src/compose.php

   1 <?php
   2
   3 /**
   4  * compose.php
   5  *
   6  * Copyright (c) 1999-2002 The SquirrelMail Project Team
   7  * Licensed under the GNU GPL. For full terms see the file COPYING.
   8  *
   9  * This code sends a mail.
  10  *
  11  * There are 4 modes of operation:
  12  *    - Start new mail
  13  *    - Add an attachment
  14  *    - Send mail
  15  *    - Save As Draft
  16  *
  17  * $Id$
  18  */
  19
  20 require_once('../src/validate.php');
  21 require_once('../functions/imap.php');
  22 require_once('../functions/date.php');
  23 require_once('../functions/mime.php');
  24 require_once('../functions/smtp.php');
  25 require_once('../functions/display_messages.php');
  26 require_once('../functions/plugin.php');
  27
  28 /* --------------------- Specific Functions ------------------------------ */
  29
  30
  31
  32 /**
  33  * Does the opposite of sqWordWrap()
  34  */
  35 function sqUnWordWrap(&$body) {
  36     $lines = explode("\n", $body);
  37     $body = '';
  38     $PreviousSpaces = '';
  39     for ($i = 0; $i < count($lines); $i ++) {
  40         ereg("^([\t >]*)([^\t >].*)?$", $lines[$i], $regs);
  41         $CurrentSpaces = $regs[1];
  42         if (isset($regs[2])) {
  43             $CurrentRest = $regs[2];
  44         }
  45
  46         if ($i == 0) {
  47             $PreviousSpaces = $CurrentSpaces;
  48             $body = $lines[$i];
  49         } else if (($PreviousSpaces == $CurrentSpaces) /* Do the beginnings match */
  50                    && (strlen($lines[$i - 1]) > 65)    /* Over 65 characters long */
  51                    && strlen($CurrentRest)) {          /* and there's a line to continue with */
  52             $body .= ' ' . $CurrentRest;
  53         } else {
  54             $body .= "\n" . $lines[$i];
  55             $PreviousSpaces = $CurrentSpaces;
  56         }
  57     }
  58     $body .= "\n";
  59 }
  60
  61 /* ----------------------------------------------------------------------- */
  62
  63 if (!isset($attachments)) {
  64     $attachments = array();
  65     session_register('attachments');
  66 }
  67
  68 if (!isset($composesession)) {
  69     $composesession = 0;
  70     session_register('composesession');
  71 }
  72
  73 if (!isset($session) || (isset($newmessage) && $newmessage)) {
  74     $session = "$composesession" +1;
  75     $composesession = $session;
  76 }
  77
  78 if (!isset($mailbox) || $mailbox == '' || ($mailbox == 'None')) {
  79     $mailbox = 'INBOX';
  80 }
  81
  82 if (isset($draft)) {
  83     include_once ('../src/draft_actions.php');
  84     if (! isset($reply_id)) {
  85          $reply_id = 0;
  86     }
  87     if (! isset($MDN)) {
  88         $MDN = 'False';
  89     }
  90     if (! isset($mailprio)) {
  91         $mailprio = '';
  92     }
  93     if (!saveMessageAsDraft($send_to, $send_to_cc, $send_to_bcc, $subject, $body, $reply_id, $mailprio, $session)) {
  94         showInputForm($session);
  95         exit();
  96     } else {
  97         $draft_message = _("Draft Email Saved");
  98         /* If this is a resumed draft, then delete the original */
  99         if(isset($delete_draft)) {
 100             Header("Location: delete_message.php?mailbox=" . urlencode($draft_folder) .
 101                    "&message=$delete_draft&sort=$sort&startMessage=1&saved_draft=yes");
 102             exit();
 103         }
 104         else {
 105             if ($compose_new_win == '1') {
 106                 Header("Location: compose.php?saved_draft=yes&session=$composesession");
 107             exit();
 108             }
 109             else {
 110             Header("Location: right_main.php?mailbox=$draft_folder&sort=$sort".
 111                    "&startMessage=1&note=$draft_message");
 112             exit();
 113             }
 114         }
 115     }
 116 }
 117
 118 if (isset($send)) {
 119     if (isset($HTTP_POST_FILES['attachfile']) &&
 120         $HTTP_POST_FILES['attachfile']['tmp_name'] &&
 121         $HTTP_POST_FILES['attachfile']['tmp_name'] != 'none') {
 122         $AttachFailure = saveAttachedFiles($session);
 123     }
 124     if (checkInput(false) && !isset($AttachFailure)) {
 125         $urlMailbox = urlencode (trim($mailbox));
 126         if (! isset($reply_id)) {
 127             $reply_id = 0;
 128         }
 129         /*
 130          * Set $default_charset to correspond with the user's selection
 131          * of language interface.
 132          */
 133         set_my_charset();
 134
 135         /*
 136          * This is to change all newlines to \n
 137          * We'll change them to \r\n later (in the sendMessage function)
 138          */
 139         $body = str_replace("\r\n", "\n", $body);
 140         $body = str_replace("\r", "\n", $body);
 141
 142         /*
 143          * Rewrap $body so that no line is bigger than $editor_size
 144          * This should only really kick in the sqWordWrap function
 145          * if the browser doesn't support "VIRTUAL" as the wrap type.
