src/compose.php

   1 <?php
   2 /**
   3  * compose.php
   4  *
   5  * This code sends a mail.
   6  *
   7  * There are 4 modes of operation:
   8  *    - Start new mail
   9  *    - Add an attachment
  10  *    - Send mail
  11  *    - Save As Draft
  12  *
  13  * @copyright &copy; 1999-2009 The SquirrelMail Project Team
  14  * @license http://opensource.org/licenses/gpl-license.php GNU Public License
  15  * @version $Id$
  16  * @package squirrelmail
  17  */
  18
  19 /** This is the compose page */
  20 define('PAGE_NAME', 'compose');
  21
  22 /**
  23  * Include the SquirrelMail initialization file.
  24  */
  25 require('../include/init.php');
  26
  27 /* If email_address not set and admin wants us to ask user for it,
  28  * redirect to options page. */
  29 if ( $ask_user_info && getPref($data_dir, $username,'email_address') == "" ) {
  30     header("Location: " . get_location() . "/options.php?optpage=personal");
  31     exit;
  32 }
  33
  34 /* SquirrelMail required files. */
  35 require_once(SM_PATH . 'functions/imap_general.php');
  36 require_once(SM_PATH . 'functions/imap_messages.php');
  37 require_once(SM_PATH . 'functions/date.php');
  38 require_once(SM_PATH . 'functions/mime.php');
  39 require_once(SM_PATH . 'functions/compose.php');
  40 require_once(SM_PATH . 'class/deliver/Deliver.class.php');
  41 require_once(SM_PATH . 'functions/addressbook.php');
  42 require_once(SM_PATH . 'functions/forms.php');
  43 require_once(SM_PATH . 'functions/identity.php');
  44
  45 /* --------------------- Get globals ------------------------------------- */
  46
  47 /** SESSION VARS */
  48 sqgetGlobalVar('delimiter', $delimiter,     SQ_SESSION);
  49
  50 sqgetGlobalVar('delayed_errors',  $delayed_errors,  SQ_SESSION);
  51 sqgetGlobalVar('composesession',    $composesession,    SQ_SESSION);
  52 sqgetGlobalVar('compose_messages',  $compose_messages,  SQ_SESSION);
  53
  54 // compose_messages only useful in SESSION when a forward-as-attachment
  55 // has been preconstructed for us and passed in via that mechanism; once
  56 // we have it, we can clear it from the SESSION
  57 sqsession_unregister('compose_messages');
  58
  59 // Turn on delayed error handling in case we wind up redirecting below
  60 $oErrorHandler->setDelayedErrors(true);
  61
  62 /** SESSION/POST/GET VARS */
  63 sqgetGlobalVar('send_button_count', $send_button_count, SQ_POST, 1, SQ_TYPE_INT);
  64 for ($i = 1; $i <= $send_button_count; $i++)
  65    if (sqgetGlobalVar('send' . $i, $send, SQ_POST)) break;
  66 // Send can only be achieved by setting $_POST var. If Send = true then
  67 // retrieve other form fields from $_POST
  68 if (isset($send) && $send) {
  69     $SQ_GLOBAL = SQ_POST;
  70 } else {
  71     $SQ_GLOBAL = SQ_FORM;
  72 }
  73 sqgetGlobalVar('session',$session, $SQ_GLOBAL);
  74 sqgetGlobalVar('mailbox',$mailbox, $SQ_GLOBAL);
  75 if(!sqgetGlobalVar('identity',$identity, $SQ_GLOBAL)) {
  76     $identity=0;
  77 }
  78 sqgetGlobalVar('send_to',$send_to, $SQ_GLOBAL);
  79 sqgetGlobalVar('send_to_cc',$send_to_cc, $SQ_GLOBAL);
  80 sqgetGlobalVar('send_to_bcc',$send_to_bcc, $SQ_GLOBAL);
  81 sqgetGlobalVar('subject',$subject, $SQ_GLOBAL);
  82 sqgetGlobalVar('body',$body, $SQ_GLOBAL);
  83 sqgetGlobalVar('mailprio',$mailprio, $SQ_GLOBAL);
  84 sqgetGlobalVar('request_mdn',$request_mdn, $SQ_GLOBAL);
  85 sqgetGlobalVar('request_dr',$request_dr, $SQ_GLOBAL);
  86 sqgetGlobalVar('html_addr_search',$html_addr_search, $SQ_GLOBAL);
  87 sqgetGlobalVar('mail_sent',$mail_sent, $SQ_GLOBAL);
  88 sqgetGlobalVar('passed_id',$passed_id, $SQ_GLOBAL, NULL, SQ_TYPE_BIGINT);
  89 sqgetGlobalVar('passed_ent_id',$passed_ent_id, $SQ_GLOBAL);
  90 sqgetGlobalVar('fwduid',$fwduid, $SQ_GLOBAL, '');
  91
  92 sqgetGlobalVar('attach',$attach, SQ_POST);
  93 sqgetGlobalVar('draft',$draft, SQ_POST);
  94 sqgetGlobalVar('draft_id',$draft_id, $SQ_GLOBAL);
  95 sqgetGlobalVar('ent_num',$ent_num, $SQ_GLOBAL);
  96 sqgetGlobalVar('saved_draft',$saved_draft, SQ_FORM);
  97
  98 if ( sqgetGlobalVar('delete_draft',$delete_draft) ) {
  99     $delete_draft = (int)$delete_draft;
 100 }
 101
 102 if ( sqgetGlobalVar('startMessage',$startMessage) ) {
 103     $startMessage = (int)$startMessage;
 104 } else {
 105     $startMessage = 1;
 106 }
 107
 108
 109 /** POST VARS */
 110 sqgetGlobalVar('sigappend',             $sigappend,                 SQ_POST);
 111 sqgetGlobalVar('from_htmladdr_search',  $from_htmladdr_search,      SQ_POST);
 112 sqgetGlobalVar('addr_search_done',      $html_addr_search_done,     SQ_POST);
 113 sqgetGlobalVar('addr_search_cancel',    $html_addr_search_cancel,   SQ_POST);
 114 sqgetGlobalVar('send_to_search',        $send_to_search,            SQ_POST);
 115 sqgetGlobalVar('do_delete',             $do_delete,                 SQ_POST);
 116 sqgetGlobalVar('delete',                $delete,                    SQ_POST);
 117 sqgetGlobalVar('attachments',           $attachments,               SQ_POST);
 118 if ( sqgetGlobalVar('return', $temp, SQ_POST) ) {
 119     $html_addr_search_done = 'Use Addresses';
 120 }
 121
 122 /** GET VARS */
 123 if ( sqgetGlobalVar('account', $temp,  SQ_GET) ) {
 124     $iAccount = (int) $temp;
 125 } else {
 126     $iAccount = 0;
 127 }
 128
 129
 130 /** get smaction */
 131 if ( !sqgetGlobalVar('smaction',$action) )
 132 {
 133     if ( sqgetGlobalVar('smaction_reply',$tmp) )      $action = 'reply';
 134     if ( sqgetGlobalVar('smaction_reply_all',$tmp) )  $action = 'reply_all';
 135     if ( sqgetGlobalVar('smaction_forward',$tmp) )    $action = 'forward';
 136     if ( sqgetGlobalVar('smaction_attache',$tmp) )    $action = 'forward_as_attachment';
 137     if ( sqgetGlobalVar('smaction_draft',$tmp) )      $action = 'draft';
 138     if ( sqgetGlobalVar('smaction_edit_new',$tmp) )   $action = 'edit_as_new';
 139 }
 140
 141 /**
 142  * Here we decode the data passed in from mailto.php.
 143  */
 144 if ( sqgetGlobalVar('mailtodata', $mailtodata, SQ_GET) ) {
 145     $trtable = array('to'       => 'send_to',
 146                  'cc'           => 'send_to_cc',
 147                  'bcc'          => 'send_to_bcc',
 148                  'body'         => 'body',
 149                  'subject'      => 'subject');
 150     $mtdata = unserialize($mailtodata);
 151
 152     foreach ($trtable as $f => $t) {
 153         if ( !empty($mtdata[$f]) ) {
 154             $$t = $mtdata[$f];
 155         }
 156     }
 157     unset($mailtodata,$mtdata, $trtable);
 158 }
 159
 160 /* Location (For HTTP 1.1 header("Location: ...") redirects) */
 161 $location = get_location();
 162 /* Identities (fetch only once) */
 163 $idents = get_identities();
 164
 165 /* --------------------- Specific Functions ------------------------------ */
 166
 167 function replyAllString($header) {
 168     global $include_self_reply_all, $idents;
 169     $excl_ar = array();
 170     /**
 171      * 1) Remove the addresses we'll be sending the message 'to'
 172      */
 173     if (isset($header->reply_to)) {
 174         $excl_ar = $header->getAddr_a('reply_to');
 175     }
 176     /**
 177      * 2) Remove our identities from the CC list (they still can be in the
 178      * TO list) only if $include_self_reply_all is turned off
 179      */
 180     if (!$include_self_reply_all) {
 181         foreach($idents as $id) {
 182             $excl_ar[strtolower(trim($id['email_address']))] = '';
 183         }
 184     }
 185
 186     /**
 187      * 3) get the addresses.
 188      */
 189     $url_replytoall_ar = $header->getAddr_a(array('to','cc'), $excl_ar);
 190
 191     /**
 192      * 4) generate the string.
 193      */
 194     $url_replytoallcc = '';
 195     foreach( $url_replytoall_ar as $email => $personal) {
 196         if ($personal) {
 197             // if personal name contains address separator then surround
 198             // the personal name with double quotes.
 199             if (strpos($personal,',') !== false) {
 200                 $personal = '"'.$personal.'"';
 201             }
 202             $url_replytoallcc .= ", $personal <$email>";
 203         } else {
 204             $url_replytoallcc .= ', '. $email;
 205         }
 206     }
 207     $url_replytoallcc = substr($url_replytoallcc,2);
 208
 209     return $url_replytoallcc;
 210 }
 211
 212 /**
 213  * creates top line in reply citations
 214  *
 215  * Line style depends on user preferences.
