getPref($data_dir, $username, 'email_address'));
  46        $excl_ar[$email_address] = '';
  47
  48        $idents = getPref($data_dir, $username, 'identities');
  49        if ($idents != '' && $idents > 1) {
  50           for ($i = 1; $i < $idents; $i ++) {
  51              $cur_email_address = getPref($data_dir, $username,
  52                                          'email_address' . $i);
  53              $cur_email_address = strtolower($cur_email_address);
  54              $excl_ar[$cur_email_address] = '';
  55          }
  56        }
  57    }
  58
  59    /**
  60     * 3) get the addresses.
  61     */
  62    $url_replytoall_ar = $header->getAddr_a(array('to','cc'), $excl_ar);
  63
  64    /**
  65     * 4) generate the string.
  66     */
  67    $url_replytoallcc = '';
  68    foreach( $url_replytoall_ar as $email => $personal) {
  69       if ($personal) {
  70          $url_replytoallcc .= ", \"$personal\" <$email>";
  71       } else {
  72          $url_replytoallcc .= ', '. $email;
  73       }
  74    }
  75    $url_replytoallcc = substr($url_replytoallcc,2);
  76    return $url_replytoallcc;
  77 }
  78
  79 function getforwardHeader($orig_header) {
  80     global $editor_size;
  81
  82    $display = array(
  83                      _("Subject") => strlen(_("Subject")),
  84                      _("From")    => strlen(_("From")),
  85                      _("Date")    => strlen(_("Date")),
  86                      _("To")      => strlen(_("To")),
  87                      _("Cc")      => strlen(_("Cc"))
  88                     );
  89    $maxsize = max($display);
  90    $indent = str_pad('',$maxsize+2);
  91    foreach($display as $key => $val) {
  92       $display[$key] = $key .': '. str_pad('', $maxsize - $val);
  93    }
  94    $bodyTop =  str_pad(' '._("Original Message").' ',$editor_size -2,'-',STR_PAD_BOTH);
  95    $bodyTop .=  "\n". $display[_("Subject")] . decodeHeader($orig_header->subject) . "\n" .
  96         $display[_("From")] . decodeHeader($orig_header->getAddr_s('from',"\n$indent")) . "\n" .
  97         $display[_("Date")] . getLongDateString( $orig_header->date ). "\n" .
  98         $display[_("To")] . decodeHeader($orig_header->getAddr_s('to',"\n$indent")) ."\n";
  99   if ($orig_header->cc != array() && $orig_header->cc !='') {
 100      $bodyTop .= $display[_("Cc")] . decodeHeader($orig_header->getAddr_s('cc',"\n$indent")) . "\n";
 101   }
 102   $bodyTop .= str_pad('', $editor_size -2 , '-');
 103   $bodyTop .= "\n";
 104   return $bodyTop;
 105 }
 106 /* ----------------------------------------------------------------------- */
 107
 108 /*
 109  * If the session is expired during a post this restores the compose session
 110  * vars.
 111  */
 112 //$session_expired = false;
 113 if (session_is_registered('session_expired_post')) {
 114    global $session_expired_post, $session_expired;
 115    /*
 116     * extra check for username so we don't display previous post data from
 117     * another user during this session.
 118     */
 119    if ($session_expired_post['username'] != $username) {
 120       session_unregister('session_expired_post');
 121       session_unregister('session_expired');
 122    } else {
 123       foreach ($session_expired_post as $postvar => $val) {
 124          if (isset($val)) {
 125             $$postvar = $val;
 126          } else {
 127             $$postvar = '';
 128          }
 129       }
 130       if (isset($send)) {
 131          unset($send);
 132       }
 133       $session_expired = true;
 134    }
 135    session_unregister('session_expired_post');
 136    session_unregister('session_expired');
 137    if (!isset($mailbox)) {
 138       $mailbox = '';
 139    }
 140    if ($compose_new_win == '1') {
 141       compose_Header($color, $mailbox);
 142    } else {
 143       displayPageHeader($color, $mailbox);
 144    }
 145    showInputForm($session, false);
 146    exit();
 147 }
 148
 149 if (!isset($attachments)) {
 150     $attachments = array();
 151     session_register('attachments');
 152 }
 153
 154 if (!isset($composesession)) {
 155     $composesession = 0;
 156     session_register('composesession');
 157 }
 158
 159 if (!isset($session) || (isset($newmessage) && $newmessage)) {
 160     $session = "$composesession" +1;
 161     $composesession = $session;
 162     session_register('composesession');
 163 }
 164
 165 if (!isset($mailbox) || $mailbox == '' || ($mailbox == 'None')) {
 166     $mailbox = 'INBOX';
 167 }
 168
 169 if (isset($draft)) {
 170     include_once ('../src/draft_actions.php');
 171     if (! isset($passed_id)) {
 172          $passed_id = 0;
 173     }
 174     if (! isset($MDN)) {
 175         $MDN = 'False';
 176     }
 177     if (! isset($mailprio)) {
 178         $mailprio = '';
 179     }
 180     if (!saveMessageAsDraft($send_to, $send_to_cc, $send_to_bcc, $subject, $body, $passed_id, $mailprio, $session)) {
 181         showInputForm($session);
 182         exit();
 183     } else {
 184         $draft_message = _("Draft Email Saved");
 185         /* If this is a resumed draft, then delete the original */
 186         if(isset($delete_draft)) {
 187             Header("Location: delete_message.php?mailbox=" . urlencode($draft_folder) .
 188                    "&message=$delete_draft&sort=$sort&startMessage=1&saved_draft=yes");
 189             exit();
 190         }
 191         else {
 192             if ($compose_new_win == '1') {
 193                 Header("Location: compose.php?saved_draft=yes&session=$composesession");
 194             exit();