 146          */
 147         $body = explode("\n", $body);
 148         $newBody = '';
 149         foreach ($body as $line) {
 150             if( $line <> '-- ' ) {
 151                $line = rtrim($line);
 152             }
 153             if (strlen($line) <= $editor_size + 1) {
 154                 $newBody .= $line . "\n";
 155             } else {
 156                 sqWordWrap($line, $editor_size);
 157                 $newBody .= $line . "\n";
 158             }
 159         }
 160         $body = $newBody;
 161
 162         do_hook('compose_send');
 163
 164         $MDN = False;  // we are not sending a mdn response
 165         if (! isset($mailprio)) {
 166             $Result = sendMessage($send_to, $send_to_cc, $send_to_bcc,
 167                                   $subject, $body, $reply_id, $MDN, '', $session);
 168         } else {
 169             $Result = sendMessage($send_to, $send_to_cc, $send_to_bcc,
 170                                   $subject, $body, $reply_id, $MDN, $mailprio, $session);
 171         }
 172         if (! $Result) {
 173             showInputForm($session);
 174             exit();
 175         }
 176         if ( isset($delete_draft)) {
 177             Header("Location: delete_message.php?mailbox=" . urlencode( $draft_folder ).
 178                    "&message=$delete_draft&sort=$sort&startMessage=1&mail_sent=yes");
 179             exit();
 180         }
 181         if ($compose_new_win == '1') {
 182             Header("Location: compose.php?mail_sent=yes");
 183         }
 184         else {
 185             Header("Location: right_main.php?mailbox=$urlMailbox&sort=$sort".
 186                    "&startMessage=1");
 187         }
 188     } else {
 189         /*
 190          *$imapConnection = sqimap_login($username, $key, $imapServerAddress,
 191          *                               $imapPort, 0);
 192          */
 193         if ($compose_new_win == '1') {
 194             compose_Header($color, $mailbox);
 195         }
 196         else {
 197             displayPageHeader($color, $mailbox);
 198         }
 199         if (isset($AttachFailure)) {
 200              plain_error_message(_("Could not move/copy file. File not attached"),
 201                                  $color);
 202         }
 203
 204         checkInput(true);
 205         showInputForm($session);
 206         /* sqimap_logout($imapConnection); */
 207     }
 208 } elseif (isset($html_addr_search_done)) {
 209         if ($compose_new_win == '1') {
 210             compose_Header($color, $mailbox);
 211         }
 212         else {
 213             displayPageHeader($color, $mailbox);
 214         }
 215
 216     if (isset($send_to_search) && is_array($send_to_search)) {
 217         foreach ($send_to_search as $k => $v) {
 218             if (substr($k, 0, 1) == 'T') {
 219                 if ($send_to) {
 220                     $send_to .= ', ';
 221                 }
 222                 $send_to .= $v;
 223             }
 224             elseif (substr($k, 0, 1) == 'C') {
 225                 if ($send_to_cc) {
 226                     $send_to_cc .= ', ';
 227                 }
 228                 $send_to_cc .= $v;
 229             }
 230             elseif (substr($k, 0, 1) == 'B') {
 231                 if ($send_to_bcc) {
 232                     $send_to_bcc .= ', ';
 233                 }
 234                 $send_to_bcc .= $v;
 235             }
 236         }
 237     }
 238     showInputForm($session);
 239 } elseif (isset($html_addr_search)) {
 240     if (isset($HTTP_POST_FILES['attachfile']) &&
 241         $HTTP_POST_FILES['attachfile']['tmp_name'] &&
 242         $HTTP_POST_FILES['attachfile']['tmp_name'] != 'none') {
 243         if (saveAttachedFiles($session)) {
 244             plain_error_message(_("Could not move/copy file. File not attached"), $color);
 245         }
 246     }
 247     /*
 248      * I am using an include so as to elminiate an extra unnecessary
 249      * click.  If you can think of a better way, please implement it.