 216  * $orig_date argument is available only from 1.4.3 and 1.5.1 version.
 217  * @param object $orig_from From: header object.
 218  * @param integer $orig_date email's timestamp
 219  * @return string reply citation
 220  */
 221 function getReplyCitation($orig_from, $orig_date) {
 222     global $reply_citation_style, $reply_citation_start, $reply_citation_end;
 223
 224     if (!is_object($orig_from)) {
 225         $sOrig_from = '';
 226     } else {
 227         $sOrig_from = decodeHeader($orig_from->getAddress(false),false,false,true);
 228     }
 229
 230     /* First, return an empty string when no citation style selected. */
 231     if (($reply_citation_style == '') || ($reply_citation_style == 'none')) {
 232         return '';
 233     }
 234
 235     /* Make sure our final value isn't an empty string. */
 236     if ($sOrig_from == '') {
 237         return '';
 238     }
 239
 240     /* Otherwise, try to select the desired citation style. */
 241     switch ($reply_citation_style) {
 242     case 'author_said':
 243         // i18n: %s is for author's name
 244         $full_reply_citation = sprintf(_("%s wrote:"),$sOrig_from);
 245         break;
 246     case 'quote_who':
 247         $start = '<quote who="';
 248         $end   = '">';
 249         $full_reply_citation = $start . $sOrig_from . $end;
 250         break;
 251     case 'date_time_author':
 252         // i18n:
 253         // The first %s is for date string, the second %s is for author's name.
 254         // The date uses formating from "D, F j, Y g:i a" and "D, F j, Y H:i"
 255         // translations.
 256         // Example string:
 257         // "On Sat, December 24, 2004 23:59, Santa wrote:"
 258         // If you have to put author's name in front of date string, check comments about
 259         // argument swapping at http://php.net/sprintf
 260         $full_reply_citation = sprintf(_("On %s, %s wrote:"), getLongDateString($orig_date), $sOrig_from);
 261         break;
 262     case 'user-defined':
 263         $start = $reply_citation_start .
 264             ($reply_citation_start == '' ? '' : ' ');
 265         $end   = $reply_citation_end;
 266         $full_reply_citation = $start . $sOrig_from . $end;
 267         break;
 268     default:
 269         return '';
 270     }
 271
 272     /* Add line feed and return the citation string. */
 273     return ($full_reply_citation . "\n");
 274 }
 275
 276 /**
 277  * Creates header fields in forwarded email body
 278  *
 279  * $default_charset global must be set correctly before you call this function.
 280  * @param object $orig_header
 281  * @return $string
 282  */
 283 function getforwardHeader($orig_header) {
 284     global $editor_size, $default_charset;
 285
 286     // using own strlen function in order to detect correct string length
 287     $display = array( _("Subject") => sq_strlen(_("Subject"),$default_charset),
 288             _("From")    => sq_strlen(_("From"),$default_charset),
 289             _("Date")    => sq_strlen(_("Date"),$default_charset),
 290             _("To")      => sq_strlen(_("To"),$default_charset),
 291             _("Cc")      => sq_strlen(_("Cc"),$default_charset) );
 292     $maxsize = max($display);
 293     $indent = str_pad('',$maxsize+2);
 294     foreach($display as $key => $val) {
 295         $display[$key] = $key .': '. str_pad('', $maxsize - $val);
 296     }
 297     $from = decodeHeader($orig_header->getAddr_s('from',"\n$indent"),false,false,true);
 298     $from = str_replace('&nbsp;',' ',$from);
 299     $to = decodeHeader($orig_header->getAddr_s('to',"\n$indent"),false,false,true);
 300     $to = str_replace('&nbsp;',' ',$to);
 301     $subject = decodeHeader($orig_header->subject,false,false,true);
 302     $subject = str_replace('&nbsp;',' ',$subject);
 303
 304     // using own str_pad function in order to create correct string pad
 305     $bodyTop =  sq_str_pad(' '._("Original Message").' ',$editor_size -2,'-',STR_PAD_BOTH,$default_charset) .
 306         "\n". $display[_("Subject")] . $subject . "\n" .
 307         $display[_("From")] . $from . "\n" .
 308         $display[_("Date")] . getLongDateString( $orig_header->date, $orig_header->date_unparsed ). "\n" .
 309         $display[_("To")] . $to . "\n";
 310     if ($orig_header->cc != array() && $orig_header->cc !='') {
 311         $cc = decodeHeader($orig_header->getAddr_s('cc',"\n$indent"),false,false,true);
 312         $cc = str_replace('&nbsp;',' ',$cc);
 313         $bodyTop .= $display[_("Cc")] .$cc . "\n";
 314     }
 315     $bodyTop .= str_pad('', $editor_size -2 , '-') .
 316         "\n\n";
 317     return $bodyTop;
 318 }
 319 /* ----------------------------------------------------------------------- */
 320
 321 /*
 322  * If the session is expired during a post this restores the compose session
 323  * vars.
 324  */
 325 $session_expired = false;
 326 if (sqsession_is_registered('session_expired_post')) {
 327     sqgetGlobalVar('session_expired_post', $session_expired_post, SQ_SESSION);
 328     /*
 329      * extra check for username so we don't display previous post data from
 330      * another user during this session.
 331      */
 332     if (!empty($session_expired_post['username'])
 333      && $session_expired_post['username'] == $username) {
 334         // these are the vars that we can set from the expired composed session
 335         $compo_var_list = array ('send_to', 'send_to_cc', 'body',
 336             'startMessage', 'passed_body', 'use_signature', 'signature',
 337             'subject', 'newmail', 'send_to_bcc', 'passed_id', 'mailbox',
 338             'from_htmladdr_search', 'identity', 'draft_id', 'delete_draft',
 339             'mailprio', 'edit_as_new', 'attachments', 'composesession',
 340             'request_mdn', 'request_dr', 'fwduid');
 341
 342         foreach ($compo_var_list as $var) {
 343             if ( isset($session_expired_post[$var]) && !isset($$var) ) {
 344                 $$var = $session_expired_post[$var];
 345             }
 346         }
 347
 348         if (!empty($attachments))
 349             $attachments = unserialize(urldecode($attachments));
 350
 351         sqsession_register($composesession,'composesession');
 352
 353         if (isset($send)) {
 354             unset($send);
 355         }
 356         $session_expired = true;
 357     }
 358     unset($session_expired_post);
 359     sqsession_unregister('session_expired_post');
 360     session_write_close();
 361     if (!isset($mailbox)) {
 362         $mailbox = '';
 363     }
 364     if ($compose_new_win == '1') {
 365         compose_Header($color, $mailbox);
 366     } else {
 367         $sHeaderJs = (isset($sHeaderJs)) ? $sHeaderJs : '';
 368         if (strpos($action, 'reply') !== false && $reply_focus) {
 369             $sOnload = 'checkForm(\''.$replyfocus.'\');';
 370         } else {
 371             $sOnload = 'checkForm();';
 372         }
 373         displayPageHeader($color, $mailbox,$sHeaderJs,$sOnload);
 374     }
 375     showInputForm($session, false);
 376     exit();
 377 }
 378
 379 if (!isset($composesession)) {
 380     $composesession = 0;
 381     sqsession_register(0,'composesession');
 382 } else {
 383     $composesession = (int)$composesession;
 384 }
 385
 386 if (!isset($session) || (isset($newmessage) && $newmessage)) {
 387     sqsession_unregister('composesession');
 388     $session = "$composesession" +1;
 389     $composesession = $session;
 390     sqsession_register($composesession,'composesession');
 391 }
 392 if (!empty($compose_messages[$session])) {
 393     $composeMessage = $compose_messages[$session];
 394 } else {
 395     $composeMessage = new Message();
 396     $rfc822_header = new Rfc822Header();
 397     $composeMessage->rfc822_header = $rfc822_header;
 398     $composeMessage->reply_rfc822_header = '';
 399 }
 400
 401 // re-add attachments that were already in this message
 402 // FIXME: note that technically this is very bad form -
 403 // should never directly manipulate an object like this
 404 if (!empty($attachments)) {
 405     $attachments = unserialize(urldecode($attachments));
 406     if (!empty($attachments) && is_array($attachments))
 407         $composeMessage->entities = $attachments;
 408 }
 409
 410 if (empty($mailbox)) {
 411     $mailbox = 'INBOX';
 412 }
 413
 414 if ($draft) {
 415     /*
 416      * Set $default_charset to correspond with the user's selection
 417      * of language interface.
 418      */
 419     set_my_charset();
 420     if (! deliverMessage($composeMessage, true)) {
 421         showInputForm($session);
 422         exit();
 423     } else {
 424         $draft_message = _("Draft Email Saved");
 425         /* If this is a resumed draft, then delete the original */
 426         if(isset($delete_draft)) {
 427             $imap_stream = sqimap_login($username, false, $imapServerAddress, $imapPort, false);
 428             sqimap_mailbox_select($imap_stream, $draft_folder);
 429             // force bypass_trash=true because message should be saved when deliverMessage() returns true.
 430             // in current implementation of sqimap_msgs_list_flag() single message id can
 431             // be submitted as string. docs state that it should be array.
 432             sqimap_msgs_list_delete($imap_stream, $draft_folder, $delete_draft, true);
 433             if ($auto_expunge) {
 434                 sqimap_mailbox_expunge($imap_stream, $draft_folder, true);
 435             }
 436             sqimap_logout($imap_stream);
 437         }
 438
 439         $oErrorHandler->saveDelayedErrors();
 440         session_write_close();
 441
 442         if ($compose_new_win == '1') {
 443             if ( !isset($pageheader_sent) || !$pageheader_sent ) {
 444                 header("Location: $location/compose.php?saved_draft=yes&session=$composesession");
 445             } else {
 446 //FIXME: DON'T ECHO HTML FROM CORE!