 195             }
 196             else {
 197             Header("Location: right_main.php?mailbox=$draft_folder&sort=$sort".
 198                    "&startMessage=1&note=".urlencode($draft_message));
 199             exit();
 200             }
 201         }
 202     }
 203 }
 204
 205 if (isset($send)) {
 206     if (isset($HTTP_POST_FILES['attachfile']) &&
 207         $HTTP_POST_FILES['attachfile']['tmp_name'] &&
 208         $HTTP_POST_FILES['attachfile']['tmp_name'] != 'none') {
 209         $AttachFailure = saveAttachedFiles($session);
 210     }
 211     if (checkInput(false) && !isset($AttachFailure)) {
 212         $urlMailbox = urlencode (trim($mailbox));
 213         if (! isset($passed_id)) {
 214             $passed_id = 0;
 215         }
 216         /*
 217          * Set $default_charset to correspond with the user's selection
 218          * of language interface.
 219          */
 220         set_my_charset();
 221
 222         /*
 223          * This is to change all newlines to \n
 224          * We'll change them to \r\n later (in the sendMessage function)
 225          */
 226         $body = str_replace("\r\n", "\n", $body);
 227         $body = str_replace("\r", "\n", $body);
 228
 229         /*
 230          * Rewrap $body so that no line is bigger than $editor_size
 231          * This should only really kick in the sqWordWrap function
 232          * if the browser doesn't support "VIRTUAL" as the wrap type.
 233          */
 234         $body = explode("\n", $body);
 235         $newBody = '';
 236         foreach ($body as $line) {
 237             if( $line <> '-- ' ) {
 238                $line = rtrim($line);
 239             }
 240             if (strlen($line) <= $editor_size + 1) {
 241                 $newBody .= $line . "\n";
 242             } else {
 243                 sqWordWrap($line, $editor_size);
 244                 $newBody .= $line . "\n";
 245             }
 246         }
 247         $body = $newBody;
 248
 249         do_hook('compose_send');
 250
 251         $MDN = False;  // we are not sending a mdn response
 252         if (! isset($mailprio)) {
 253             $Result = sendMessage($send_to, $send_to_cc, $send_to_bcc,
 254                                   $subject, $body, $passed_id, $MDN, '', $session);
 255         } else {
 256             $Result = sendMessage($send_to, $send_to_cc, $send_to_bcc,
 257                                   $subject, $body, $passed_id, $MDN, $mailprio, $session);
 258         }
 259         if (! $Result) {
 260             showInputForm($session);
 261             exit();
 262         }
 263         if ( isset($delete_draft)) {
 264             Header("Location: delete_message.php?mailbox=" . urlencode( $draft_folder ).
 265                    "&message=$delete_draft&sort=$sort&startMessage=1&mail_sent=yes");
 266             exit();
 267         }
 268         if ($compose_new_win == '1') {
 269             Header("Location: compose.php?mail_sent=yes");
 270         }
 271         else {
 272             Header("Location: right_main.php?mailbox=$urlMailbox&sort=$sort".
 273                    "&startMessage=1");
 274         }
 275     } else {
 276         /*
 277          *$imapConnection = sqimap_login($username, $key, $imapServerAddress,
 278          *                               $imapPort, 0);
 279          */
 280         if ($compose_new_win == '1') {
 281             compose_Header($color, $mailbox);
 282         }
 283         else {
 284             displayPageHeader($color, $mailbox);
 285         }
 286         if (isset($AttachFailure)) {
 287              plain_error_message(_("Could not move/copy file. File not attached"),
 288                                  $color);
 289         }
 290         checkInput(true);
 291         showInputForm($session);
 292         /* sqimap_logout($imapConnection); */
 293     }
 294 } elseif (isset($html_addr_search_done)) {
 295         if ($compose_new_win == '1') {
 296             compose_Header($color, $mailbox);
 297         }
 298         else {
 299             displayPageHeader($color, $mailbox);
 300         }
 301
 302     if (isset($send_to_search) && is_array($send_to_search)) {
 303         foreach ($send_to_search as $k => $v) {
 304             if (substr($k, 0, 1) == 'T') {
 305                 if ($send_to) {
 306                     $send_to .= ', ';
 307                 }
 308                 $send_to .= $v;
 309             }
 310             elseif (substr($k, 0, 1) == 'C') {
 311                 if ($send_to_cc) {
 312                     $send_to_cc .= ', ';
 313                 }
 314                 $send_to_cc .= $v;
 315             }
 316             elseif (substr($k, 0, 1) == 'B') {
 317                 if ($send_to_bcc) {
 318                     $send_to_bcc .= ', ';
 319                 }
 320                 $send_to_bcc .= $v;
 321             }
 322         }
 323     }
 324     showInputForm($session);
 325 } elseif (isset($html_addr_search)) {
 326     if (isset($HTTP_POST_FILES['attachfile']) &&
 327         $HTTP_POST_FILES['attachfile']['tmp_name'] &&
 328         $HTTP_POST_FILES['attachfile']['tmp_name'] != 'none') {
 329         if (saveAttachedFiles($session)) {
 330             plain_error_message(_("Could not move/copy file. File not attached"), $color);
 331         }
 332     }
 333     /*
 334      * I am using an include so as to elminiate an extra unnecessary
 335      * click.  If you can think of a better way, please implement it.