 250      */
 251     include_once('./addrbook_search_html.php');
 252 } elseif (isset($attach)) {
 253     if (saveAttachedFiles($session)) {
 254         plain_error_message(_("Could not move/copy file. File not attached"), $color);
 255     }
 256         if ($compose_new_win == '1') {
 257             compose_Header($color, $mailbox);
 258         }
 259         else {
 260             displayPageHeader($color, $mailbox);
 261         }
 262     showInputForm($session);
 263 }
 264 elseif (isset($sigappend)) {
 265     $idents = getPref($data_dir, $username, 'identities', 0);
 266     if ($idents > 1) {
 267        if ($identity == 'default') {
 268           $no = 'g';
 269        } else {
 270           $no = $identity;
 271        }
 272        $signature = getSig($data_dir, $username, $no);
 273     }
 274     $body .= "\n\n".($prefix_sig==true? "-- \n":'').$signature;
 275     if ($compose_new_win == '1') {
 276          compose_Header($color, $mailbox);
 277     } else {
 278         displayPageHeader($color, $mailbox);
 279     }
 280     showInputForm($session);
 281 } elseif (isset($do_delete)) {
 282         if ($compose_new_win == '1') {
 283             compose_Header($color, $mailbox);
 284         }
 285         else {
 286             displayPageHeader($color, $mailbox);
 287         }
 288
 289     $hashed_attachment_dir = getHashedDir($username, $attachment_dir);
 290     if (isset($delete) && is_array($delete)) {
 291         foreach($delete as $index) {
 292             $attached_file = $hashed_attachment_dir . '/'
 293                            . $attachments[$index]['localfilename'];
 294             unlink ($attached_file);
 295             unset ($attachments[$index]);
 296         }
 297     }
 298
 299     showInputForm($session);
 300
 301 } elseif (isset($attachedmessages)) {
 302
 303     /*
 304      * This handles the case if we attache message
 305      */
 306     $imapConnection = sqimap_login($username, $key, $imapServerAddress,
 307                                    $imapPort, 0);
 308         if ($compose_new_win == '1') {
 309             compose_Header($color, $mailbox);
 310         }
 311         else {
 312             displayPageHeader($color, $mailbox);
 313         }
 314
 315     $newmail = true;
 316
 317     newMail();
 318     showInputForm($session);
 319     sqimap_logout($imapConnection);
 320
 321 } else {
 322     /*
 323      * This handles the default case as well as the error case
 324      * (they had the same code) --> if (isset($smtpErrors))
 325      */
 326     $imapConnection = sqimap_login($username, $key, $imapServerAddress,
 327                                    $imapPort, 0);
 328         if ($compose_new_win == '1') {
 329             compose_Header($color, $mailbox);
 330         }
 331         else {
 332             displayPageHeader($color, $mailbox);
 333         }
 334
 335     $newmail = true;
 336
 337     ClearAttachments($session);
 338
 339     if (isset($forward_id) && $forward_id && isset($ent_num) && $ent_num) {
 340         getAttachments(0, $session);
 341     }
 342
 343     if (isset($draft_id) && $draft_id && isset($ent_num) && $ent_num) {
 344         getAttachments(0, $session);
 345     }
 346
 347     if (isset($passed_id) && $passed_id && isset($ent_num) && $ent_num) {
 348         getAttachments(0, $session);
 349     }
 350
 351     newMail($session);
 352     showInputForm($session);
 353     sqimap_logout($imapConnection);
 354 }
 355
 356 exit();
 357
 358
 359 /**************** Only function definitions go below *************/
 360
 361
 362 /* This function is used when not sending or adding attachments */
 363 function newMail () {
 364     global $forward_id, $imapConnection, $msg, $ent_num, $body_ary, $body,
 365            $reply_id, $send_to, $send_to_cc, $mailbox, $send_to_bcc, $editor_size,
 366            $draft_id, $use_signature, $composesession, $forward_cc, $passed_id;
 367
 368     $send_to = decodeHeader($send_to, false);
 369     $send_to_cc = decodeHeader($send_to_cc, false);
 370     $send_to_bcc = decodeHeader($send_to_bcc, false);
 371     $send_to = str_replace('&lt;', '<', str_replace('&gt;', '>', str_replace('&amp;', '&', str_replace('&quot;', '"', $send_to))));
 372     $send_to_cc = str_replace('&lt;', '<', str_replace('&gt;', '>', str_replace('&amp;', '&', str_replace('&quot;', '"', $send_to_cc))));
 373     $send_to_bcc = str_replace('&lt;', '<', str_replace('&gt;', '>', str_replace('&amp;', '&', str_replace('&quot;', '"', $send_to_bcc))));
 374
 375     if ($forward_id) {
 376         $id = $forward_id;
 377     } elseif ($reply_id) {
 378         $id = $reply_id;
 379     } elseif ($passed_id) {
 380         $id = $passed_id;
 381     }
 382
 383
 384     if ($draft_id){
 385         $id = $draft_id;
 386         $use_signature = FALSE;
 387     }
 388
 389     if (isset($id)) {
 390         sqimap_mailbox_select($imapConnection, $mailbox);
 391         $message = sqimap_get_message($imapConnection, $id, $mailbox);
 392         $orig_header = $message->header;
 393         if ($ent_num) {
 394             $message = getEntity($message, $ent_num);
 395         }
 396         if ($message->header->type0 == 'text' ||
 397             $message->header->type1 == 'message') {
 398             if ($ent_num) {
 399                 $body = decodeBody(
 400                     mime_fetch_body($imapConnection, $id, $ent_num),
 401                     $message->header->encoding);
 402             } else {
 403                 $body = decodeBody(
 404                     mime_fetch_body($imapConnection, $id, 1),
 405                     $message->header->encoding);
 406             }
 407         } else {
 408             $body = '';
 409         }
 410
 411         if ($message->header->type1 == 'html') {
 412             $body = strip_tags($body);
 413         }
 414
 415         sqUnWordWrap($body);
 416
 417         /* this corrects some wrapping/quoting problems on replies */
 418         if ($reply_id) {
 419             $rewrap_body = explode("\n", $body);
 420             for ($i=0;$i<count($rewrap_body);$i++) {
 421                 sqWordWrap($rewrap_body[$i], ($editor_size - 2));
 422                 if (preg_match("/^(>+)/", $rewrap_body[$i], $matches)) {
 423                     $gt = $matches[1];
 424                     $rewrap_body[$i] = str_replace("\n", "\n$gt ", $rewrap_body[$i]);
 425                 }
 426                 $rewrap_body[$i] .= "\n";
 427             }
 428             $body = implode("", $rewrap_body);
 429         }
 430
 431         $body_ary = explode("\n", $body);
 432         $i = count($body_ary) - 1;
 433         while ($i >= 0 && ereg("^[>\\s]*$", $body_ary[$i])) {
 434             unset($body_ary[$i]);
 435             $i --;
 436         }
 437         $body = '';
 438         for ($i=0; isset($body_ary[$i]); $i++) {
 439             if ($reply_id) {
 440                 if (preg_match("/^(>){1,}/", $body_ary[$i])) {
 441                     $body_ary[$i] = '>' . $body_ary[$i];
 442                 } else {
 443                     $body_ary[$i] = '> ' . $body_ary[$i];
 444                 }
 445             }
 446             if ($draft_id) {
 447                 sqWordWrap($body_ary[$i], $editor_size );
 448             }
 449             $body .= $body_ary[$i] . "\n";
 450             unset($body_ary[$i]);
 451         }
 452         if ($forward_id) {
 453             $bodyTop =  '-------- ' . _("Original Message") . " --------\n" .
