src/compose.php

   1 <?php
   2    /**
   3     ** compose.php
   4     **
   5     **  Copyright (c) 1999-2000 The SquirrelMail development team
   6     **  Licensed under the GNU GPL. For full terms see the file COPYING.
   7     **
   8     ** This code sends a mail.
   9     **
  10     ** There are 3 modes of operation:
  11     **  - Start new mail
  12     **  - Add an attachment
  13     **  - Send mail
  14     **/
  15
  16    session_start();
  17
  18    if (!isset($config_php))
  19       include("../config/config.php");
  20    if (!isset($strings_php))
  21       include("../functions/strings.php");
  22    if (!isset($page_header_php))
  23       include("../functions/page_header.php");
  24    if (!isset($imap_php))
  25       include("../functions/imap.php");
  26    if (!isset($date_php))
  27       include("../functions/date.php");
  28    if (!isset($mime_php))
  29       include("../functions/mime.php");
  30    if (!isset($smtp_php))
  31       include("../functions/smtp.php");
  32    if (!isset($display_messages_php))
  33       include("../functions/display_messages.php");
  34    if (!isset($auth_php))
  35       include ("../functions/auth.php");
  36    if (!isset($plugin_php))
  37       include ("../functions/plugin.php");
  38
  39    include("../src/load_prefs.php");
  40
  41    // This function is used when not sending or adding attachments
  42    function newMail () {
  43       global $forward_id, $imapConnection, $msg, $ent_num, $body_ary, $body,
  44          $reply_id, $send_to, $send_to_cc, $mailbox, $send_to_bcc, $editor_size;
  45
  46       $send_to = sqStripSlashes(decodeHeader($send_to));
  47       $send_to_cc = sqStripSlashes(decodeHeader($send_to_cc));
  48       $send_to_bcc = sqStripSlashes(decodeHeader($send_to_bcc));
  49
  50       if ($forward_id)
  51          $id = $forward_id;
  52       else if ($reply_id)
  53          $id = $reply_id;
  54
  55
  56       if ($id) {
  57          sqimap_mailbox_select($imapConnection, $mailbox);
  58          $message = sqimap_get_message($imapConnection, $id, $mailbox);
  59          $orig_header = $message->header;
  60          if ($ent_num)
  61             $message = getEntity($message, $ent_num);
  62
  63          if ($message->header->type0 == "text" || $message->header->type1 == "message") {
  64             if ($ent_num)
  65                $body = decodeBody(mime_fetch_body($imapConnection, $id, $ent_num), $message->header->encoding);
  66             else
  67                $body = decodeBody(mime_fetch_body($imapConnection, $id, 1), $message->header->encoding);
  68          } else {
  69             $body = "";
  70          }
  71
  72          if ($message->header->type1 == "html")
  73             $body = strip_tags($body);
  74
  75          $body_ary = explode("\n", $body);
  76          $body = "";
  77          for ($i=0; $i < count($body_ary); $i++) {
  78             sqWordWrap($body_ary[$i], $editor_size - 1);
  79             $body .= $body_ary[$i];
  80          }
  81          $body_ary = array();
  82          $body_ary = explode("\n", $body);
  83          $body = "";
  84          for ($i=0; $i < count($body_ary); $i++) {
  85             if ($i==0 && $forward_id) {
  86                $tmp = "-------- " . _("Original Message") . " --------\n";
  87                $tmp .= _("Subject") . ": " . $orig_header->subject . "\n";
  88                $tmp .= _("From") . ": " . $orig_header->from . "\n";
  89                $tmp .= _("To") . ": " . $orig_header->to[0] . "\n";