 447                 echo '   <br><br><div style="text-align: center;"><a href="' . $location
 448                     . '/compose.php?saved_sent=yes&amp;session=' . $composesession . '">'
 449                     . _("Return") . '</a></div>';
 450             }
 451             exit();
 452         } else {
 453             if ( !isset($pageheader_sent) || !$pageheader_sent ) {
 454                 header("Location: $location/right_main.php?mailbox=" . urlencode($draft_folder) .
 455                    "&startMessage=1&note=".urlencode($draft_message));
 456             } else {
 457 //FIXME: DON'T ECHO HTML FROM CORE!
 458                 echo '   <br><br><div style="text-align: center;"><a href="' . $location
 459                     . '/right_main.php?mailbox=' . urlencode($draft_folder)
 460                     . '&amp;startMessage=1&amp;note=' . urlencode($draft_message) .'">'
 461                     . _("Return") . '</a></div>';
 462             }
 463             exit();
 464         }
 465     }
 466 }
 467
 468 if ($send) {
 469     if (isset($_FILES['attachfile']) &&
 470             $_FILES['attachfile']['tmp_name'] &&
 471             $_FILES['attachfile']['tmp_name'] != 'none') {
 472         $AttachFailure = saveAttachedFiles($session);
 473     }
 474     if (checkInput(false) && !isset($AttachFailure)) {
 475         if ($mailbox == "All Folders") {
 476             /* We entered compose via the search results page */
 477             $mailbox = 'INBOX'; /* Send 'em to INBOX, that's safe enough */
 478         }
 479         $urlMailbox = urlencode($mailbox);
 480         if (! isset($passed_id)) {
 481             $passed_id = 0;
 482         }
 483         /**
 484          * Set $default_charset to correspond with the user's selection
 485          * of language interface.
 486          */
 487         set_my_charset();
 488         /**
 489          * This is to change all newlines to \n
 490          * We'll change them to \r\n later (in the sendMessage function)
 491          */
 492         $body = str_replace("\r\n", "\n", $body);
 493         $body = str_replace("\r", "\n", $body);
 494
 495         /**
 496          * Rewrap $body so that no line is bigger than $editor_size
 497          */
 498         $body = explode("\n", $body);
 499         $newBody = '';
 500         foreach ($body as $line) {
 501             if( $line <> '-- ' ) {
 502                 $line = rtrim($line);
 503             }
 504             if (sq_strlen($line, $default_charset) <= $editor_size + 1) {
 505                 $newBody .= $line . "\n";
 506             } else {
 507                 sqWordWrap($line, $editor_size, $default_charset);
 508                 $newBody .= $line . "\n";
 509
 510             }
 511
 512         }
 513         $body = $newBody;
 514
 515         $Result = deliverMessage($composeMessage);
 516
 517         if ($Result)
 518             $mail_sent = 'yes';
 519         else
 520             $mail_sent = 'no';
 521
 522         // NOTE: this hook changed in 1.5.2 from sending $Result and
 523         //       $composeMessage as args #2 and #3 to being in an array
 524         //       under arg #2
 525         $temp = array(&$Result, &$composeMessage, &$mail_sent);
 526         do_hook('compose_send_after', $temp);
 527         if (! $Result) {
 528             showInputForm($session);
 529             exit();
 530         }
 531
 532         /* if it is resumed draft, delete draft message */
 533         if ( isset($delete_draft)) {
 534             $imap_stream = sqimap_login($username, false, $imapServerAddress, $imapPort, false);
 535             sqimap_mailbox_select($imap_stream, $draft_folder);
 536             // bypass_trash=true because message should be saved when deliverMessage() returns true.
 537             // in current implementation of sqimap_msgs_list_flag() single message id can
 538             // be submitted as string. docs state that it should be array.
 539             sqimap_msgs_list_delete($imap_stream, $draft_folder, $delete_draft, true);
 540             if ($auto_expunge) {
 541                 sqimap_mailbox_expunge($imap_stream, $draft_folder, true);
 542             }
 543             sqimap_logout($imap_stream);
 544         }
 545         /*
 546          * Store the error array in the session because they will be lost on a redirect
 547          */
 548         $oErrorHandler->saveDelayedErrors();
 549         session_write_close();
 550
 551         if ($compose_new_win == '1') {
 552             if ( !isset($pageheader_sent) || !$pageheader_sent ) {
 553                 header("Location: $location/compose.php?mail_sent=$mail_sent");
 554             } else {
 555 //FIXME: DON'T ECHO HTML FROM CORE!
 556                 echo '   <br><br><div style="text-align: center;"><a href="' . $location
 557                     . '/compose.php?mail_sent=$mail_sent">'
 558                     . _("Return") . '</a></div>';
 559             }
 560             exit();
 561         } else {
 562             if ( !isset($pageheader_sent) || !$pageheader_sent ) {
 563                 header("Location: $location/right_main.php?mailbox=$urlMailbox".
 564                     "&startMessage=$startMessage&mail_sent=$mail_sent");
 565             } else {
 566 //FIXME: DON'T ECHO HTML FROM CORE!
 567                 echo '   <br><br><div style="text-align: center;"><a href="' . $location
 568                     . "/right_main.php?mailbox=$urlMailbox"
 569                     . "&amp;startMessage=$startMessage&amp;mail_sent=$mail_sent\">"
 570                     . _("Return") . '</a></div>';
 571             }
 572             exit();
 573         }
 574     } else {
 575         if ($compose_new_win == '1') {
 576             compose_Header($color, $mailbox);
 577         }
 578         else {
 579             displayPageHeader($color, $mailbox);
 580         }
 581         if (isset($AttachFailure)) {
 582             plain_error_message(_("Could not move/copy file. File not attached"),
 583                     $color);
 584         }
 585         checkInput(true);
 586         showInputForm($session);
 587         /* sqimap_logout($imapConnection); */
 588     }
 589 } elseif (isset($html_addr_search_done)) {
 590     if ($compose_new_win == '1') {
 591         compose_Header($color, $mailbox);
 592     }
 593     else {
 594         displayPageHeader($color, $mailbox);
 595     }
 596
 597     if (isset($send_to_search) && is_array($send_to_search)) {
 598         foreach ($send_to_search as $k => $v) {
 599             if (substr($k, 0, 1) == 'T') {
 600                 if ($send_to) {
 601                     $send_to .= ', ';
 602                 }
 603                 $send_to .= $v;
 604             }
 605             elseif (substr($k, 0, 1) == 'C') {
 606                 if ($send_to_cc) {
 607                     $send_to_cc .= ', ';
 608                 }
 609                 $send_to_cc .= $v;
 610             }
 611             elseif (substr($k, 0, 1) == 'B') {
 612                 if ($send_to_bcc) {
 613                     $send_to_bcc .= ', ';
 614                 }
 615                 $send_to_bcc .= $v;
 616             }
 617         }
 618     }
 619     showInputForm($session);
 620 } elseif (isset($html_addr_search) && !isset($html_addr_search_cancel)) {
 621     if (isset($_FILES['attachfile']) &&
 622             $_FILES['attachfile']['tmp_name'] &&
 623             $_FILES['attachfile']['tmp_name'] != 'none') {
 624         if(saveAttachedFiles($session)) {
 625             plain_error_message(_("Could not move/copy file. File not attached"));
 626         }
 627     }
 628     /*
 629      * I am using an include so as to elminiate an extra unnecessary
 630      * click.  If you can think of a better way, please implement it.
 631      */
 632     include_once('./addrbook_search_html.php');
 633 } elseif (isset($attach)) {
 634     if ($compose_new_win == '1') {
 635         compose_Header($color, $mailbox);
 636     } else {
 637         displayPageHeader($color, $mailbox);
 638     }
 639     if (saveAttachedFiles($session)) {
 640         plain_error_message(_("Could not move/copy file. File not attached"));
 641     }
 642     showInputForm($session);
 643 }
 644 elseif (isset($sigappend)) {
 645     $signature = $idents[$identity]['signature'];
 646
 647     $body .= "\n\n".($prefix_sig==true? "-- \n":'').$signature;
 648     if ($compose_new_win == '1') {
 649         compose_Header($color, $mailbox);
 650     } else {
 651         displayPageHeader($color, $mailbox);
 652     }
 653     showInputForm($session);
 654 } elseif (isset($do_delete)) {
 655     if ($compose_new_win == '1') {
 656         compose_Header($color, $mailbox);
 657     } else {
 658         displayPageHeader($color, $mailbox);
 659     }
 660
 661     if (isset($delete) && is_array($delete)) {
 662         foreach($delete as $index) {
 663             if (!empty($composeMessage->entities) && isset($composeMessage->entities[$index])) {
 664                 $composeMessage->entities[$index]->purgeAttachments();
 665                 // FIXME: one person reported that unset() didn't do anything at all here, so this is a work-around... but it triggers PHP notices if the unset() doesn't work, which should be fixed... but bigger question is if unset() doesn't work here, what about everywhere else? Anyway, uncomment this if you think you need it
 666                 //$composeMessage->entities[$index] = NULL;
 667                 unset ($composeMessage->entities[$index]);
 668             }
 669         }
 670         $new_entities = array();
 671         foreach ($composeMessage->entities as $entity) {
 672             $new_entities[] = $entity;
 673         }
 674         $composeMessage->entities = $new_entities;
 675     }
 676     showInputForm($session);
 677 } else {
 678     /*
 679      * This handles the default case as well as the error case
 680      * (they had the same code) --> if (isset($smtpErrors))
 681      */
 682
 683     if ($compose_new_win == '1') {
 684         compose_Header($color, $mailbox);
 685     } else {
 686         displayPageHeader($color, $mailbox);
 687     }
 688
 689     $newmail = true;
 690
 691     if (!isset($passed_ent_id)) {
 692         $passed_ent_id = '';
 693     }
 694     if (!isset($passed_id)) {
 695         $passed_id = '';
 696     }
 697     if (!isset($mailbox)) {
 698         $mailbox = '';
 699     }
 700     if (!isset($action)) {
 701         $action = '';
 702     }
 703
 704     $values = newMail($mailbox,$passed_id,$passed_ent_id, $action, $session);
 705
 706     /* in case the origin is not read_body.php */
 707     if (isset($send_to)) {
 708         $values['send_to'] = $send_to;
 709     }
 710     if (isset($send_to_cc)) {
 711         $values['send_to_cc'] = $send_to_cc;
 712     }
 713     if (isset($send_to_bcc)) {
 714         $values['send_to_bcc'] = $send_to_bcc;
 715     }
 716     if (isset($subject)) {
 717         $values['subject'] = $subject;
 718     }
 719     showInputForm($session, $values);
 720 }
 721
 722 exit();
 723
 724 /**************** Only function definitions go below *************/
 725
 726 function getforwardSubject($subject)
 727 {
 728     if ((substr(strtolower($subject), 0, 4) != 'fwd:') &&
 729             (substr(strtolower($subject), 0, 5) != '[fwd:') &&
 730             (substr(strtolower($subject), 0, 6) != '[ fwd:')) {
 731         $subject = '[Fwd: ' . $subject . ']';
 732     }
 733     return $subject;
 734 }
 735
 736 /* This function is used when not sending or adding attachments */
 737 function newMail ($mailbox='', $passed_id='', $passed_ent_id='', $action='', $session='') {
 738     global $editor_size, $default_use_priority, $body, $idents,
 739         $use_signature, $data_dir, $username,
 740         $key, $imapServerAddress, $imapPort,
 741         $composeMessage, $body_quote, $request_mdn, $request_dr,
 742         $mdn_user_support, $languages, $squirrelmail_language,
 743         $default_charset;
 744
 745     /*
 746      * Set $default_charset to correspond with the user's selection
 747      * of language interface. $default_charset global is not correct,
 748      * if message is composed in new window.