 336      */
 337     include_once('./addrbook_search_html.php');
 338 } elseif (isset($attach)) {
 339     if (saveAttachedFiles($session)) {
 340         plain_error_message(_("Could not move/copy file. File not attached"), $color);
 341     }
 342         if ($compose_new_win == '1') {
 343             compose_Header($color, $mailbox);
 344         }
 345         else {
 346             displayPageHeader($color, $mailbox);
 347         }
 348     showInputForm($session);
 349 }
 350 elseif (isset($sigappend)) {
 351     $idents = getPref($data_dir, $username, 'identities', 0);
 352     if ($idents > 1) {
 353        if ($identity == 'default') {
 354           $no = 'g';
 355        } else {
 356           $no = $identity;
 357        }
 358        $signature = getSig($data_dir, $username, $no);
 359     }
 360     $body .= "\n\n".($prefix_sig==true? "-- \n":'').$signature;
 361     if ($compose_new_win == '1') {
 362          compose_Header($color, $mailbox);
 363     } else {
 364         displayPageHeader($color, $mailbox);
 365     }
 366     showInputForm($session);
 367 } elseif (isset($do_delete)) {
 368         if ($compose_new_win == '1') {
 369             compose_Header($color, $mailbox);
 370         }
 371         else {
 372             displayPageHeader($color, $mailbox);
 373         }
 374
 375     $hashed_attachment_dir = getHashedDir($username, $attachment_dir);
 376     if (isset($delete) && is_array($delete)) {
 377         foreach($delete as $index) {
 378             $attached_file = $hashed_attachment_dir . '/'
 379                            . $attachments[$index]['localfilename'];
 380             unlink ($attached_file);
 381             unset ($attachments[$index]);
 382         }
 383         setPref($data_dir, $username, 'attachments', serialize($attachments));
 384     }
 385
 386     showInputForm($session);
 387 } else {
 388     /*
 389      * This handles the default case as well as the error case
 390      * (they had the same code) --> if (isset($smtpErrors))
 391      */
 392
 393     if ($compose_new_win == '1') {
 394        compose_Header($color, $mailbox);
 395     } else {
 396        displayPageHeader($color, $mailbox);
 397     }
 398
 399     $newmail = true;
 400
 401     if (!isset($passed_ent_id)) $passed_ent_id = '';
 402     if (!isset($passed_id)) $passed_id = '';
 403     if (!isset($mailbox)) $mailbox = '';
 404     if (!isset($action)) $action = '';
 405
 406     $values = newMail($mailbox,$passed_id,$passed_ent_id, $action, $session);
 407
 408     /* in case the origin is not read_body.php */
 409     if (isset($send_to)) {
 410        $values['send_to'] = $send_to;
 411     }
 412     if (isset($send_to_cc)) {
 413        $values['send_to_cc'] = $send_to_cc;
 414     }
 415     if (isset($send_to_bcc)) {
 416        $values['send_to_bcc'] = $send_to_bcc;
 417     }
 418     showInputForm($session, $values);
 419 }
 420
 421 exit();
 422
 423 /**************** Only function definitions go below *************/
 424
 425
 426 /* This function is used when not sending or adding attachments */
 427 function newMail ($mailbox='', $passed_id='', $passed_ent_id='', $action='', $session='') {
 428     global $editor_size, $default_use_priority, $body,
 429            $use_signature, $composesession, $data_dir, $username,
 430            $username, $key, $imapServerAddress, $imapPort;
 431
 432     $send_to = $send_to_cc = $send_to_bcc = $subject = $identity = '';
 433     $mailprio = 3;
 434
 435     if ($passed_id) {
 436         $imapConnection = sqimap_login($username, $key, $imapServerAddress,
 437                           $imapPort, 0);
 438
 439         sqimap_mailbox_select($imapConnection, $mailbox);
 440         $message = sqimap_get_message($imapConnection, $passed_id, $mailbox);
 441         $body = '';
 442         if ($passed_ent_id) {
 443            /* redefine the messsage in case of message/rfc822 */
 444            $message = $message->getEntity($passed_ent_id);
 445            /* message is an entity which contains the envelope and type0=message
 446             * and type1=rfc822. The actual entities are childs from
 447             * $message->entities[0]. That's where the encoding and is located
 448             */
 449
 450            $entities = $message->entities[0]->findDisplayEntity
 451                        (array(), $alt_order = array('text/plain'));
 452            if (!count($entities)) {
 453               $entities = $message->entities[0]->findDisplayEntity
 454                        (array(), $alt_order = array('text/plain','html/plain'));
 455            }
 456            $orig_header = $message->rfc822_header; /* here is the envelope located */
 457            /* redefine the message for picking up the attachments */
 458            $message = $message->entities[0];
 459
 460         } else {
 461            $entities = $message->findDisplayEntity (array(), $alt_order = array('text/plain'));
 462            if (!count($entities)) {
 463               $entities = $message->findDisplayEntity (array(), $alt_order = array('text/plain','html/plain'));
 464            }
 465            $orig_header = $message->rfc822_header;
 466         }
 467         $encoding = $message->header->encoding;
 468         $type0 = $message->type0;
 469         $type1 = $message->type1;
 470         foreach ($entities as $ent) {
 471            $unencoded_bodypart = mime_fetch_body($imapConnection, $passed_id, $ent);
 472            $body_part_entity = $message->getEntity($ent);
 473            $bodypart = decodeBody($unencoded_bodypart,
 474                                   $body_part_entity->header->encoding);
 475            if ($type1 == 'html') {
 476               $bodypart = strip_tags($bodypart);
 477            }
 478            $body .= $bodypart;
 479         }
 480         if ($default_use_priority) {
 481           $mailprio = substr($orig_header->priority,0,1);
 482           if (!$mailprio) {
 483              $mailprio = 3;
 484           }
 485         } else {
 486           $mailprio = '';
 487         }
 488         ClearAttachments($session);
 489
 490         $identity = '';
 491         $idents = getPref($data_dir, $username, 'identities');
 492         $from_o = $orig_header->from;
 493         if (is_object($from_o)) {
 494             $orig_from = $from_o->getAddress();
 495         } else {
 496             $orig_from = '';
 497         }
 498         if (!empty($idents) && $idents > 1) {
 499            for ($i = 1; $i < $idents; $i++) {
 500               $enc_from_name = '"'.