 454                         _("Subject") . ': ' . $orig_header->subject . "\n" .
 455                         _("From")    . ': ' . $orig_header->from    . "\n" .
 456                         _("Date")      . ': ' .
 457                                  getLongDateString( $orig_header->date ). "\n" .
 458                         _("To")      . ': ' . $orig_header->to[0]   . "\n";
 459             if (count($orig_header->to) > 1) {
 460                 for ($x=1; $x < count($orig_header->to); $x++) {
 461                     $bodyTop .= '         ' . $orig_header->to[$x] . "\n";
 462                 }
 463             }
 464             if (isset($forward_cc) && $forward_cc) {
 465                 $bodyTop .= _("Cc") . ': ' . $orig_header->cc[0] . "\n";
 466                 if (count($orig_header->cc) > 1) {
 467                     for ($x = 1; $x < count($orig_header->cc); $x++) {
 468                         $bodyTop .= '         ' . $orig_header->cc[$x] . "\n";
 469                     }
 470                 }
 471             }
 472             $bodyTop .= "\n";
 473             $body = $bodyTop . $body;
 474         }
 475         elseif ($reply_id) {
 476             $orig_from = decodeHeader($orig_header->from, false);
 477             $body = getReplyCitation($orig_from) . $body;
 478         }
 479
 480         return;
 481     }
 482
 483     if (!$send_to) {
 484         $send_to = sqimap_find_email($send_to);
 485     }
 486
 487     /* This formats a CC string if they hit "reply all" */
 488     if ($send_to_cc != '') {
 489         $send_to_cc = ereg_replace('"[^"]*"', '', $send_to_cc);
 490         $send_to_cc = str_replace(';', ',', $send_to_cc);
 491         $sendcc = explode(',', $send_to_cc);
 492         $send_to_cc = '';
 493
 494         for ($i = 0; $i < count($sendcc); $i++) {
 495             $sendcc[$i] = trim($sendcc[$i]);
 496             if ($sendcc[$i] == '') {
 497                 continue;
 498             }
 499
 500             $sendcc[$i] = sqimap_find_email($sendcc[$i]);
 501             $whofrom = sqimap_find_displayable_name($msg['HEADER']['FROM']);
 502             $whoreplyto = sqimap_find_email($msg['HEADER']['REPLYTO']);
 503
 504             if ((strtolower(trim($sendcc[$i])) != strtolower(trim($whofrom))) &&
 505                 (strtolower(trim($sendcc[$i])) != strtolower(trim($whoreplyto))) &&
 506                 (trim($sendcc[$i]) != '')) {
 507                 $send_to_cc .= trim($sendcc[$i]) . ', ';
 508             }
 509         }
 510         $send_to_cc = trim($send_to_cc);
 511         if (substr($send_to_cc, -1) == ',') {
 512             $send_to_cc = substr($send_to_cc, 0, strlen($send_to_cc) - 1);
 513         }
 514     }
 515 } /* function newMail() */
 516
 517
 518 function getAttachments($message, $session) {
 519     global $mailbox, $attachments, $attachment_dir, $imapConnection,
 520            $ent_num, $forward_id, $draft_id, $username, $passed_id;
 521
 522     if (isset($draft_id)) {
 523         $id = $draft_id;
 524     } else if (isset($forward_id)) {
 525         $id = $forward_id;
 526     } else {
 527         $id = $passed_id;
 528     }
 529
 530     if (!$message) {
 531         sqimap_mailbox_select($imapConnection, $mailbox);
 532         $message = sqimap_get_message($imapConnection, $id, $mailbox);
 533     }
 534
 535     $hashed_attachment_dir = getHashedDir($username, $attachment_dir);
 536     if (count($message->entities) == 0) {
 537         if ($message->header->entity_id != $ent_num) {
 538             $filename = decodeHeader($message->header->filename);
 539
 540             if ($filename == "") {
 541                 $filename = "untitled-".$message->header->entity_id;
 542             }
 543
 544             $localfilename = GenerateRandomString(32, '', 7);
 545             $full_localfilename = "$hashed_attachment_dir/$localfilename";
 546             while (file_exists($full_localfilename)) {
 547                 $localfilename = GenerateRandomString(32, '', 7);
 548                 $full_localfilename = "$hashed_attachment_dir/$localfilename";
 549             }
 550
 551             $newAttachment = array();
 552             $newAttachment['localfilename'] = $localfilename;
 553             $newAttachment['remotefilename'] = $filename;
 554             $newAttachment['type'] = strtolower($message->header->type0 .