 749      */
 750     set_my_charset();
 751
 752     $send_to = $send_to_cc = $send_to_bcc = $subject = $identity = '';
 753     $mailprio = 3;
 754
 755     if ($passed_id) {
 756         $imapConnection = sqimap_login($username, false, $imapServerAddress,
 757                 $imapPort, 0);
 758
 759         sqimap_mailbox_select($imapConnection, $mailbox);
 760         $message = sqimap_get_message($imapConnection, $passed_id, $mailbox);
 761
 762         $body = '';
 763         if ($passed_ent_id) {
 764             /* redefine the messsage in case of message/rfc822 */
 765             $message = $message->getEntity($passed_ent_id);
 766             /* message is an entity which contains the envelope and type0=message
 767              * and type1=rfc822. The actual entities are childs from
 768              * $message->entities[0]. That's where the encoding and is located
 769              */
 770
 771             $entities = $message->entities[0]->findDisplayEntity
 772                 (array(), $alt_order = array('text/plain'));
 773             if (!count($entities)) {
 774                 $entities = $message->entities[0]->findDisplayEntity
 775                     (array(), $alt_order = array('text/plain','text/html'));
 776             }
 777             $orig_header = $message->rfc822_header; /* here is the envelope located */
 778             /* redefine the message for picking up the attachments */
 779             $message = $message->entities[0];
 780
 781         } else {
 782             $entities = $message->findDisplayEntity (array(), $alt_order = array('text/plain'));
 783             if (!count($entities)) {
 784                 $entities = $message->findDisplayEntity (array(), $alt_order = array('text/plain','text/html'));
 785             }
 786             $orig_header = $message->rfc822_header;
 787         }
 788
 789         $type0 = $message->type0;
 790         $type1 = $message->type1;
 791         foreach ($entities as $ent) {
 792             $msg = $message->getEntity($ent);
 793             $type0 = $msg->type0;
 794             $type1 = $msg->type1;
 795             $unencoded_bodypart = mime_fetch_body($imapConnection, $passed_id, $ent);
 796             $body_part_entity = $message->getEntity($ent);
 797             $bodypart = decodeBody($unencoded_bodypart,
 798                     $body_part_entity->header->encoding);
 799             if ($type1 == 'html') {
 800                 $bodypart = str_replace("\n", ' ', $bodypart);
 801                 $bodypart = preg_replace(array('/<\/?p>/i','/<div><\/div>/i','/<br\s*(\/)*>/i','/<\/?div>/i'), "\n", $bodypart);
 802                 $bodypart = str_replace(array('&nbsp;','&gt;','&lt;'),array(' ','>','<'),$bodypart);
 803                 $bodypart = strip_tags($bodypart);
 804             }
 805             if (isset($languages[$squirrelmail_language]['XTRA_CODE']) &&
 806                     function_exists($languages[$squirrelmail_language]['XTRA_CODE'] . '_decode')) {
 807                 if (mb_detect_encoding($bodypart) != 'ASCII') {
 808                     $bodypart = call_user_func($languages[$squirrelmail_language]['XTRA_CODE'] . '_decode', $bodypart);
 809                 }
 810             }
 811
 812             // charset encoding in compose form stuff
 813             if (isset($body_part_entity->header->parameters['charset'])) {
 814                 $actual = $body_part_entity->header->parameters['charset'];
 815             } else {
 816                 $actual = 'us-ascii';
 817             }
 818
 819             if ( $actual && is_conversion_safe($actual) && $actual != $default_charset){
 820                 $bodypart = charset_convert($actual,$bodypart,$default_charset,false);
 821             }
 822             // end of charset encoding in compose
 823
 824             $body .= $bodypart;
 825         }
 826         if ($default_use_priority) {
 827             $mailprio = substr($orig_header->priority,0,1);
 828             if (!$mailprio) {
 829                 $mailprio = 3;
 830             }
 831         } else {
 832             $mailprio = '';
 833         }
 834
 835         $from_o = $orig_header->from;
 836         if (is_array($from_o)) {
 837             if (isset($from_o[0])) {
 838                 $from_o = $from_o[0];
 839             }
 840         }
 841         if (is_object($from_o)) {
 842             $orig_from = $from_o->getAddress();
 843         } else {
 844             $orig_from = '';
 845         }
 846
 847         $identities = array();
 848         if (count($idents) > 1) {
 849             foreach($idents as $nr=>$data) {
 850                 $enc_from_name = '"'.$data['full_name'].'" <'. $data['email_address'].'>';
 851                 if(strtolower($enc_from_name) == strtolower($orig_from)) {
 852                     $identity = $nr;
 853                     // don't stop!  need to build $identities array for idents match below
 854                     //break;
 855                 }
 856                 $identities[] = $enc_from_name;
 857             }
 858
 859             $identity_match = $orig_header->findAddress($identities);
 860             if ($identity_match) {
 861                 $identity = $identity_match;
 862             }
 863         }
 864
 865         switch ($action) {
 866             case ('draft'):
 867                 $use_signature = FALSE;
 868                 $composeMessage->rfc822_header = $orig_header;
 869                 $send_to = decodeHeader($orig_header->getAddr_s('to'),false,false,true);
 870                 $send_to_cc = decodeHeader($orig_header->getAddr_s('cc'),false,false,true);
 871                 $send_to_bcc = decodeHeader($orig_header->getAddr_s('bcc'),false,false,true);
 872                 $send_from = $orig_header->getAddr_s('from');
 873                 $send_from_parts = new AddressStructure();
 874                 $send_from_parts = $orig_header->parseAddress($send_from);
 875                 $send_from_add = $send_from_parts->mailbox . '@' . $send_from_parts->host;
 876                 $identity = find_identity(array($send_from_add));
 877                 $subject = decodeHeader($orig_header->subject,false,false,true);
 878
 879                 // Remember the receipt settings
 880                 $request_mdn = $mdn_user_support && !empty($orig_header->dnt) ? '1' : '0';
 881                 $request_dr = $mdn_user_support && !empty($orig_header->drnt) ? '1' : '0';
 882
 883                 /* remember the references and in-reply-to headers in case of an reply */
 884 //FIXME: it would be better to fiddle with headers inside of the message object or possibly when delivering the message to its destination (drafts folder?); is this possible?