 501                               getPref($data_dir,
 502                                       $username,
 503                                       'full_name' . $i) .
 504                  '" <' . getPref($data_dir, $username,
 505                                  'email_address' . $i) . '>';
 506               if ($enc_from_name == $orig_from) {
 507                   $identity = $i;
 508                   break;
 509               }
 510            }
 511         }
 512
 513         switch ($action) {
 514         case ('draft'):
 515            $use_signature = FALSE;
 516            $send_to = $orig_header->getAddr_s('to');
 517            $send_to_cc = $orig_header->getAddr_s('cc');
 518            $send_to_bcc = $orig_header->getAddr_s('bcc');
 519            $subject = decodeHeader($orig_header->subject);
 520
 521            $body_ary = explode("\n", $body);
 522            $cnt = count($body_ary) ;
 523            $body = '';
 524            for ($i=0; $i < $cnt; $i++) {
 525               if (!ereg("^[>\\s]*$", $body_ary[$i])  || !$body_ary[$i]) {
 526                  sqWordWrap($body_ary[$i], $editor_size );
 527                  $body .= $body_ary[$i] . "\n";
 528               }
 529               unset($body_ary[$i]);
 530            }
 531            sqUnWordWrap($body);
 532            getAttachments($message, $session, $passed_id, $entities, $imapConnection);
 533            break;
 534         case ('edit_as_new'):
 535            $send_to = $orig_header->getAddr_s('to');
 536            $send_to_cc = $orig_header->getAddr_s('cc');
 537            $send_to_bcc = $orig_header->getAddr_s('bcc');
 538            $subject = decodeHeader($orig_header->subject);
 539            $mailprio = $orig_header->priority;
 540            $orig_from = '';
 541            getAttachments($message, $session, $passed_id, $entities, $imapConnection);
 542            sqUnWordWrap($body);
 543            break;
 544         case ('forward'):
 545            $send_to = '';
 546            $subject = decodeHeader($orig_header->subject);
 547            if ((substr(strtolower($subject), 0, 4) != 'fwd:') &&
 548               (substr(strtolower($subject), 0, 5) != '[fwd:') &&
 549               (substr(strtolower($subject), 0, 6) != '[ fwd:')) {
 550               $subject = '[Fwd: ' . $subject . ']';
 551            }
 552            $body = getforwardHeader($orig_header) . $body;
 553            sqUnWordWrap($body);
 554            getAttachments($message, $session, $passed_id, $entities, $imapConnection);
 555            break;
 556         case ('forward_as_attachment'):
 557            getMessage_RFC822_Attachment($message, $session, $passed_id, $passed_ent_id, $imapConnection);
 558            $body = '';
 559            break;
 560         case ('reply_all'):
 561            $send_to_cc = replyAllString($orig_header);
 562         case ('reply'):
 563            $send_to = $orig_header->reply_to;
 564            if (is_object($send_to)) {
 565               $send_to = $send_to->getAddr_s('reply_to');
 566            } else {
 567               $send_to = $orig_header->getAddr_s('from');
 568            }
 569            $subject = $orig_header->subject;
 570            $subject = str_replace('"', "'", $subject);
 571            $subject = trim($subject);
 572            if (substr(strtolower($subject), 0, 3) != 're:') {
 573               $subject = 'Re: ' . $subject;
 574            }
 575            /* this corrects some wrapping/quoting problems on replies */
 576            $rewrap_body = explode("\n", charset_decode_japanese($body));
 577
 578            $body = getReplyCitation($orig_header->from->personal);
 579            $cnt = count($rewrap_body);
 580            for ($i=0;$i<$cnt;$i++) {
 581 //              sqWordWrap($rewrap_body[$i], ($editor_size - 2));
 582               if (preg_match("/^(>+)/", $rewrap_body[$i], $matches)) {
 583                  $gt = $matches[1];
 584                  $body .= '>' . str_replace("\n", "\n$gt ", $rewrap_body[$i]) ."\n";
 585               } else {
 586                  $body .= '> ' . $rewrap_body[$i] . "\n";
 587               }
 588               unset($rewrap_body[$i]);
 589            }
 590            break;
 591         default:
 592            break;
 593         }
 594         sqimap_logout($imapConnection);
 595     }
 596     $ret = array(
 597             'send_to' => $send_to,
 598             'send_to_cc' => $send_to_cc,
 599             'send_to_bcc' => $send_to_bcc,
 600             'subject' => $subject,
 601             'mailprio' => $mailprio,
 602             'body' => $body,
 603             'identity' => $identity
 604             );
 605
 606     return ($ret);
 607 } /* function newMail() */
 608
 609
 610 function getAttachments($message, $session, $passed_id, $entities, $imapConnection) {
 611     global $attachments, $attachment_dir, $username, $data_dir;
 612
 613     $hashed_attachment_dir = getHashedDir($username, $attachment_dir);
 614     if (!count($message->entities) ||
 615        ($message->type0 == 'message' && $message->type1 == 'rfc822')) {
 616         if ( !in_array($message->entity_id, $entities) && $message->entity_id) {
 617             if ($message->type0 == 'message' && $message->type1 == 'rfc822') {
 618                $filename = decodeHeader($message->rfc822_header->subject.'.eml');
 619                if ($filename == "") {
 620                   $filename = "untitled-".$message->entity_id.'.eml';
 621                }
 622             } else {
 623                $filename = decodeHeader($message->getFilename());
 624             }
 625             $localfilename = GenerateRandomString(32, '', 7);
 626             $full_localfilename = "$hashed_attachment_dir/$localfilename";
 627             while (file_exists($full_localfilename)) {
 628                 $localfilename = GenerateRandomString(32, '', 7);
 629                 $full_localfilename = "$hashed_attachment_dir/$localfilename";
 630             }
 631
 632             $newAttachment = array();
 633             $newAttachment['localfilename'] = $localfilename;
 634             $newAttachment['remotefilename'] = $filename;
 635             $newAttachment['type'] = strtolower($message->type0 .