 555                                                 '/' . $message->header->type1);
 556             $newAttachment['id'] = strtolower($message->header->id);
 557             $newAttachment['session'] = $session;
 558
 559             /* Write Attachment to file */
 560             $fp = fopen ("$hashed_attachment_dir/$localfilename", 'w');
 561             fputs($fp, decodeBody(mime_fetch_body($imapConnection,
 562                 $id, $message->header->entity_id),
 563                 $message->header->encoding));
 564             fclose ($fp);
 565
 566             $attachments[] = $newAttachment;
 567         }
 568     } else {
 569         for ($i = 0; $i < count($message->entities); $i++) {
 570             getAttachments($message->entities[$i], $session);
 571         }
 572     }
 573     return;
 574 }
 575
 576 function showInputForm ($session) {
 577     global $send_to, $send_to_cc, $reply_subj, $forward_subj, $body,
 578            $passed_body, $color, $use_signature, $signature, $prefix_sig,
 579            $editor_size, $attachments, $subject, $newmail,
 580            $use_javascript_addr_book, $send_to_bcc, $reply_id, $mailbox,
 581            $from_htmladdr_search, $location_of_buttons, $attachment_dir,
 582            $username, $data_dir, $identity, $draft_id, $delete_draft,
 583            $mailprio, $default_use_mdn, $mdn_user_support, $compose_new_win,
 584            $saved_draft, $mail_sent, $sig_first, $edit_as_new;
 585
 586     $subject = decodeHeader($subject, false);
 587     $reply_subj = decodeHeader($reply_subj, false);
 588     $forward_subj = decodeHeader($forward_subj, false);
 589
 590     if ($use_javascript_addr_book) {
 591         echo "\n". '<SCRIPT LANGUAGE=JavaScript><!--' . "\n" .
 592              'function open_abook() { ' . "\n" .
 593              '  var nwin = window.open("addrbook_popup.php","abookpopup",' .
 594              '"width=670,height=300,resizable=yes,scrollbars=yes");' . "\n" .
 595              '  if((!nwin.opener) && (document.windows != null))' . "\n" .
 596              '    nwin.opener = document.windows;' . "\n" .
 597              "}\n" .
 598              '// --></SCRIPT>' . "\n\n";
 599     }
 600
 601     echo "\n" . '<FORM name=compose action="compose.php" METHOD=POST ' .
 602          'ENCTYPE="multipart/form-data"';
 603     do_hook("compose_form");
 604
 605
 606     echo ">\n";
 607
 608     if (isset($draft_id) && !$edit_as_new) {
 609         echo '<input type="hidden" name="delete_draft" value="' . $draft_id . "\">\n";
 610     }
 611     if (isset($delete_draft)) {
 612         echo '<input type="hidden" name="delete_draft" value="' . $delete_draft. "\">\n";
 613     }
 614     if (isset($session)) {
 615         echo '<input type="hidden" name="session" value="' . "$session" . "\">\n";
 616     }
 617
 618     if ($saved_draft == 'yes') {
 619         echo '<BR><CENTER><B>'. _("Draft Saved").'</CENTER></B>';
 620     }
 621     if ($mail_sent == 'yes') {
 622         echo '<BR><CENTER><B>'. _("Your Message has been sent").'</CENTER></B>';
 623     }
 624     echo '<TABLE WIDTH="100%" ALIGN=center CELLSPACING=0 BORDER=0>' . "\n";
 625     if ($compose_new_win == '1') {
 626         echo '<TABLE ALIGN=CENTER BGCOLOR="'.$color[0].'" WIDTH="100%" BORDER=0>'."\n";
 627         echo '   <TR><TD></TD><TD ALIGN="RIGHT"><INPUT TYPE="BUTTON" NAME="Close" onClick="return self.close()" VALUE='._("Close").'></TD></TR>'."\n";
 628     }
 629     if ($location_of_buttons == 'top') {
 630         showComposeButtonRow();
 631     }
 632
 633     $idents = getPref($data_dir, $username, 'identities', 0);
 634     if ($idents > 1) {
 635         echo '   <TR>' . "\n" .
 636              '      <TD BGCOLOR="' . $color[4] . '" WIDTH="10%" ALIGN=RIGHT>' .
 637              "\n" .
 638              _("From:") .
 639              '      </TD><TD BGCOLOR="' . $color[4] . '" WIDTH="90%">' . "\n" .
 640              '<select name=identity>' . "\n" .
 641              '<option value=default>' .