 885                 $composeMessage->rfc822_header->more_headers['References'] = $orig_header->references;
 886                 $composeMessage->rfc822_header->more_headers['In-Reply-To'] = $orig_header->in_reply_to;
 887                 // rewrap the body to clean up quotations and line lengths
 888                 sqBodyWrap($body, $editor_size);
 889                 $composeMessage = getAttachments($message, $composeMessage, $passed_id, $entities, $imapConnection);
 890                 break;
 891             case ('edit_as_new'):
 892                 $send_to = decodeHeader($orig_header->getAddr_s('to'),false,false,true);
 893                 $send_to_cc = decodeHeader($orig_header->getAddr_s('cc'),false,false,true);
 894                 $send_to_bcc = decodeHeader($orig_header->getAddr_s('bcc'),false,false,true);
 895                 $subject = decodeHeader($orig_header->subject,false,false,true);
 896                 $mailprio = $orig_header->priority;
 897                 $orig_from = '';
 898                 $composeMessage = getAttachments($message, $composeMessage, $passed_id, $entities, $imapConnection);
 899                 // rewrap the body to clean up quotations and line lengths
 900                 sqBodyWrap($body, $editor_size);
 901                 break;
 902             case ('forward'):
 903                 $send_to = '';
 904                 $subject = getforwardSubject(decodeHeader($orig_header->subject,false,false,true));
 905                 $body = getforwardHeader($orig_header) . $body;
 906                 // the logic for calling sqUnWordWrap here would be to allow the browser to wrap the lines
 907                 // forwarded message text should be as undisturbed as possible, so commenting out this call
 908                 // sqUnWordWrap($body);
 909                 $composeMessage = getAttachments($message, $composeMessage, $passed_id, $entities, $imapConnection);
 910
 911                 //add a blank line after the forward headers
 912                 $body = "\n" . $body;
 913                 break;
 914             case ('forward_as_attachment'):
 915                 $subject = getforwardSubject(decodeHeader($orig_header->subject,false,false,true));
 916                 $composeMessage = getMessage_RFC822_Attachment($message, $composeMessage, $passed_id, $passed_ent_id, $imapConnection);
 917                 $body = '';
 918                 break;
 919             case ('reply_all'):
 920                 if(isset($orig_header->mail_followup_to) && $orig_header->mail_followup_to) {
 921                     $send_to = $orig_header->getAddr_s('mail_followup_to');
 922                 } else {
 923                     $send_to_cc = replyAllString($orig_header);
 924                     $send_to_cc = decodeHeader($send_to_cc,false,false,true);
 925                 }
 926             case ('reply'):
 927                 // skip this if send_to was already set right above here
 928                 if(!$send_to) {
 929                     $send_to = $orig_header->reply_to;
 930                     if (is_array($send_to) && count($send_to)) {
 931                         $send_to = $orig_header->getAddr_s('reply_to');
 932                     } else if (is_object($send_to)) { /* unneccesarry, just for failsafe purpose */
 933                         $send_to = $orig_header->getAddr_s('reply_to');
 934                     } else {
 935                         $send_to = $orig_header->getAddr_s('from');
 936                     }
 937                 }
 938                 $send_to = decodeHeader($send_to,false,false,true);
 939                 $subject = decodeHeader($orig_header->subject,false,false,true);
 940                 $subject = str_replace('"', "'", $subject);
 941                 $subject = trim($subject);
 942                 if (substr(strtolower($subject), 0, 3) != 're:') {
 943                     $subject = 'Re: ' . $subject;
 944                 }
 945                 /* this corrects some wrapping/quoting problems on replies */
 946                 $rewrap_body = explode("\n", $body);
 947                 $from = (is_array($orig_header->from) && !empty($orig_header->from)) ? $orig_header->from[0] : $orig_header->from;
 948                 $body = '';
 949                 $strip_sigs = getPref($data_dir, $username, 'strip_sigs');
 950                 foreach ($rewrap_body as $line) {
 951                     if ($strip_sigs && substr($line,0,3) == '-- ') {
 952                         break;
 953                     }
 954                     if (preg_match("/^(>+)/", $line, $matches)) {
 955                         $gt = $matches[1];
 956                         $body .= $body_quote . str_replace("\n", "\n$body_quote$gt ", rtrim($line)) ."\n";
 957                     } else {
 958                         $body .= $body_quote . (!empty($body_quote) ? ' ' : '') . str_replace("\n", "\n$body_quote" . (!empty($body_quote) ? ' ' : ''), rtrim($line)) . "\n";
 959                     }
 960                 }
 961
 962                 //rewrap the body to clean up quotations and line lengths
 963                 $body = sqBodyWrap ($body, $editor_size);
 964
 965                 $body = getReplyCitation($from , $orig_header->date) . $body;
 966                 $composeMessage->reply_rfc822_header = $orig_header;
 967
 968                 break;
 969             default:
 970                 break;
 971         }
 972 //FIXME: we used to register $compose_messages in the session here, but not any more - so do we still need the session_write_close() and sqimap_logout() here?  We probably need the IMAP logout, but what about the session closure?
 973         session_write_close();
 974         sqimap_logout($imapConnection);
 975     }
 976     $ret = array( 'send_to' => $send_to,
 977             'send_to_cc' => $send_to_cc,
 978             'send_to_bcc' => $send_to_bcc,
 979             'subject' => $subject,
 980             'mailprio' => $mailprio,
 981             'body' => $body,
 982             'identity' => $identity );
 983
 984     return ($ret);
 985 } /* function newMail() */
 986
 987 /**
 988  * downloads attachments from original message, stores them in attachment directory and adds
 989  * them to composed message.
 990  * @param object $message
 991  * @param object $composeMessage
 992  * @param integer $passed_id
 993  * @param mixed $entities
 994  * @param mixed $imapConnection
 995  * @return object
 996  */
 997 function getAttachments($message, &$composeMessage, $passed_id, $entities, $imapConnection) {
 998     global $squirrelmail_language, $languages, $username, $attachment_dir;
 999
1000     if (!count($message->entities) ||
1001             ($message->type0 == 'message' && $message->type1 == 'rfc822')) {
1002         if ( !in_array($message->entity_id, $entities) && $message->entity_id) {
1003             switch ($message->type0) {
1004                 case 'message':
1005                     if ($message->type1 == 'rfc822') {
1006                         $filename = $message->rfc822_header->subject;
1007                         if ($filename == "") {
1008                             $filename = "untitled-".$message->entity_id;
1009                         }
1010                         $filename .= '.eml';
1011                     } else {
1012                         $filename = $message->getFilename();
1013                     }
1014                     break;
1015                 default:
1016                     if (!$message->mime_header) { /* temporary hack */
1017                         $message->mime_header = $message->header;
1018                     }
1019                     $filename = $message->getFilename();
1020                     break;
1021             }
1022             $filename = str_replace('&#32;', ' ', decodeHeader($filename));
1023             if (isset($languages[$squirrelmail_language]['XTRA_CODE']) &&
1024                     function_exists($languages[$squirrelmail_language]['XTRA_CODE'] . '_encode')) {
1025                 $filename =  call_user_func($languages[$squirrelmail_language]['XTRA_CODE'] . '_encode', $filename);
1026             }
1027
1028             $hashed_attachment_dir = getHashedDir($username, $attachment_dir);
1029             $localfilename = sq_get_attach_tempfile();
1030             $message->att_local_name = $localfilename;
1031
1032             $composeMessage->initAttachment($message->type0.'/'.$message->type1,$filename,
1033                     $localfilename);
1034
1035             /* Write Attachment to file */
1036             $fp = fopen ($hashed_attachment_dir . '/' . $localfilename, 'wb');
1037             mime_print_body_lines ($imapConnection, $passed_id, $message->entity_id, $message->header->encoding, $fp);
1038             fclose ($fp);
1039         }
1040     } else {
1041         for ($i=0, $entCount=count($message->entities); $i<$entCount;$i++) {
1042             $composeMessage=getAttachments($message->entities[$i], $composeMessage, $passed_id, $entities, $imapConnection);
1043         }
1044     }
1045     return $composeMessage;
1046 }
1047
1048 function getMessage_RFC822_Attachment($message, $composeMessage, $passed_id,
1049         $passed_ent_id='', $imapConnection) {
1050     if (!$passed_ent_id) {
1051         $body_a = sqimap_run_command($imapConnection,
1052                 'FETCH '.$passed_id.' RFC822',
1053                 TRUE, $response, $readmessage,
1054                 TRUE);
1055     } else {
1056         $body_a = sqimap_run_command($imapConnection,
1057                 'FETCH '.$passed_id.' BODY['.$passed_ent_id.']',
1058                 TRUE, $response, $readmessage, TRUE);
1059         $message = $message->parent;
1060     }
1061     if ($response == 'OK') {
1062         $subject = encodeHeader($message->rfc822_header->subject);
1063         array_shift($body_a);
1064         array_pop($body_a);
1065         $body = implode('', $body_a) . "\r\n";
1066
1067         global $username, $attachment_dir;
1068         $hashed_attachment_dir = getHashedDir($username, $attachment_dir);
1069         $localfilename = sq_get_attach_tempfile();
1070         $fp = fopen($hashed_attachment_dir . '/' . $localfilename, 'wb');
1071         fwrite ($fp, $body);
1072         fclose($fp);
1073         $composeMessage->initAttachment('message/rfc822',$subject.'.eml',
1074                 $localfilename);
1075     }
1076     return $composeMessage;
1077 }
1078
1079 function showInputForm ($session, $values=false) {
1080     global $send_to, $send_to_cc, $send_to_bcc,
1081         $body, $startMessage, $action, $attachments,
1082         $use_signature, $signature, $prefix_sig, $session_expired,
1083         $editor_size, $editor_height, $subject, $newmail,
1084         $use_javascript_addr_book, $passed_id, $mailbox, $fwduid,
1085         $from_htmladdr_search, $location_of_buttons, $attachment_dir,
1086         $username, $data_dir, $identity, $idents, $delete_draft,
1087         $mailprio, $compose_new_win, $saved_draft, $mail_sent, $sig_first,
1088         $composeMessage, $composesession, $default_charset,
1089         $compose_onsubmit, $oTemplate, $oErrorHandler;
1090
1091     if (checkForJavascript()) {
1092         $onfocus = ' onfocus="alreadyFocused=true;"';
1093         $onfocus_array = array('onfocus' => 'alreadyFocused=true;');
1094     }
1095     else {
1096         $onfocus = '';
1097         $onfocus_array = array();
1098     }
1099
1100     if ($values) {
1101         $send_to = $values['send_to'];
1102         $send_to_cc = $values['send_to_cc'];
1103         $send_to_bcc = $values['send_to_bcc'];
1104         $subject = $values['subject'];
1105         $mailprio = $values['mailprio'];
1106         $body = $values['body'];
1107         $identity = (int) $values['identity'];
1108     } else {
1109         $send_to = decodeHeader($send_to, true, false);
1110         $send_to_cc = decodeHeader($send_to_cc, true, false);
1111         $send_to_bcc = decodeHeader($send_to_bcc, true, false);
1112     }
1113
1114     if ($use_javascript_addr_book) {
1115 //FIXME: NO HTML IN CORE!
1116         echo "\n". '<script type="text/javascript">'."\n<!--\n" .
1117             'function open_abook() { ' . "\n" .
1118             '  var nwin = window.open("addrbook_popup.php","abookpopup",' .
1119             '"width=670,height=300,resizable=yes,scrollbars=yes");' . "\n" .
1120             '  if((!nwin.opener) && (document.windows != null))' . "\n" .
1121             '    nwin.opener = document.windows;' . "\n" .
1122             "}\n" .
1123             "// -->\n</script>\n\n";
1124     }
1125
1126 //FIXME: NO HTML IN CORE!
1127     echo "\n" . '<form name="compose" action="compose.php" method="post" ' .
1128         'enctype="multipart/form-data"';
1129
1130     $compose_onsubmit = array();
1131     global $null;
1132     do_hook('compose_form', $null);
1133
1134     // Plugins that use compose_form hook can add an array entry
1135     // to the globally scoped $compose_onsubmit; we add them up
1136     // here and format the form tag's full onsubmit handler.