 636                                                 '/' . $message->type1);
 637             $newAttachment['id'] = strtolower($message->header->id);
 638             $newAttachment['session'] = $session;
 639
 640             /* Write Attachment to file */
 641             $fp = fopen ("$hashed_attachment_dir/$localfilename", 'w');
 642             fputs($fp, decodeBody(mime_fetch_body($imapConnection,
 643                 $passed_id, $message->entity_id),
 644                 $message->header->encoding));
 645             fclose ($fp);
 646             $attachments[] = $newAttachment;
 647         }
 648     } else {
 649         for ($i = 0; $i < count($message->entities); $i++) {
 650             getAttachments($message->entities[$i], $session, $passed_id, $entities, $imapConnection);
 651         }
 652     }
 653     setPref($data_dir, $username, 'attachments', serialize($attachments));
 654     return;
 655 }
 656
 657 function getMessage_RFC822_Attachment($message, $session, $passed_id,
 658                                       $passed_ent_id='', $imapConnection) {
 659     global $attachments, $attachment_dir, $username, $data_dir, $uid_support;
 660     $hashed_attachment_dir = getHashedDir($username, $attachment_dir);
 661     if (!$passed_ent_id) {
 662         $body_a = sqimap_run_command($imapConnection,
 663                   'FETCH '.$passed_id.' RFC822',
 664                   true, $response, $readmessage, $uid_support);
 665     } else {
 666         $body_a = sqimap_run_command($imapConnection,
 667                   'FETCH '.$passed_id.' BODY['.$passed_ent_id.']',
 668                   true, $response, $readmessage, $uid_support);
 669         $message = $message->parent;
 670     }
 671     if ($response = 'OK') {
 672         $subject = encodeHeader($message->rfc822_header->subject);
 673         array_shift($body_a);
 674         $body = implode('', $body_a);
 675         $body .= "\r\n";
 676
 677         $localfilename = GenerateRandomString(32, 'FILE', 7);
 678         $full_localfilename = "$hashed_attachment_dir/$localfilename";
 679
 680         $fp = fopen( $full_localfilename, 'w');
 681         fwrite ($fp, $body);
 682         fclose($fp);
 683         $newAttachment = array();
 684         $newAttachment['localfilename'] = $localfilename;
 685         $newAttachment['type'] = "message/rfc822";
 686         $newAttachment['remotefilename'] = $subject.'.eml';
 687         $newAttachment['session'] = $session;
 688         $attachments[] = $newAttachment;
 689     }
 690     setPref($data_dir, $username, 'attachments', serialize($attachments));
 691     return;
 692 }
 693
 694 function showInputForm ($session, $values=false) {
 695     global $send_to, $send_to_cc, $body,
 696            $passed_body, $color, $use_signature, $signature, $prefix_sig,
 697            $editor_size, $attachments, $subject, $newmail,
 698            $use_javascript_addr_book, $send_to_bcc, $passed_id, $mailbox,
 699            $from_htmladdr_search, $location_of_buttons, $attachment_dir,
 700            $username, $data_dir, $identity, $draft_id, $delete_draft,
 701            $mailprio, $default_use_mdn, $mdn_user_support, $compose_new_win,
 702            $saved_draft, $mail_sent, $sig_first, $edit_as_new, $action,
 703            $username;
 704
 705     $subject = decodeHeader($subject, false);
 706     if ($values) {
 707        $send_to = $values['send_to'];
 708        $send_to_cc = $values['send_to_cc'];
 709        $send_to_bcc = $values['send_to_bcc'];
 710        $subject = $values['subject'];
 711        $mailprio = $values['mailprio'];
 712        $body = $values['body'];
 713        $identity = $values['identity'];
 714     }
 715
 716     if ($use_javascript_addr_book) {
 717         echo "\n". '<SCRIPT LANGUAGE=JavaScript><!--' . "\n" .
 718              'function open_abook() { ' . "\n" .
 719              '  var nwin = window.open("addrbook_popup.php","abookpopup",' .
 720              '"width=670,height=300,resizable=yes,scrollbars=yes");' . "\n" .
 721              '  if((!nwin.opener) && (document.windows != null))' . "\n" .
 722              '    nwin.opener = document.windows;' . "\n" .
 723              "}\n" .
 724              '// --></SCRIPT>' . "\n\n";
 725     }
 726
 727     echo "\n" . '<FORM name=compose action="compose.php" METHOD=POST ' .