  90                if (count($orig_header->to) > 1) {
  91                   for ($x=1; $x < count($orig_header->to); $x++) {
  92                      $tmp .= "         " . $orig_header->to[$x] . "\n";
  93                   }
  94                }
  95                $tmp .= "\n" . $body_ary[$i];
  96             } else {
  97                $tmp = $body_ary[$i];
  98             }
  99             if ($forward_id)
 100                $body = "$body$tmp\n";
 101             else
 102                $body = "$body> $tmp\n";
 103          }
 104
 105          sqimap_mailbox_close($imapConnection);
 106          return $body;
 107       }
 108
 109       if (!$send_to) {
 110          $send_to = sqimap_find_email($send_to);
 111       }
 112
 113       /** This formats a CC string if they hit "reply all" **/
 114       if ($send_to_cc != "") {
 115          $send_to_cc = ereg_replace( '"[^"]*"', "", $send_to_cc);
 116          $send_to_cc = ereg_replace(";", ",", $send_to_cc);
 117          $sendcc = explode(",", $send_to_cc);
 118          $send_to_cc = "";
 119
 120          for ($i = 0; $i < count($sendcc); $i++) {
 121             $sendcc[$i] = trim($sendcc[$i]);
 122             if ($sendcc[$i] == "")
 123                continue;
 124
 125             $sendcc[$i] = sqimap_find_email($sendcc[$i]);
 126             $whofrom = sqimap_find_displayable_name($msg["HEADER"]["FROM"]);
 127             $whoreplyto = sqimap_find_email($msg["HEADER"]["REPLYTO"]);
 128
 129             if ((strtolower(trim($sendcc[$i])) != strtolower(trim($whofrom))) &&
 130                 (strtolower(trim($sendcc[$i])) != strtolower(trim($whoreplyto))) &&
 131                 (trim($sendcc[$i]) != "")) {
 132                $send_to_cc .= trim($sendcc[$i]) . ", ";
 133             }
 134          }
 135          $send_to_cc = trim($send_to_cc);
 136          if (substr($send_to_cc, -1) == ",") {
 137             $send_to_cc = substr($send_to_cc, 0, strlen($send_to_cc) - 1);
 138          }
 139       }
 140    } // function newMail()
 141
 142    function showInputForm () {
 143       global $send_to, $send_to_cc, $reply_subj, $forward_subj, $body,
 144          $passed_body, $color, $use_signature, $signature, $editor_size,
 145          $attachments, $subject, $newmail, $use_javascript_addr_book,
 146          $send_to_bcc, $reply_id, $mailbox, $from_htmladdr_search;
 147
 148       $subject = sqStripSlashes(decodeHeader($subject));
 149       $reply_subj = decodeHeader($reply_subj);
 150       $forward_subj = decodeHeader($forward_subj);
 151       $body = sqStripSlashes($body);
 152
 153       if ($use_javascript_addr_book) {
 154          echo "\n<SCRIPT LANGUAGE=JavaScript><!--\n";
 155          echo "function open_abook() { \n";
 156          echo "  var nwin = window.open(\"addrbook_popup.php\",\"abookpopup\",";
 157          echo "\"width=670,height=300,resizable=yes,scrollbars=yes\");\n";
 158          echo "  if((!nwin.opener) && (document.windows != null))\n";
 159          echo "    nwin.opener = document.windows;\n";
 160          echo "}\n";
 161          echo "// --></SCRIPT>\n\n";
 162       }
 163
 164       echo "\n<FORM name=compose action=\"compose.php\" METHOD=POST ENCTYPE=\"multipart/form-data\">\n";
 165       //echo "\n<FORM name=compose action=\"compose.php\" METHOD=POST>\n";
 166       if ($reply_id) {
 167          echo "<input type=hidden name=reply_id value=$reply_id>\n";
 168       }
 169       printf("<INPUT TYPE=hidden NAME=mailbox VALUE=\"%s\">\n", htmlspecialchars($mailbox));