1137     // Each plugin should use "return false" if they need to
1138     // stop form submission but otherwise should NOT use "return
1139     // true" to give other plugins the chance to do what they need
1140     // to do; SquirrelMail itself will add the final "return true".
1141     // Onsubmit text is enclosed inside of double quotes, so plugins
1142     // need to quote accordingly.
1143     if (checkForJavascript()) {
1144         $onsubmit_text = ' onsubmit="';
1145         if (empty($compose_onsubmit))
1146             $compose_onsubmit = array();
1147         else if (!is_array($compose_onsubmit))
1148             $compose_onsubmit = array($compose_onsubmit);
1149
1150         foreach ($compose_onsubmit as $text) {
1151             $text = trim($text);
1152             if (substr($text, -1) != ';' && substr($text, -1) != '}')
1153                 $text .= '; ';
1154             $onsubmit_text .= $text;
1155         }
1156
1157 //FIXME: DON'T ECHO HTML FROM CORE!
1158         echo $onsubmit_text . ' return true;"';
1159     }
1160
1161
1162 //FIXME: NO HTML IN CORE!
1163     echo ">\n";
1164
1165 //FIXME: DON'T ECHO HTML FROM CORE!
1166     echo addHidden('startMessage', $startMessage);
1167
1168     if ($action == 'draft') {
1169 //FIXME: DON'T ECHO HTML FROM CORE!
1170         echo addHidden('delete_draft', $passed_id);
1171     }
1172     if (isset($delete_draft)) {
1173 //FIXME: DON'T ECHO HTML FROM CORE!
1174         echo addHidden('delete_draft', $delete_draft);
1175     }
1176     if (isset($session)) {
1177 //FIXME: DON'T ECHO HTML FROM CORE!
1178         echo addHidden('session', $session);
1179     }
1180
1181     if (isset($passed_id)) {
1182 //FIXME: DON'T ECHO HTML FROM CORE!
1183         echo addHidden('passed_id', $passed_id);
1184     }
1185
1186     if (isset($fwduid)) {
1187 //FIXME: DON'T ECHO HTML FROM CORE!
1188         echo addHidden('fwduid', $fwduid);
1189     }
1190
1191     if ($saved_draft == 'yes') {
1192         $oTemplate->assign('note', _("Your draft has been saved."));
1193         $oTemplate->display('note.tpl');
1194     }
1195     if ($mail_sent == 'yes') {
1196         $oTemplate->assign('note', _("Your mail has been sent."));
1197         $oTemplate->display('note.tpl');
1198     }
1199     if ($compose_new_win == '1') {
1200         $oTemplate->display('compose_newwin_close.tpl');
1201     }
1202
1203     if ($location_of_buttons == 'top') {
1204 //FIXME: DON'T ECHO HTML FROM CORE!
1205         showComposeButtonRow();
1206     }
1207
1208     $identities = array();
1209     if (count($idents) > 1) {
1210         reset($idents);
1211         foreach($idents as $id => $data) {
1212             $identities[$id] = $data['full_name'].' &lt;'.$data['email_address'].'&gt;';
1213         }
1214     }
1215
1216     $oTemplate->assign('identities', $identities);
1217     $oTemplate->assign('identity_def', $identity);
1218     $oTemplate->assign('input_onfocus', 'onfocus="'.join(' ', $onfocus_array).'"');
1219
1220     $oTemplate->assign('to', htmlspecialchars($send_to));
1221     $oTemplate->assign('cc', htmlspecialchars($send_to_cc));
1222     $oTemplate->assign('bcc', htmlspecialchars($send_to_bcc));
1223     $oTemplate->assign('subject', htmlspecialchars($subject));
1224
1225     // access keys...
1226     //
1227     global $accesskey_compose_to, $accesskey_compose_cc,
1228            $accesskey_compose_identity, $accesskey_compose_bcc,
1229            $accesskey_compose_subject;
1230     $oTemplate->assign('accesskey_compose_identity', $accesskey_compose_identity);
1231     $oTemplate->assign('accesskey_compose_to', $accesskey_compose_to);
1232     $oTemplate->assign('accesskey_compose_cc', $accesskey_compose_cc);
1233     $oTemplate->assign('accesskey_compose_bcc', $accesskey_compose_bcc);
1234     $oTemplate->assign('accesskey_compose_subject', $accesskey_compose_subject);
1235
1236     $oTemplate->display('compose_header.tpl');
1237
1238     if ($location_of_buttons == 'between') {
1239 //FIXME: DON'T ECHO HTML FROM CORE!
1240         showComposeButtonRow();
1241     }
1242
1243     $body_str = '';
1244     if ($use_signature == true && $newmail == true && !isset($from_htmladdr_search)) {
1245         $signature = $idents[$identity]['signature'];
1246
1247         if ($sig_first == '1') {
1248             /*
1249              * FIXME: test is specific to ja_JP translation implementation.
1250              * This test might apply incorrect conversion to other translations, but
1251              * use of 7bit iso-2022-jp charset in other translations might have other
1252              * issues too.
1253              */
1254             if ($default_charset == 'iso-2022-jp') {
1255                 $body_str = "\n\n".($prefix_sig==true? "-- \n":'').mb_convert_encoding($signature, 'EUC-JP');
1256             } else {
1257                 $body_str = "\n\n".($prefix_sig==true? "-- \n":'').decodeHeader($signature,false,false);
1258             }
1259             $body_str .= "\n\n".htmlspecialchars(decodeHeader($body,false,false));
1260         } else {
1261             $body_str = "\n\n".htmlspecialchars(decodeHeader($body,false,false));
1262             // FIXME: test is specific to ja_JP translation implementation. See above comments.
1263             if ($default_charset == 'iso-2022-jp') {
1264                 $body_str .= "\n\n".($prefix_sig==true? "-- \n":'').mb_convert_encoding($signature, 'EUC-JP');
1265             } else {
1266                 $body_str .= "\n\n".($prefix_sig==true? "-- \n":'').decodeHeader($signature,false,false);
1267             }
1268         }
1269     } else {
1270         $body_str = htmlspecialchars(decodeHeader($body,false,false));
1271     }
1272
1273     $oTemplate->assign('editor_width', (int)$editor_size);
1274     $oTemplate->assign('editor_height', (int)$editor_height);
1275     $oTemplate->assign('input_onfocus', 'onfocus="'.join(' ', $onfocus_array).'"');
1276     $oTemplate->assign('body', $body_str);
1277     $oTemplate->assign('show_bottom_send', $location_of_buttons!='bottom');
1278
1279     // access keys...
1280     //
1281     global $accesskey_compose_body, $accesskey_compose_send;
1282     $oTemplate->assign('accesskey_compose_body', $accesskey_compose_body);
1283     $oTemplate->assign('accesskey_compose_send', $accesskey_compose_send);
1284
1285     $oTemplate->display ('compose_body.tpl');
1286
1287     if ($location_of_buttons == 'bottom') {
1288 //FIXME: DON'T ECHO HTML FROM CORE!
1289         showComposeButtonRow();
1290     }
1291
1292     // composeMessage can be empty when coming from a restored session
1293     if (is_object($composeMessage) && $composeMessage->entities)
1294         $attach_array = $composeMessage->entities;
1295     if ($session_expired && !empty($attachments) && is_array($attachments))
1296         $attach_array = $attachments;
1297
1298     /* This code is for attachments */
1299     if ((bool) ini_get('file_uploads')) {
1300
1301         /* Calculate the max size for an uploaded file.
1302          * This is advisory for the user because we can't actually prevent
1303          * people to upload too large files. */
1304         $sizes = array();
1305         /* php.ini vars which influence the max for uploads */
1306         $configvars = array('post_max_size', 'memory_limit', 'upload_max_filesize');
1307         foreach($configvars as $var) {
1308             /* skip 0 or empty values, and -1 which means 'unlimited' */
1309             if( $size = getByteSize(ini_get($var)) ) {
1310                 if ( $size != '-1' ) {
1311                     $sizes[] = $size;
1312                 }
1313             }
1314         }
1315
1316         $attach = array();
1317         global $username, $attachment_dir;
1318         $hashed_attachment_dir = getHashedDir($username, $attachment_dir);
1319         if (!empty($attach_array)) {
1320             foreach ($attach_array as $key => $attachment) {
1321                 $attached_file = $attachment->att_local_name;
1322                 if ($attachment->att_local_name || $attachment->body_part) {
1323                     $attached_filename = decodeHeader($attachment->mime_header->getParameter('name'));
1324                     $type = $attachment->mime_header->type0.'/'.
1325                         $attachment->mime_header->type1;
1326
1327                     $a = array();
1328                     $a['Key'] = $key;
1329                     $a['FileName'] = $attached_filename;
1330                     $a['ContentType'] = $type;
1331                     $a['Size'] = filesize($hashed_attachment_dir . '/' . $attached_file);
1332                     $attach[$key] = $a;
1333                 }
1334             }
1335         }
1336
1337         $max = min($sizes);
1338         $oTemplate->assign('max_file_size', empty($max) ? -1 : $max);
1339         $oTemplate->assign('attachments', $attach);
1340
1341         // access keys...
1342         //
1343         global $accesskey_compose_attach_browse, $accesskey_compose_attach,
1344                $accesskey_compose_delete_attach;
1345         $oTemplate->assign('accesskey_compose_attach_browse', $accesskey_compose_attach_browse);
1346         $oTemplate->assign('accesskey_compose_attach', $accesskey_compose_attach);
1347         $oTemplate->assign('accesskey_compose_delete_attach', $accesskey_compose_delete_attach);
1348
1349         $oTemplate->display('compose_attachments.tpl');
1350     } // End of file_uploads if-block
1351     /* End of attachment code */
1352
1353     $oTemplate->assign('username', $username);
1354     $oTemplate->assign('smaction', $action);
1355     $oTemplate->assign('mailbox', $mailbox);
1356     sqgetGlobalVar('QUERY_STRING', $queryString, SQ_SERVER);
1357     $oTemplate->assign('querystring', $queryString);
1358     $oTemplate->assign('composesession', $composesession);
1359     $oTemplate->assign('send_button_count', unique_widget_name('send', TRUE));
1360     if (!empty($attach_array))
1361         $oTemplate->assign('attachments', urlencode(serialize($attach_array)));
1362
1363     $aUserNotices = array();
1364
1365     // File uploads are off, so we didn't show that part of the form.