 728          'ENCTYPE="multipart/form-data"';
 729     do_hook("compose_form");
 730
 731
 732     echo ">\n";
 733
 734     if ($action == 'draft') {
 735         echo '<input type="hidden" name="delete_draft" value="' . $passed_id . "\">\n";
 736     }
 737     if (isset($delete_draft)) {
 738         echo '<input type="hidden" name="delete_draft" value="' . $delete_draft. "\">\n";
 739     }
 740     if (isset($session)) {
 741         echo '<input type="hidden" name="session" value="' . $session . "\">\n";
 742     }
 743
 744     if (isset($passed_id)) {
 745         echo '<input type="hidden" name="passed_id" value="' . $passed_id . "\">\n";
 746     }
 747
 748     if ($saved_draft == 'yes') {
 749         echo '<BR><CENTER><B>'. _("Draft Saved").'</CENTER></B>';
 750     }
 751     if ($mail_sent == 'yes') {
 752         echo '<BR><CENTER><B>'. _("Your Message has been sent").'</CENTER></B>';
 753     }
 754     echo '<TABLE ALIGN=center CELLSPACING=0 BORDER=0>' . "\n";
 755     if ($compose_new_win == '1') {
 756         echo '<TABLE ALIGN=CENTER BGCOLOR="'.$color[0].'" WIDTH="100%" BORDER=0>'."\n";
 757         echo '   <TR><TD></TD><TD ALIGN="RIGHT"><INPUT TYPE="BUTTON" NAME="Close" onClick="return self.close()" VALUE='._("Close").'></TD></TR>'."\n";
 758     }
 759     if ($location_of_buttons == 'top') {
 760         showComposeButtonRow();
 761     }
 762
 763     $idents = getPref($data_dir, $username, 'identities', 0);
 764     if ($idents > 1) {
 765         echo '   <TR>' . "\n" .
 766              '      <TD BGCOLOR="' . $color[4] . '" WIDTH="10%" ALIGN=RIGHT>' .
 767              "\n" .
 768              _("From:") .
 769              '      </TD><TD BGCOLOR="' . $color[4] . '" WIDTH="90%">' . "\n" .
 770              '<select name=identity>' . "\n" .
 771              '<option value=default>' .
 772              htmlspecialchars(getPref($data_dir, $username, 'full_name'));
 773         $em = getPref($data_dir, $username, 'email_address');
 774         if ($em != '') {
 775             echo htmlspecialchars(' <' . $em . '>') . "\n";
 776         }
 777         for ($i = 1; $i < $idents; $i ++) {
 778             echo '<option value="' . $i . '"';
 779             if (isset($identity) && $identity == $i) {
 780                 echo ' SELECTED';
 781             }
 782             echo '>' . htmlspecialchars(getPref($data_dir, $username,
 783                                                 'full_name' . $i));
 784             $em = getPref($data_dir, $username, 'email_address' . $i);
 785             if ($em != '') {
 786                 echo htmlspecialchars(' <' . $em . '>') . "\n";
 787             }
 788             echo '</option>';
 789         }
 790         echo '</select>' . "\n" .
 791              '      </TD>' . "\n" .
 792              '   </TR>' . "\n";
 793     }
 794     echo '   <TR>' . "\n" .
 795          '      <TD BGCOLOR="' . $color[4] . '" WIDTH="10%" ALIGN=RIGHT>' . "\n" .
 796          _("To:") .
 797          '      </TD><TD BGCOLOR="' . $color[4] . '" WIDTH="90%">' . "\n" .
 798          '         <INPUT TYPE=text NAME="send_to" VALUE="' .
 799          htmlspecialchars($send_to) . '" SIZE=60><BR>' . "\n" .
 800          '      </TD>' . "\n" .
 801          '   </TR>' . "\n" .
 802          '   <TR>' . "\n" .
 803          '      <TD BGCOLOR="' . $color[4] . '" ALIGN=RIGHT>' . "\n" .
 804          _("CC:") .
 805          '      </TD><TD BGCOLOR="' . $color[4] . '" ALIGN=LEFT>' . "\n" .
 806          '         <INPUT TYPE=text NAME="send_to_cc" SIZE=60 VALUE="' .
 807          htmlspecialchars($send_to_cc) . '"><BR>' . "\n" .
 808          '      </TD>' . "\n" .
 809          '   </TR>' . "\n" .
 810          '   <TR>' . "\n" .
 811          '      <TD BGCOLOR="' . $color[4] . '" ALIGN=RIGHT>' . "\n" .
 812          _("BCC:") .
 813          '      </TD><TD BGCOLOR="' . $color[4] . '" ALIGN=LEFT>' . "\n" .
 814          '         <INPUT TYPE=text NAME="send_to_bcc" VALUE="' .
 815          htmlspecialchars($send_to_bcc) . '" SIZE=60><BR>' . "\n" .
 816          '</TD></TR>' . "\n" .
 817          '   <TR>' . "\n" .
 818          '      <TD BGCOLOR="' . $color[4] . '" ALIGN=RIGHT>' . "\n" .
 819          _("Subject:") .
 820          '      </TD><TD BGCOLOR="' . $color[4] . '" ALIGN=LEFT>' . "\n";
 821         echo '         <INPUT TYPE=text NAME=subject SIZE=60 VALUE="' .
 822              htmlspecialchars($subject) . '">';
 823     echo '</td></tr>' . "\n\n";
 824
 825     if ($location_of_buttons == 'between') {
 826         showComposeButtonRow();
 827     }
 828     if ($compose_new_win == '1') {
 829         echo '   <TR>' . "\n" .
 830              '      <TD BGCOLOR="' . $color[0] . '" COLSPAN=2 ALIGN=CENTER>' . "\n" .
 831              '         <TEXTAREA NAME=body ROWS=20 COLS="' .
 832              $editor_size . '" WRAP="VIRTUAL">';
 833     }
 834     else {
 835         echo '   <TR>' . "\n" .
 836             '      <TD BGCOLOR="' . $color[4] . '" COLSPAN=2>' . "\n" .
 837             '         &nbsp;&nbsp;<TEXTAREA NAME=body ROWS=20 COLS="' .