 170       echo "<TABLE WIDTH=\"100%\" ALIGN=center CELLSPACING=0 BORDER=0>\n";
 171       echo "   <TR>\n";
 172       echo "      <TD BGCOLOR=\"$color[4]\" ALIGN=RIGHT>\n";
 173       echo _("To:");
 174       echo "      </TD><TD BGCOLOR=\"$color[4]\">\n";
 175       printf("         <INPUT TYPE=text NAME=\"send_to\" VALUE=\"%s\" SIZE=60><BR>\n",
 176              htmlspecialchars($send_to));
 177       echo "      </TD>\n";
 178       echo "   </TR>\n";
 179       echo "   <TR>\n";
 180       echo "      <TD BGCOLOR=\"$color[4]\" ALIGN=RIGHT>\n";
 181       echo _("CC:");
 182       echo "      </TD><TD BGCOLOR=\"$color[4]\" ALIGN=LEFT>\n";
 183       printf("         <INPUT TYPE=text NAME=\"send_to_cc\" SIZE=60 VALUE=\"%s\"><BR>\n",
 184              htmlspecialchars($send_to_cc));
 185       echo "      </TD>\n";
 186       echo "   </TR>\n";
 187       echo "   <TR>\n";
 188       echo "      <TD BGCOLOR=\"$color[4]\" ALIGN=RIGHT>\n";
 189       echo _("BCC:");
 190       echo "      </TD><TD BGCOLOR=\"$color[4]\" ALIGN=LEFT>\n";
 191       printf("         <INPUT TYPE=text NAME=\"send_to_bcc\" VALUE=\"%s\" SIZE=60><BR>\n",
 192              htmlspecialchars($send_to_bcc));
 193       echo "</TD></TR>\n";
 194
 195       echo "   <TR>\n";
 196       echo "      <TD BGCOLOR=\"$color[4]\" ALIGN=RIGHT>\n";
 197       echo _("Subject:");
 198       echo "      </TD><TD BGCOLOR=\"$color[4]\" ALIGN=LEFT>\n";
 199       if ($reply_subj) {
 200          $reply_subj = str_replace("\"", "'", $reply_subj);
 201          $reply_subj = sqStripSlashes($reply_subj);
 202          $reply_subj = trim($reply_subj);
 203          if (substr(strtolower($reply_subj), 0, 3) != "re:")
 204             $reply_subj = "Re: $reply_subj";
 205          printf("         <INPUT TYPE=text NAME=subject SIZE=60 VALUE=\"%s\">",
 206                 htmlspecialchars($reply_subj));
 207       } else if ($forward_subj) {
 208          $forward_subj = str_replace("\"", "'", $forward_subj);
 209          $forward_subj = sqStripSlashes($forward_subj);
 210          $forward_subj = trim($forward_subj);
 211          if ((substr(strtolower($forward_subj), 0, 4) != "fwd:") &&
 212              (substr(strtolower($forward_subj), 0, 5) != "[fwd:") &&
 213              (substr(strtolower($forward_subj), 0, 6) != "[ fwd:"))
 214             $forward_subj = "[Fwd: $forward_subj]";
 215          printf("         <INPUT TYPE=text NAME=subject SIZE=60 VALUE=\"%s\">",
 216                 htmlspecialchars($forward_subj));
 217       } else {
 218           printf("         <INPUT TYPE=text NAME=subject SIZE=60 VALUE=\"%s\">",
 219                 htmlspecialchars($subject));
 220       }
 221       echo "</td></tr>\n\n";
 222
 223       echo "   <TR><td>\n   </td><td>\n";
 224       if ($use_javascript_addr_book) {
 225          echo "      <SCRIPT LANGUAGE=JavaScript><!--\n document.write(\"";
 226          echo "         <input type=button value=\\\""._("Addresses")."\\\" onclick='javascript:open_abook();'>\");";
 227          echo "         // --></SCRIPT><NOSCRIPT>\n";
 228          echo "         <input type=submit name=\"html_addr_search\" value=\""._("Addresses")."\">";
 229          echo "      </NOSCRIPT>\n";
 230       } else {
 231          echo "      <input type=submit name=\"html_addr_search\" value=\""._("Addresses")."\">";
 232       }
 233       echo "\n    <INPUT TYPE=SUBMIT NAME=send VALUE=\"". _("Send") . "\">\n";
 234
 235       do_hook("compose_button_row");
 236
 237       echo "   </TD>\n";
 238       echo "   </TR>\n\n";
 239
 240
 241       echo "   <TR>\n";