1366     // To avoid bogus bug reports, tell the user why.
1367     if (!(bool) ini_get('file_uploads')) {
1368         $aUserNotices[] = _("Because PHP file uploads are turned off, you can not attach files to this message. Please see your system administrator for details.");
1369     }
1370
1371     $oTemplate->assign('user_notices', $aUserNotices);
1372
1373     $oTemplate->display('compose_form_close.tpl');
1374
1375     if ($compose_new_win=='1') {
1376         $oTemplate->display('compose_newwin_close.tpl');
1377     }
1378
1379     $oErrorHandler->setDelayedErrors(false);
1380     $oTemplate->display('footer.tpl');
1381 }
1382
1383
1384 function showComposeButtonRow() {
1385     global $use_javascript_addr_book, $save_as_draft,
1386         $default_use_priority, $mailprio, $default_use_mdn,
1387         $request_mdn, $request_dr,
1388         $data_dir, $username;
1389
1390     global $oTemplate, $buffer_hook;
1391
1392     if ($default_use_priority) {
1393         $priorities = array('1'=>_("High"), '3'=>_("Normal"), '5'=>_("Low"));
1394         $priority = isset($mailprio) ? $mailprio : 3;
1395     } else {
1396         $priorities = array();
1397         $priority = NULL;
1398     }
1399
1400     $mdn_user_support=getPref($data_dir, $username, 'mdn_user_support',$default_use_mdn);
1401
1402     $address_book_button_attribs = array();
1403     global $accesskey_compose_addresses;
1404     if ($accesskey_compose_addresses != 'NONE')
1405         $address_book_button_attribs['accesskey'] = $accesskey_compose_addresses;
1406     if ($use_javascript_addr_book && checkForJavascript()) {
1407         $addr_book = addButton(_("Addresses"),
1408                                null,
1409                                array_merge($address_book_button_attribs, array('onclick' => 'javascript:open_abook();')));
1410     } else {
1411         $addr_book = addSubmit(_("Addresses"), 'html_addr_search', $address_book_button_attribs);
1412     }
1413
1414     $oTemplate->assign('allow_priority', $default_use_priority==1);
1415     $oTemplate->assign('priority_list', $priorities);
1416     $oTemplate->assign('current_priority', $priority);
1417
1418     $oTemplate->assign('notifications_enabled', $mdn_user_support==1);
1419     $oTemplate->assign('read_receipt', $request_mdn=='1');
1420     $oTemplate->assign('delivery_receipt', $request_dr=='1');
1421
1422     $oTemplate->assign('drafts_enabled', $save_as_draft);
1423     $oTemplate->assign('address_book_button', $addr_book);
1424
1425     // access keys...
1426     //
1427     global $accesskey_compose_priority, $accesskey_compose_on_read,
1428            $accesskey_compose_on_delivery, $accesskey_compose_signature,
1429            $accesskey_compose_save_draft, $accesskey_compose_send;
1430     $oTemplate->assign('accesskey_compose_priority', $accesskey_compose_priority);
1431     $oTemplate->assign('accesskey_compose_on_read', $accesskey_compose_on_read);
1432     $oTemplate->assign('accesskey_compose_on_delivery', $accesskey_compose_on_delivery);
1433     $oTemplate->assign('accesskey_compose_signature', $accesskey_compose_signature);
1434     $oTemplate->assign('accesskey_compose_save_draft', $accesskey_compose_save_draft);
1435     $oTemplate->assign('accesskey_compose_send', $accesskey_compose_send);
1436
1437     $oTemplate->display('compose_buttons.tpl');
1438 }
1439
1440 function checkInput ($show) {
1441     /*
1442      * I implemented the $show variable because the error messages
1443      * were getting sent before the page header.  So, I check once
1444      * using $show=false, and then when i'm ready to display the error
1445      * message, show=true
1446      */
1447     global $send_to, $send_to_cc, $send_to_bcc;
1448
1449     $send_to = trim($send_to);
1450     $send_to_cc = trim($send_to_cc);
1451     $send_to_bcc = trim($send_to_bcc);
1452     if (empty($send_to) && empty($send_to_cc) && empty($send_to_bcc)) {
1453         if ($show) {
1454             plain_error_message(_("You have not filled in the \"To:\" field."));
1455         }
1456         return false;
1457     }
1458     return true;
1459 } /* function checkInput() */
1460
1461
1462 /* True if FAILURE */
1463 function saveAttachedFiles($session) {
1464     global $composeMessage, $username, $attachment_dir;
1465
1466     /* get out of here if no file was attached at all */
1467     if (! is_uploaded_file($_FILES['attachfile']['tmp_name']) ) {
1468         return true;
1469     }
1470
1471     $hashed_attachment_dir = getHashedDir($username, $attachment_dir);
1472     $localfilename = sq_get_attach_tempfile();
1473     $fullpath = $hashed_attachment_dir . '/' . $localfilename;
1474
1475     // m_u_f works better with restricted PHP installs (safe_mode, open_basedir),
1476     // if that doesn't work, try a simple rename.
1477     if (!sq_call_function_suppress_errors('move_uploaded_file', array($_FILES['attachfile']['tmp_name'], $fullpath))) {
1478         if (!sq_call_function_suppress_errors('rename', array($_FILES['attachfile']['tmp_name'], $fullpath))) {
1479             return true;
1480         }
1481     }
1482     $type = strtolower($_FILES['attachfile']['type']);
1483     $name = $_FILES['attachfile']['name'];
1484     $composeMessage->initAttachment($type, $name, $localfilename);
1485 }
1486
1487 /* parse values like 8M and 2k into bytes */
1488 function getByteSize($ini_size) {
1489
1490     if(!$ini_size) {
1491         return FALSE;
1492     }
1493
1494     $ini_size = trim($ini_size);
1495
1496     // if there's some kind of letter at the end of the string we need to multiply.
1497     if(!is_numeric(substr($ini_size, -1))) {
1498
1499         switch(strtoupper(substr($ini_size, -1))) {
1500             case 'G':
1501                 $bytesize = 1073741824;
1502                 break;
1503             case 'M':
1504                 $bytesize = 1048576;
1505                 break;
1506             case 'K':
1507                 $bytesize = 1024;
1508                 break;
1509         }
1510
1511         return ($bytesize * (int)substr($ini_size, 0, -1));
1512     }
1513
1514     return $ini_size;
1515 }
1516
1517
1518 /**
1519  * temporary function to make use of the deliver class.
1520  * In the future the responsible backend should be automaticly loaded
1521  * and conf.pl should show a list of available backends.
1522  * The message also should be constructed by the message class.
1523  *
1524  * @param object $composeMessage The message being sent.  Please note
1525  *                               that it is passed by reference and
1526  *                               will be returned modified, with additional
1527  *                               headers, such as Message-ID, Date, In-Reply-To,
1528  *                               References, and so forth.
1529  *
1530  * @return boolean FALSE if delivery failed, or some non-FALSE value
1531  *                 upon success.
1532  *
1533  */
1534 function deliverMessage(&$composeMessage, $draft=false) {
1535     global $send_to, $send_to_cc, $send_to_bcc, $mailprio, $subject, $body,
1536         $username, $identity, $idents, $data_dir,
1537         $request_mdn, $request_dr, $default_charset, $useSendmail,
1538         $domain, $action, $default_move_to_sent, $move_to_sent,
1539         $imapServerAddress, $imapPort, $sent_folder, $key;
1540
1541     $rfc822_header = $composeMessage->rfc822_header;
1542
1543     $abook = addressbook_init(false, true);
1544     $rfc822_header->to = $rfc822_header->parseAddress($send_to,true, array(), '', $domain, array(&$abook,'lookup'));
1545     $rfc822_header->cc = $rfc822_header->parseAddress($send_to_cc,true,array(), '',$domain, array(&$abook,'lookup'));
1546     $rfc822_header->bcc = $rfc822_header->parseAddress($send_to_bcc,true, array(), '',$domain, array(&$abook,'lookup'));
1547     $rfc822_header->priority = $mailprio;
1548     $rfc822_header->subject = $subject;
1549
1550     $special_encoding='';
1551     if (strtolower($default_charset) == 'iso-2022-jp') {
1552         if (mb_detect_encoding($body) == 'ASCII') {
1553             $special_encoding = '8bit';
1554         } else {
1555             $body = mb_convert_encoding($body, 'JIS');
1556             $special_encoding = '7bit';
1557         }
1558     }
1559     $composeMessage->setBody($body);
1560
1561     $reply_to = '';
1562     $reply_to  = $idents[$identity]['reply_to'];
1563
1564     $from_addr = build_from_header($identity);
1565     $rfc822_header->from = $rfc822_header->parseAddress($from_addr,true);
1566     if ($reply_to) {
1567         $rfc822_header->reply_to = $rfc822_header->parseAddress($reply_to,true);
1568     }
1569     /* Receipt: On Read */
1570     if (isset($request_mdn) && $request_mdn) {
1571         $rfc822_header->dnt = $rfc822_header->parseAddress($from_addr,true);
1572     } elseif (isset($rfc822_header->dnt)) {
1573         unset($rfc822_header->dnt);
1574     }
1575
1576     /* Receipt: On Delivery */
1577     if (!empty($request_dr)) {
1578 //FIXME: it would be better to fiddle with headers inside of the message object or possibly when delivering the message to its destination; is this possible?