 838             $editor_size . '" WRAP="VIRTUAL">';
 839     }
 840     if ($use_signature == true && $newmail == true && !isset($from_htmladdr_search)) {
 841         if ($sig_first == '1') {
 842             if ($charset == 'iso-2022-jp') {
 843                 echo "\n\n".($prefix_sig==true? "-- \n":'').mb_convert_encoding($signature, 'EUC-JP');
 844             } else {
 845             echo "\n\n".($prefix_sig==true? "-- \n":'').htmlspecialchars($signature);
 846             }
 847             echo "\n\n".htmlspecialchars($body);
 848         }
 849         else {
 850             echo "\n\n".htmlspecialchars($body);
 851             if ($charset == 'iso-2022-jp') {
 852                 echo "\n\n".($prefix_sig==true? "-- \n":'').mb_convert_encoding($signature, 'EUC-JP');
 853             }else{
 854             echo "\n\n".($prefix_sig==true? "-- \n":'').htmlspecialchars($signature);
 855         }
 856     }
 857     }
 858     else {
 859        echo htmlspecialchars($body);
 860     }
 861     echo '</TEXTAREA><BR>' . "\n" .
 862          '      </TD>' . "\n" .
 863          '   </TR>' . "\n";
 864
 865     if ($location_of_buttons == 'bottom') {
 866         showComposeButtonRow();
 867     } else {
 868         echo '   <TR><TD COLSPAN=2 ALIGN=RIGHT>';
 869         echo '     <INPUT TYPE=SUBMIT NAME=send VALUE="' . _("Send") . '">';
 870         echo '     &nbsp;&nbsp;&nbsp;&nbsp;<BR><BR>';
 871         echo '   </TD></TR>' . "\n";
 872     }
 873
 874     /* This code is for attachments */
 875     echo '<table width="100%" cellpadding="0" cellspacing="4" align="center" border="0">';
 876     echo '   <tr><td>';
 877     echo '   <table width="100%" cellpadding="1" cellspacing="0" align="center"'.' border="0" bgcolor="'.$color[9].'">';
 878     echo '      <tr><td>';
 879     echo '      <table width="100%" cellpadding="3" cellspacing="0" align="center" border="0">';
 880
 881
 882     echo '   <TR>' . "\n" .
 883          '     <TD VALIGN=MIDDLE ALIGN=RIGHT>' . "\n" .
 884                 _("Attach:") .
 885          '      </TD>' . "\n" .
 886          '      <TD VALIGN=MIDDLE ALIGN=LEFT>' . "\n" .
 887          '      <INPUT NAME="attachfile" SIZE=48 TYPE="file">' . "\n" .
 888          '      &nbsp;&nbsp;<input type="submit" name="attach"' .
 889          ' value="' . _("Add") .'">' . "\n" .
 890          '     </TD>' . "\n" .
 891          '   </TR>' . "\n";
 892
 893
 894     $s_a = array();
 895     $hashed_attachment_dir = getHashedDir($username, $attachment_dir);
 896     foreach ($attachments as $key => $info) {
 897         if ($info['session'] == $session) {
 898            $attached_file = "$hashed_attachment_dir/$info[localfilename]";
 899            $s_a[] = '<input type="checkbox" name="delete[]" value="' . $key . "\">\n" .
 900                     $info['remotefilename'] . ' - ' . $info['type'] . ' (' .
 901                     show_readable_size( filesize( $attached_file ) ) . ")<br>\n";
 902         }
 903     }
 904     if (count($s_a)) {
 905        foreach ($s_a as $s) {
 906           echo '<tr><td align=left colspan="2" bgcolor="' . $color[0] . '">'.$s.'</td></tr>';
 907        }
 908        echo '<tr><td colspan="2"><input type="submit" name="do_delete" value="' .
 909             _("Delete selected attachments") . "\">\n" .
 910             '</td></tr>';
 911     }
 912     echo '      </table></td></tr>';
 913     echo '   </table>';
 914     echo '   </td></tr>';
 915
 916     /* End of attachment code */
 917     if ($compose_new_win == '1') {
 918         echo '</TABLE>'."\n";
 919     }
 920     echo '</TABLE>' . "\n";
 921
 922     echo '<input type="hidden" name="username" value="'. $username . "\">\n";
 923     echo '<input type=hidden name=action value=' . $action . ">\n";
 924     echo '<INPUT TYPE=hidden NAME=mailbox VALUE="' . htmlspecialchars($mailbox) .
 925          "\">\n" .
 926          '</FORM>';
 927     do_hook('compose_bottom');
 928     echo '</BODY></HTML>' . "\n";
 929 }
 930
 931
 932 function showComposeButtonRow() {
 933     global $use_javascript_addr_book, $save_as_draft,
 934         $default_use_priority, $mailprio, $default_use_mdn,
 935         $request_mdn, $request_dr,
 936         $data_dir, $username;
 937
 938     echo "  <TR><TD>\n</TD><TD>\n";
 939     if ($default_use_priority) {
 940         if(!isset($mailprio)) {
 941             $mailprio = "3";
 942     }
 943     echo _("Priority") .': <select name="mailprio">'.
 944          '<option value="1"'.($mailprio=='1'?' selected':'').'>'. _("High") .'</option>'.
 945          '<option value="3"'.($mailprio=='3'?' selected':'').'>'. _("Normal") .'</option>'.
 946          '<option value="5"'.($mailprio=='5'?' selected':'').'>'. _("Low").'</option>'.
 947          "</select>";
 948     }
 949     $mdn_user_support=getPref($data_dir, $username, 'mdn_user_support',$default_use_mdn);
 950     if ($default_use_mdn) {
 951         if ($mdn_user_support) {
 952             echo "\n\t". _("Receipt") .': '.
 953             '<input type="checkbox" name="request_mdn" value=1'.
 954                 ($request_mdn=='1'?' checked':'') .'>'. _("On Read").
 955             ' <input type="checkbox" name="request_dr" value=1'.