 242       echo "      <TD BGCOLOR=\"$color[4]\" COLSPAN=2>\n";
 243       echo "         &nbsp;&nbsp;<TEXTAREA NAME=body ROWS=20 COLS=\"$editor_size\" WRAP=HARD>";
 244       if ($use_signature == true && $newmail == true && !isset($from_htmladdr_search)) {
 245          echo (htmlspecialchars($body)) . "\n\n-- \n" . htmlspecialchars($signature);
 246       } else {
 247          echo (htmlspecialchars($body));
 248       }
 249       echo "</TEXTAREA><BR>\n";
 250       echo "      </TD>\n";
 251       echo "   </TR>\n";
 252       echo "   <TR><TD COLSPAN=2 ALIGN=CENTER><INPUT TYPE=SUBMIT NAME=send VALUE=\"";
 253       echo _("Send");
 254       echo "\"></TD></TR>\n";
 255
 256       // This code is for attachments
 257       echo "   <tr>\n";
 258       echo "     <TD BGCOLOR=\"$color[0]\" VALIGN=TOP ALIGN=RIGHT>\n";
 259       echo "      <SMALL><BR></SMALL>"._("Attach:");
 260       echo "      </td><td ALIGN=left BGCOLOR=\"$color[0]\">\n";
 261       //      echo "      <INPUT TYPE=\"hidden\" name=\"MAX_FILE_SIZE\"\n";
 262       //      echo "      value=\"10000\">\n";
 263       echo "      <INPUT NAME=\"attachfile\" SIZE=48 TYPE=\"file\">\n";
 264       echo "      &nbsp;&nbsp;<input type=\"submit\" name=\"attach\"";
 265       echo " value=\"" . _("Add") ."\">\n";
 266       echo "     </td>\n";
 267       echo "   </tr>\n";
 268       if (isset($attachments) && count($attachments)>0) {
 269          echo "<tr><td bgcolor=\"$color[0]\" align=right>\n";
 270          echo "&nbsp;";
 271          echo "</td><td align=left bgcolor=\"$color[0]\">";
 272          while (list($localname, $remotename) = each($attachments)) {
 273             echo "<input type=\"checkbox\" name=\"delete[]\" value=\"$localname\">\n";
 274             echo "$remotename <input type=\"hidden\" name=\"attachments[$localname]\" value=\"$remotename\"><br>\n";
 275          }
 276
 277          echo "<input type=\"submit\" name=\"do_delete\" value=\""._("Delete selected attachments")."\">\n";
 278          echo "</td></tr>";
 279       }
 280       // End of attachment code
 281
 282       echo "</TABLE>\n";
 283       echo "</FORM>";
 284       do_hook("compose_bottom");
 285    }
 286
 287    function showSentForm () {
 288       echo "<BR><BR><BR><CENTER><B>Message Sent!</B><BR><BR>";
 289       echo "You will be automatically forwarded.<BR>If not, <A HREF=\"right_main.php\">click here</A>";
 290       echo "</CENTER>";
 291    }
 292
 293    function checkInput ($show) {
 294       /** I implemented the $show variable because the error messages
 295           were getting sent before the page header.  So, I check once
 296           using $show=false, and then when i'm ready to display the
 297           error message, show=true **/
 298       global $body, $send_to, $subject, $color;
 299
 300       if ($send_to == "") {
 301          if ($show)
 302             plain_error_message(_("You have not filled in the \"To:\" field."), $color);
 303          return false;
 304       }
 305       return true;
 306    } // function checkInput()
 307
 308
 309    if (($mailbox == "") || ($mailbox == "None"))
 310       $mailbox = "INBOX";
 311
 312    if(isset($send)) {
 313       if (checkInput(false)) {
 314          $urlMailbox = urlencode ($mailbox);
 315          sendMessage($send_to, $send_to_cc, $send_to_bcc, $subject, $body, $reply_id);
 316          header ("Location: right_main.php?mailbox=$urlMailbox&sort=$sort&startMessage=1");
 317       } else {
 318          $imapConnection = sqimap_login($username, $key, $imapServerAddress, $imapPort, 0);