1579         $rfc822_header->more_headers['Return-Receipt-To'] = $from_addr;
1580     } elseif (isset($rfc822_header->more_headers['Return-Receipt-To'])) {
1581         unset($rfc822_header->more_headers['Return-Receipt-To']);
1582     }
1583
1584     /* multipart messages */
1585     if (count($composeMessage->entities)) {
1586         $message_body = new Message();
1587         $message_body->body_part = $composeMessage->body_part;
1588         $composeMessage->body_part = '';
1589         $mime_header = new MessageHeader;
1590         $mime_header->type0 = 'text';
1591         $mime_header->type1 = 'plain';
1592         if ($special_encoding) {
1593             $mime_header->encoding = $special_encoding;
1594         } else {
1595             $mime_header->encoding = '8bit';
1596         }
1597         if ($default_charset) {
1598             $mime_header->parameters['charset'] = $default_charset;
1599         }
1600         $message_body->mime_header = $mime_header;
1601         array_unshift($composeMessage->entities, $message_body);
1602         $content_type = new ContentType('multipart/mixed');
1603     } else {
1604         $content_type = new ContentType('text/plain');
1605         if ($special_encoding) {
1606             $rfc822_header->encoding = $special_encoding;
1607         } else {
1608             $rfc822_header->encoding = '8bit';
1609         }
1610         if ($default_charset) {
1611             $content_type->properties['charset']=$default_charset;
1612         }
1613     }
1614
1615     $rfc822_header->content_type = $content_type;
1616     $composeMessage->rfc822_header = $rfc822_header;
1617     if ($action == 'reply' || $action == 'reply_all') {
1618         global $passed_id, $passed_ent_id;
1619         $reply_id = $passed_id;
1620         $reply_ent_id = $passed_ent_id;
1621     } else {
1622         $reply_id = '';
1623         $reply_ent_id = '';
1624     }
1625
1626     /* Here you can modify the message structure just before we hand
1627        it over to deliver; plugin authors note that $composeMessage
1628        is sent and modified by reference since 1.5.2 */
1629     do_hook('compose_send', $composeMessage);
1630
1631     if (!$useSendmail && !$draft) {
1632         require_once(SM_PATH . 'class/deliver/Deliver_SMTP.class.php');
1633         $deliver = new Deliver_SMTP();
1634         global $smtpServerAddress, $smtpPort, $pop_before_smtp, $pop_before_smtp_host;
1635
1636         $authPop = (isset($pop_before_smtp) && $pop_before_smtp) ? true : false;
1637         if (empty($pop_before_smtp_host)) $pop_before_smtp_host = $smtpServerAddress;
1638         get_smtp_user($user, $pass);
1639         $stream = $deliver->initStream($composeMessage,$domain,0,
1640                 $smtpServerAddress, $smtpPort, $user, $pass, $authPop, $pop_before_smtp_host);
1641     } elseif (!$draft) {
1642         require_once(SM_PATH . 'class/deliver/Deliver_SendMail.class.php');
1643         global $sendmail_path, $sendmail_args;
1644         // Check for outdated configuration
1645         if (!isset($sendmail_args)) {
1646             if ($sendmail_path=='/var/qmail/bin/qmail-inject') {
1647                 $sendmail_args = '';
1648             } else {
1649                 $sendmail_args = '-i -t';
1650             }
1651         }
1652         $deliver = new Deliver_SendMail(array('sendmail_args'=>$sendmail_args));
1653         $stream = $deliver->initStream($composeMessage,$sendmail_path);
1654     } elseif ($draft) {
1655         global $draft_folder;
1656         $imap_stream = sqimap_login($username, false, $imapServerAddress,
1657                 $imapPort, 0);
1658         if (sqimap_mailbox_exists ($imap_stream, $draft_folder)) {
1659             require_once(SM_PATH . 'class/deliver/Deliver_IMAP.class.php');
1660             $imap_deliver = new Deliver_IMAP();
1661             $success = $imap_deliver->mail($composeMessage, $imap_stream, $reply_id, $reply_ent_id, $imap_stream, $draft_folder);
1662             sqimap_logout($imap_stream);
1663             unset ($imap_deliver);
1664             $composeMessage->purgeAttachments();
1665             return $success;
1666         } else {
1667             $msg  = '<br />'.sprintf(_("Error: Draft folder %s does not exist."), htmlspecialchars($draft_folder));
1668             plain_error_message($msg);
1669             return false;
1670         }
1671     }
1672     $success = false;
1673     if ($stream) {
1674         $deliver->mail($composeMessage, $stream, $reply_id, $reply_ent_id);
1675         $success = $deliver->finalizeStream($stream);
1676     }
1677     if (!$success) {
1678         // $deliver->dlv_server_msg is not always server's reply
1679         $msg = _("Message not sent.") . "<br />\n" .
1680             $deliver->dlv_msg;
1681         if (!empty($deliver->dlv_server_msg)) {
1682             // add 'server replied' part only when it is not empty.
1683             // Delivery error can be generated by delivery class itself
1684             $msg.='<br />' .
1685                 _("Server replied:") . ' ' . $deliver->dlv_ret_nr . ' ' .
1686                 nl2br(htmlspecialchars($deliver->dlv_server_msg));
1687         }
1688         plain_error_message($msg);
1689     } else {
1690         unset ($deliver);
1691         $imap_stream = sqimap_login($username, false, $imapServerAddress, $imapPort, 0);
1692
1693
1694         // mark as replied or forwarded if applicable
1695         //
1696         global $what, $iAccount, $startMessage, $passed_id, $fwduid, $mailbox;
1697
1698         if ($action=='reply' || $action=='reply_all' || $action=='forward' || $action=='forward_as_attachment') {
1699             require(SM_PATH . 'functions/mailbox_display.php');
1700             $aMailbox = sqm_api_mailbox_select($imap_stream, $iAccount, $mailbox,array('setindex' => $what, 'offset' => $startMessage),array());
1701             switch($action) {
1702             case 'reply':
1703             case 'reply_all':
1704                 // check if we are allowed to set the \\Answered flag
1705                 if (in_array('\\answered',$aMailbox['PERMANENTFLAGS'], true)) {
1706                     $aUpdatedMsgs = sqimap_toggle_flag($imap_stream, array($passed_id), '\\Answered', true, false);
1707                     if (isset($aUpdatedMsgs[$passed_id]['FLAGS'])) {
1708                         /**
1709                         * Only update the cached headers if the header is
1710                         * cached.
1711                         */
1712                         if (isset($aMailbox['MSG_HEADERS'][$passed_id])) {
1713                             $aMailbox['MSG_HEADERS'][$passed_id]['FLAGS'] = $aMsg['FLAGS'];
1714                         }
1715                     }
1716                 }
1717                 break;
1718             case 'forward':
1719             case 'forward_as_attachment':
1720                 // check if we are allowed to set the $Forwarded flag (RFC 4550 paragraph 2.8)
1721                 if (in_array('$forwarded',$aMailbox['PERMANENTFLAGS'], true) ||
1722                     in_array('\\*',$aMailbox['PERMANENTFLAGS'])) {
1723
1724                     // when forwarding as an attachment from the message
1725                     // list, passed_id is not used, need to get UID(s)
1726                     // from the query string
1727                     //
1728                     if (empty($passed_id) && !empty($fwduid))
1729                         $ids = explode('_', $fwduid);
1730                     else
1731                         $ids = array($passed_id);
1732
1733                     $aUpdatedMsgs = sqimap_toggle_flag($imap_stream, $ids, '$Forwarded', true, false);
1734
1735                     foreach ($ids as $id) {
1736                         if (isset($aUpdatedMsgs[$id]['FLAGS'])) {
1737                             if (isset($aMailbox['MSG_HEADERS'][$id])) {
1738                                 $aMailbox['MSG_HEADERS'][$id]['FLAGS'] = $aMsg['FLAGS'];
1739                             }
1740                         }
1741                     }
1742                 }
1743                 break;
1744             }
1745
1746             /**
1747              * Write mailbox with updated seen flag information back to cache.
1748              */
1749             if(isset($aUpdatedMsgs[$passed_id])) {
1750                 $mailbox_cache[$iAccount.'_'.$aMailbox['NAME']] = $aMailbox;
1751                 sqsession_register($mailbox_cache,'mailbox_cache');
1752             }
1753
1754         }
1755
1756
1757         // move to sent folder
1758         //
1759         $move_to_sent = getPref($data_dir,$username,'move_to_sent');
1760         if (isset($default_move_to_sent) && ($default_move_to_sent != 0)) {
1761             $svr_allow_sent = true;
1762         } else {
1763             $svr_allow_sent = false;
1764         }
1765
1766         if (isset($sent_folder) && (($sent_folder != '') || ($sent_folder != 'none'))
1767                 && sqimap_mailbox_exists( $imap_stream, $sent_folder)) {
1768             $fld_sent = true;
1769         } else {
1770             $fld_sent = false;
1771         }
1772
1773         if ((isset($move_to_sent) && ($move_to_sent != 0)) || (!isset($move_to_sent))) {
1774             $lcl_allow_sent = true;
1775         } else {
1776             $lcl_allow_sent = false;
1777         }
1778
1779         if (($fld_sent && $svr_allow_sent && !$lcl_allow_sent) || ($fld_sent && $lcl_allow_sent)) {
1780             if ($action == 'reply' || $action == 'reply_all') {
1781                 $save_reply_with_orig=getPref($data_dir,$username,'save_reply_with_orig');
1782                 if ($save_reply_with_orig) {
1783                     $sent_folder = $mailbox;
1784                 }
1785             }
1786             require_once(SM_PATH . 'class/deliver/Deliver_IMAP.class.php');
1787             $imap_deliver = new Deliver_IMAP();
1788             $imap_deliver->mail($composeMessage, $imap_stream, $reply_id, $reply_ent_id, $imap_stream, $sent_folder);
1789             unset ($imap_deliver);
1790         }
1791
1792
1793         // final cleanup
1794         //
1795         $composeMessage->purgeAttachments();
1796         sqimap_logout($imap_stream);
1797
1798     }
1799     return $success;
1800 }