 642              htmlspecialchars(getPref($data_dir, $username, 'full_name'));
 643         $em = getPref($data_dir, $username, 'email_address');
 644         if ($em != '') {
 645             echo htmlspecialchars(' <' . $em . '>') . "\n";
 646         }
 647         for ($i = 1; $i < $idents; $i ++) {
 648             echo '<option value="' . $i . '"';
 649             if (isset($identity) && $identity == $i) {
 650                 echo ' SELECTED';
 651             }
 652             echo '>' . htmlspecialchars(getPref($data_dir, $username,
 653                                                 'full_name' . $i));
 654             $em = getPref($data_dir, $username, 'email_address' . $i);
 655             if ($em != '') {
 656                 echo htmlspecialchars(' <' . $em . '>') . "\n";
 657             }
 658             echo '</option>';
 659         }
 660         echo '</select>' . "\n" .
 661              '      </TD>' . "\n" .
 662              '   </TR>' . "\n";
 663     }
 664     echo '   <TR>' . "\n" .
 665          '      <TD BGCOLOR="' . $color[4] . '" WIDTH="10%" ALIGN=RIGHT>' . "\n" .
 666          _("To:") .
 667          '      </TD><TD BGCOLOR="' . $color[4] . '" WIDTH="90%">' . "\n" .
 668          '         <INPUT TYPE=text NAME="send_to" VALUE="' .
 669          htmlspecialchars($send_to) . '" SIZE=60><BR>' . "\n" .
 670          '      </TD>' . "\n" .
 671          '   </TR>' . "\n" .
 672          '   <TR>' . "\n" .
 673          '      <TD BGCOLOR="' . $color[4] . '" ALIGN=RIGHT>' . "\n" .
 674          _("CC:") .
 675          '      </TD><TD BGCOLOR="' . $color[4] . '" ALIGN=LEFT>' . "\n" .
 676          '         <INPUT TYPE=text NAME="send_to_cc" SIZE=60 VALUE="' .
 677          htmlspecialchars($send_to_cc) . '"><BR>' . "\n" .
 678          '      </TD>' . "\n" .
 679          '   </TR>' . "\n" .
 680          '   <TR>' . "\n" .
 681          '      <TD BGCOLOR="' . $color[4] . '" ALIGN=RIGHT>' . "\n" .
 682          _("BCC:") .
 683          '      </TD><TD BGCOLOR="' . $color[4] . '" ALIGN=LEFT>' . "\n" .
 684          '         <INPUT TYPE=text NAME="send_to_bcc" VALUE="' .
 685          htmlspecialchars($send_to_bcc) . '" SIZE=60><BR>' . "\n" .
 686          '</TD></TR>' . "\n" .
 687          '   <TR>' . "\n" .
 688          '      <TD BGCOLOR="' . $color[4] . '" ALIGN=RIGHT>' . "\n" .
 689          _("Subject:") .
 690          '      </TD><TD BGCOLOR="' . $color[4] . '" ALIGN=LEFT>' . "\n";
 691     if ($reply_subj) {
 692         $reply_subj = str_replace('"', "'", $reply_subj);
 693         $reply_subj = trim($reply_subj);
 694         if (substr(strtolower($reply_subj), 0, 3) != 're:') {
 695             $reply_subj = 'Re: ' . $reply_subj;
 696         }
 697         echo '         <INPUT TYPE=text NAME=subject SIZE=60 VALUE="' .
 698              htmlspecialchars($reply_subj) . '">';
 699     }
 700     elseif ($forward_subj) {
 701         $forward_subj = trim($forward_subj);
 702         if ((substr(strtolower($forward_subj), 0, 4) != 'fwd:') &&
 703             (substr(strtolower($forward_subj), 0, 5) != '[fwd:') &&
 704             (substr(strtolower($forward_subj), 0, 6) != '[ fwd:')) {
 705             $forward_subj = '[Fwd: ' . $forward_subj . ']';
 706         }
 707         echo '         <INPUT TYPE=text NAME=subject SIZE=60 VALUE="' .
 708              htmlspecialchars($forward_subj) . '">';
 709     } else {
 710         echo '         <INPUT TYPE=text NAME=subject SIZE=60 VALUE="' .
 711              htmlspecialchars($subject) . '">';
 712     }
 713     echo '</td></tr>' . "\n\n";
 714
 715     if ($location_of_buttons == 'between') {
 716         showComposeButtonRow();
 717     }
 718     if ($compose_new_win == '1') {
 719         echo '   <TR>' . "\n" .
 720              '      <TD BGCOLOR="' . $color[0] . '" COLSPAN=2 ALIGN=CENTER>' . "\n" .
 721              '         <TEXTAREA NAME=body ROWS=20 COLS="' .
 722              $editor_size . '" WRAP="VIRTUAL">';
 723     }
 724     else {
 725         echo '   <TR>' . "\n" .
 726             '      <TD BGCOLOR="' . $color[4] . '" COLSPAN=2>' . "\n" .
 727             '         &nbsp;&nbsp;<TEXTAREA NAME=body ROWS=20 COLS="' .