 956                 ($request_dr=='1'?' checked':'') .'>'. _("On Delivery");
 957         }
 958     }
 959
 960     echo "   </td></tr>\n   <TR><td>\n   </td><td>\n";
 961     echo "\n    <INPUT TYPE=SUBMIT NAME=\"sigappend\" VALUE=\"". _("Signature") . "\">\n";
 962     if ($use_javascript_addr_book) {
 963         echo "      <SCRIPT LANGUAGE=JavaScript><!--\n document.write(\"".
 964              "         <input type=button value=\\\""._("Addresses").
 965                               "\\\" onclick='javascript:open_abook();'>\");".
 966              "         // --></SCRIPT><NOSCRIPT>\n".
 967              "         <input type=submit name=\"html_addr_search\" value=\"".
 968                               _("Addresses")."\">".
 969              "      </NOSCRIPT>\n";
 970     } else {
 971         echo "      <input type=submit name=\"html_addr_search\" value=\"".
 972                               _("Addresses")."\">";
 973     }
 974
 975     if ($save_as_draft) {
 976         echo '<input type="submit" name ="draft" value="' . _("Save Draft") . "\">\n";
 977     }
 978
 979     echo "\n    <INPUT TYPE=SUBMIT NAME=send VALUE=\"". _("Send") . "\">\n";
 980     do_hook('compose_button_row');
 981
 982     echo "   </TD></TR>\n\n";
 983 }
 984
 985 function checkInput ($show) {
 986     /*
 987      * I implemented the $show variable because the error messages
 988      * were getting sent before the page header.  So, I check once
 989      * using $show=false, and then when i'm ready to display the error
 990      * message, show=true
 991      */
 992     global $body, $send_to, $subject, $color;
 993
 994     if ($send_to == "") {
 995         if ($show) {
 996             plain_error_message(_("You have not filled in the \"To:\" field."), $color);
 997         }
 998         return false;
 999     }
1000     return true;
1001 } /* function checkInput() */
1002
1003
1004 /* True if FAILURE */
1005 function saveAttachedFiles($session) {
1006     global $HTTP_POST_FILES, $attachment_dir, $attachments, $username,
1007            $data_dir;
1008
1009     $hashed_attachment_dir = getHashedDir($username, $attachment_dir);
1010     $localfilename = GenerateRandomString(32, '', 7);
1011     $full_localfilename = "$hashed_attachment_dir/$localfilename";
1012     while (file_exists($full_localfilename)) {
1013         $localfilename = GenerateRandomString(32, '', 7);
1014         $full_localfilename = "$hashed_attachment_dir/$localfilename";
1015     }
1016
1017     if (!@rename($HTTP_POST_FILES['attachfile']['tmp_name'], $full_localfilename)) {
1018         if (function_exists("move_uploaded_file")) {
1019                 if (!@move_uploaded_file($HTTP_POST_FILES['attachfile']['tmp_name'], $full_localfilename)) {
1020             return true;
1021                 }
1022         } else {
1023                 if (!@copy($HTTP_POST_FILES['attachfile']['tmp_name'], $full_localfilename)) {
1024                     return true;
1025                 }
1026         }
1027
1028     }
1029     $newAttachment['localfilename'] = $localfilename;
1030     $newAttachment['remotefilename'] = $HTTP_POST_FILES['attachfile']['name'];
1031     $newAttachment['type'] = strtolower($HTTP_POST_FILES['attachfile']['type']);
1032     $newAttachment['session'] = $session;
1033
1034     if ($newAttachment['type'] == "") {
1035          $newAttachment['type'] = 'application/octet-stream';
1036     }
1037     $attachments[] = $newAttachment;
1038     setPref($data_dir, $username, 'attachments', serialize($attachments));
1039 }
1040
1041
1042 function ClearAttachments($session)
1043 {
1044     global $username, $attachments, $attachment_dir, $data_dir;
1045     $hashed_attachment_dir = getHashedDir($username, $attachment_dir);
1046
1047     $rem_attachments = array();
1048     if (is_array($attachments)) {
1049         foreach ($attachments as $info) {
1050                 if ($info['session'] == $session) {
1051                 $attached_file = "$hashed_attachment_dir/$info[localfilename]";
1052                 if (file_exists($attached_file)) {
1053                         unlink($attached_file);
1054                 }
1055                 }
1056             else {
1057                     $rem_attachments[] = $info;
1058                 }
1059         }
1060     }
1061     $attachments = $rem_attachments;
1062     setPref($data_dir, $username, 'attachments', serialize($attachments));
1063 }
1064
1065
1066 function getReplyCitation($orig_from)
1067 {
1068     global $reply_citation_style, $reply_citation_start, $reply_citation_end;
1069
1070     /* First, return an empty string when no citation style selected. */
1071     if (($reply_citation_style == '') || ($reply_citation_style == 'none')) {
1072         return '';
1073     }
1074
1075     /* Make sure our final value isn't an empty string. */
1076     if ($orig_from == '') {
1077         return '';
1078     }
1079
1080     /* Otherwise, try to select the desired citation style. */
1081     switch ($reply_citation_style) {
1082     case 'author_said':
1083         $start = '';
1084         $end   = ' ' . _("said") . ':';
1085         break;
1086     case 'quote_who':
1087         $start = '<' . _("quote") . ' ' . _("who") . '="';
1088         $end   = '">';
1089         break;
1090     case 'user-defined':
1091         $start = $reply_citation_start .
1092                  ($reply_citation_start == '' ? '' : ' ');
1093         $end   = $reply_citation_end;
1094         break;
1095     default:
1096         return '';
1097     }
1098
1099     /* Build and return the citation string. */
1100     return ($start . $orig_from . $end . "\n");
1101 }
1102
1103 ?>