 319          displayPageHeader($color, $mailbox);
 320          checkInput(true);
 321
 322          showInputForm();
 323          sqimap_logout($imapConnection);
 324       }
 325    } else if ($html_addr_search_done) {
 326       is_logged_in();
 327       displayPageHeader($color, $mailbox);
 328
 329       $send_to = sqStripSlashes($send_to);
 330       $send_to_cc = sqStripSlashes($send_to_cc);
 331       $send_to_bcc = sqStripSlashes($send_to_bcc);
 332
 333       for ($i=0; $i < count($send_to_search); $i++) {
 334          if ($send_to)
 335             $send_to .= ", ";
 336          $send_to .= $send_to_search[$i];
 337       }
 338
 339       for ($i=0; $i < count($send_to_cc_search); $i++) {
 340          if ($send_to_cc)
 341             $send_to_cc .= ", ";
 342          $send_to_cc .= $send_to_cc_search[$i];
 343       }
 344
 345       showInputForm();
 346    } else if ($html_addr_search) {
 347       // I am using an include so as to elminiate an extra unnecessary click.  If you
 348       // can think of a better way, please implement it.
 349       include ("addrbook_search_html.php");
 350    } else if (isset($attach)) {
 351       is_logged_in();
 352       displayPageHeader($color, $mailbox);
 353
 354       $localfilename = md5($HTTP_POST_FILES['attachfile']['tmp_name'].", ".$HTTP_POST_FILES['attachfile']['name'].", $REMOTE_IP, $REMOTE_PORT, $UNIQUE_ID, and everything else that may add entropy");
 355 //      $localfilename = $localfilename; // ??
 356
 357       // Put the file in a better place
 358       // This shouldn't be here... Ondrej Sury <ondrej@sury.cz>
 359       //$tmp=explode('/',$attachfile);
 360       //$attachfile=$tmp[count($tmp)-1];
 361       //$attachfile=ereg_replace('\.{2,}','',$attachfile);
 362
 363       //error_reporting(0); // Rename will produce error output if it fails
 364       //if (!rename($attachfile, $attachment_dir.$localfilename)) {
 365       //   if (!copy($attachfile, $attachment_dir.$localfilename)) {
 366       if (!@rename($HTTP_POST_FILES['attachfile']['tmp_name'], $attachment_dir.$localfilename)) {
 367          if (!@copy($HTTP_POST_FILES['attachfile']['tmp_name'], $attachment_dir.$localfilename)) {
 368             plain_error_message(_("Could not move/copy file. File not attached"), $color);
 369             $failed = true;
 370          }
 371       }
 372       // If it still exists, PHP will remove the original file
 373
 374       if (!$failed) {
 375          // Write information about the file
 376          $fp = fopen ($attachment_dir.$localfilename.".info", "w");
 377          fputs ($fp, $HTTP_POST_FILES['attachfile']['type']."\n".$HTTP_POST_FILES['attachfile']['name']."\n");
 378          fclose ($fp);
 379
 380          $attachments[$localfilename] = $HTTP_POST_FILES['attachfile']['name'];
 381       }
 382
 383       showInputForm();
 384    } else if (isset($do_delete)) {
 385       is_logged_in();
 386       displayPageHeader($color, $mailbox);
 387
 388       while (list($lkey, $localname) = each($delete)) {
 389          array_splice ($attachments, $lkey, 1);
 390          unlink ($attachment_dir.$localname);
 391          unlink ($attachment_dir.$localname.".info");
 392       }
 393
 394       showInputForm();
 395    } else {
 396       $imapConnection = sqimap_login($username, $key, $imapServerAddress, $imapPort, 0);
 397       displayPageHeader($color, $mailbox);
 398
 399       $newmail = true;
 400       newMail();
 401       showInputForm();
 402       sqimap_logout($imapConnection);
 403    }
 404 ?>