 728             $editor_size . '" WRAP="VIRTUAL">';
 729     }
 730     if ($use_signature == true && $newmail == true && !isset($from_htmladdr_search)) {
 731         if ($sig_first == '1') {
 732             echo "\n\n".($prefix_sig==true? "-- \n":'').htmlspecialchars($signature);
 733             echo "\n\n".htmlspecialchars($body);
 734         }
 735         else {
 736             echo "\n\n".htmlspecialchars($body);
 737             echo "\n\n".($prefix_sig==true? "-- \n":'').htmlspecialchars($signature);
 738         }
 739     }
 740     else {
 741        echo htmlspecialchars($body);
 742     }
 743     echo '</TEXTAREA><BR>' . "\n" .
 744          '      </TD>' . "\n" .
 745          '   </TR>' . "\n";
 746
 747     if ($location_of_buttons == 'bottom') {
 748         showComposeButtonRow();
 749     } else {
 750         echo '   <TR><TD COLSPAN=2 ALIGN=LEFT>';
 751         echo ' &nbsp; <INPUT TYPE=SUBMIT NAME=send VALUE="' . _("Send") . '"></TD></TR>' . "\n";
 752     }
 753
 754     /* This code is for attachments */
 755     echo '   <TR>' . "\n" .
 756          '     <TD VALIGN=MIDDLE ALIGN=RIGHT>' . "\n" .
 757                 _("Attach:") .
 758          '      </TD>' . "\n" .
 759          '      <TD VALIGN=MIDDLE ALIGN=LEFT>' . "\n" .
 760          '      <INPUT NAME="attachfile" SIZE=48 TYPE="file">' . "\n" .
 761          '      &nbsp;&nbsp;<input type="submit" name="attach"' .
 762          ' value="' . _("Add") .'">' . "\n" .
 763          '     </TD>' . "\n" .
 764          '   </TR>' . "\n";
 765
 766     if (count($attachments)) {
 767         $hashed_attachment_dir = getHashedDir($username, $attachment_dir);
 768         echo '<tr><td bgcolor="' . $color[0] . '" align=right>' . "\n" .
 769              '&nbsp;' .
 770              '</td><td align=left bgcolor="' . $color[0] . '">';
 771         foreach ($attachments as $key => $info) {
 772             if ($info['session'] == $session) {
 773                 $attached_file = "$hashed_attachment_dir/$info[localfilename]";
 774                 echo '<input type="checkbox" name="delete[]" value="' . $key . "\">\n" .
 775                         $info['remotefilename'] . ' - ' . $info['type'] . ' (' .
 776                         show_readable_size( filesize( $attached_file ) ) . ")<br>\n";
 777             }
 778         }
 779
 780         echo '<input type="submit" name="do_delete" value="' .
 781              _("Delete selected attachments") . "\">\n" .
 782              '</td></tr>';
 783     }
 784     /* End of attachment code */
 785     if ($compose_new_win == '1') {
 786         echo '</TABLE>'."\n";
 787     }
 788     echo '</TABLE>' . "\n";
 789     if ($reply_id) {
 790         echo '<input type=hidden name=reply_id value=' . $reply_id . ">\n";
 791     }
 792     echo '<INPUT TYPE=hidden NAME=mailbox VALUE="' . htmlspecialchars($mailbox) .
 793          "\">\n" .
 794          '</FORM>';
 795     do_hook('compose_bottom');
 796     echo '</BODY></HTML>' . "\n";
 797 }
 798
 799
 800 function showComposeButtonRow() {
 801     global $use_javascript_addr_book, $save_as_draft,
 802         $default_use_priority, $mailprio, $default_use_mdn,
 803         $request_mdn, $request_dr,
 804         $data_dir, $username;
 805
 806     echo "  <TR><TD>\n</TD><TD>\n";
 807     if ($default_use_priority) {
 808         if(!isset($mailprio)) {
 809             $mailprio = "3";
 810     }
 811     echo _("Priority") .': <select name="mailprio">'.
 812          '<option value="1"'.($mailprio=='1'?' selected':'').'>'. _("High") .'</option>'.
 813          '<option value="3"'.($mailprio=='3'?' selected':'').'>'. _("Normal") .'</option>'.
 814          '<option value="5"'.($mailprio=='5'?' selected':'').'>'. _("Low").'</option>'.
 815          "</select>";
 816     }
 817     $mdn_user_support=getPref($data_dir, $username, 'mdn_user_support',$default_use_mdn);
 818     if ($default_use_mdn) {
 819         if ($mdn_user_support) {
 820             echo "\n\t". _("Receipt") .': '.
 821             '<input type="checkbox" name="request_mdn" value=1'.
 822                 ($request_mdn=='1'?' checked':'') .'>'. _("On read").
 823             ' <input type="checkbox" name="request_dr" value=1'.
 824                 ($request_dr=='1'?' checked':'') .'>'. _("On Delivery");
 825         }
 826     }
 827
 828     echo "   <TR><td>\n   </td><td>\n";
 829     echo "\n    <INPUT TYPE=SUBMIT NAME=\"sigappend\" VALUE=\"". _("Signature") . "\">\n";
 830     if ($use_javascript_addr_book) {
 831         echo "      <SCRIPT LANGUAGE=JavaScript><!--\n document.write(\"".
 832              "         <input type=button value=\\\""._("Addresses").
 833                               "\\\" onclick='javascript:open_abook();'>\");".
 834              "         // --></SCRIPT><NOSCRIPT>\n".
 835              "         <input type=submit name=\"html_addr_search\" value=\"".
 836                               _("Addresses")."\">".
 837              "      </NOSCRIPT>\n";
 838     } else {
 839         echo "      <input type=submit name=\"html_addr_search\" value=\"".
 840                               _("Addresses")."\">";
 841     }
 842     echo "\n    <INPUT TYPE=SUBMIT NAME=send VALUE=\"". _("Send") . "\">\n";
 843
 844     if ($save_as_draft) {
 845         echo '<input type="submit" name ="draft" value="' . _("Save Draft") . "\">\n";
 846     }
 847
 848     do_hook('compose_button_row');
 849
 850     echo "   </TD></TR>\n\n";
 851 }
 852
 853 function checkInput ($show) {
 854     /*
 855      * I implemented the $show variable because the error messages
 856      * were getting sent before the page header.  So, I check once
 857      * using $show=false, and then when i'm ready to display the error
 858      * message, show=true
 859      */
 860     global $body, $send_to, $subject, $color;
 861
 862     if ($send_to == "") {
 863         if ($show) {
 864             plain_error_message(_("You have not filled in the \"To:\" field."), $color);
 865         }
 866         return false;
 867     }
 868     return true;
 869 } /* function checkInput() */
 870
 871
 872 /* True if FAILURE */
 873 function saveAttachedFiles($session) {
 874     global $HTTP_POST_FILES, $attachment_dir, $attachments, $username;
 875
 876     $hashed_attachment_dir = getHashedDir($username, $attachment_dir);
 877     $localfilename = GenerateRandomString(32, '', 7);
 878     $full_localfilename = "$hashed_attachment_dir/$localfilename";
 879     while (file_exists($full_localfilename)) {
 880         $localfilename = GenerateRandomString(32, '', 7);
 881         $full_localfilename = "$hashed_attachment_dir/$localfilename";
 882     }
 883
 884     if (!@rename($HTTP_POST_FILES['attachfile']['tmp_name'], $full_localfilename)) {
 885         if (!@copy($HTTP_POST_FILES['attachfile']['tmp_name'], $full_localfilename)) {
 886             return true;
 887         }
 888     }
 889
 890     $newAttachment['localfilename'] = $localfilename;
 891     $newAttachment['remotefilename'] = $HTTP_POST_FILES['attachfile']['name'];
 892     $newAttachment['type'] = strtolower($HTTP_POST_FILES['attachfile']['type']);
 893     $newAttachment['session'] = $session;
 894
 895     if ($newAttachment['type'] == "") {
 896          $newAttachment['type'] = 'application/octet-stream';
 897     }
 898
 899     $attachments[] = $newAttachment;
 900 }
 901
 902
 903 function ClearAttachments($session)
 904 {
 905     global $username, $attachments, $attachment_dir;
 906     $hashed_attachment_dir = getHashedDir($username, $attachment_dir);
 907
 908     $rem_attachments = array();
 909     if (is_array($attachments)) {
 910         foreach ($attachments as $info) {
 911                 if ($info['session'] == $session) {
 912                 $attached_file = "$hashed_attachment_dir/$info[localfilename]";
 913                 if (file_exists($attached_file)) {
 914                         unlink($attached_file);
 915                 }
 916                 }
 917             else {
 918                     $rem_attachments[] = $info;
 919                 }
 920         }
 921     }
 922     $attachments = $rem_attachments;
 923 }
 924
 925
 926 function getReplyCitation($orig_from)
 927 {
 928     global $reply_citation_style, $reply_citation_start, $reply_citation_end;
 929
 930     /* First, return an empty string when no citation style selected. */
 931     if (($reply_citation_style == '') || ($reply_citation_style == 'none')) {
 932         return '';
 933     }
 934
 935     /* Decode the users name. */
 936     $parpos = strpos($orig_from, '(');
 937     if ($parpos === false) {
 938         $orig_from = trim(substr($orig_from, 0, strpos($orig_from, '<')));
 939         $orig_from = str_replace('"', '', $orig_from);
 940         $orig_from = str_replace("'", '', $orig_from);
 941     } else {
 942         $end_parpos = strrpos($orig_from, ')');
 943         $end_parpos -= ($end_parpos === false ? $end_parpos : $parpos + 1);
 944         $orig_from = trim(substr($orig_from, $parpos + 1, $end_parpos));
 945     }
 946
 947     /* Make sure our final value isn't an empty string. */
 948     if ($orig_from == '') {
 949         return '';
 950     }
 951
 952     /* Otherwise, try to select the desired citation style. */
 953     switch ($reply_citation_style) {
 954     case 'author_said':
 955         $start = '';
 956         $end   = ' ' . _("said") . ':';
 957         break;
 958     case 'quote_who':
 959         $start = '<' . _("quote") . ' ' . _("who") . '="';
 960         $end   = '">';
 961         break;
 962     case 'user-defined':
 963         $start = $reply_citation_start . ' ';
 964         $end   = $reply_citation_end;
 965         break;
 966     default:
 967         return '';
 968     }
 969
 970     /* Build and return the citation string. */
 971     return ($start . $orig_from . $end . "\n");
 972 }
 973
 974 ?>