6 * Copyright (c) 1999-2003 The SquirrelMail Project Team
7 * Licensed under the GNU GPL. For full terms see the file COPYING.
9 * Handles attachment downloads to the users computer.
10 * Also allows displaying of attachments when possible.
15 /* Path for SquirrelMail required files. */
16 define('SM_PATH','../');
18 /* SquirrelMail required files. */
19 require_once(SM_PATH
. 'include/validate.php');
20 require_once(SM_PATH
. 'functions/imap.php');
21 require_once(SM_PATH
. 'functions/mime.php');
24 header('Cache-Control: cache');
28 $key = $_COOKIE['key'];
29 $username = $_SESSION['username'];
30 $onetimepad = $_SESSION['onetimepad'];
31 $mailbox = $_GET['mailbox'];
32 $passed_id = (int) $_GET['passed_id'];
33 $ent_id = $_GET['ent_id'];
34 $messages = $_SESSION['messages'];
36 if (isset($_GET['absolute_dl'])) {
37 $absolute_dl = $_GET['absolute_dl'];
41 $mailbox = decodeHeader($mailbox);
45 $imapConnection = sqimap_login($username, $key, $imapServerAddress, $imapPort, 0);
46 $mbx_response = sqimap_mailbox_select($imapConnection, $mailbox);
48 $message = &$messages[$mbx_response['UIDVALIDITY']]["$passed_id"];
49 if (!is_object($message)) {
50 $message = sqimap_get_message($imapConnection,$passed_id, $mailbox);
52 $subject = $message->rfc822_header
->subject
;
54 $message = &$message->getEntity($ent_id);
55 $header = $message->header
;
57 if ($message->rfc822_header
) {
58 $subject = $message->rfc822_header
->subject
;
59 $charset = $header->content_type
->properties
['charset'];
61 $header = $message->header
;
62 $charset = $header->getParameter('charset');
64 $type0 = $header->type0
;
65 $type1 = $header->type1
;
66 $encoding = strtolower($header->encoding
);
71 $encoding = "US-ASCII";
75 * lets redefine message as this particular entity that we wish to display.
76 * it should hold only the header for this entity. We need to fetch the body
77 * yet before we can display anything.
80 if (isset($override_type0)) {
81 $type0 = $override_type0;
83 if (isset($override_type1)) {
84 $type1 = $override_type1;
87 if (is_object($message->header
->disposition
)) {
88 $filename = decodeHeader($header->disposition
->getProperty('filename'));
90 $filename = decodeHeader($header->disposition
->getProperty('name'));
93 $filename = decodeHeader($header->getParameter('name'));
96 $filename = decodeHeader($header->getParameter('name'));
99 if (strlen($filename) < 1) {
100 if ($type1 == 'plain' && $type0 == 'text') {
102 $filename = $subject . '.txt';
103 } else if ($type1 == 'richtext' && $type0 == 'text') {
105 $filename = $subject . '.rtf';
106 } else if ($type1 == 'postscript' && $type0 == 'application') {
108 $filename = $subject . '.ps';
109 } else if ($type1 == 'rfc822' && $type0 == 'message') {
111 $filename = $subject . '.msg';
116 if (strlen($filename) < 1) {
117 $filename = 'untitled'.strip_tags($ent_id).$suffix;
119 $filename = "$filename.$suffix";
125 * The following sections display the attachment in different
126 * ways depending on how they choose. The first way will download
127 * under any circumstance. This sets the Content-type to be
128 * applicatin/octet-stream, which should be interpreted by the
129 * browser as "download me".
130 * The second method (view) is used for images or other formats
131 * that should be able to be handled by the browser. It will
132 * most likely display the attachment inline inside the browser.
133 * And finally, the third one will be used by default. If it
134 * is displayable (text or html), it will load them up in a text
135 * viewer (built in to squirrelmail). Otherwise, it sets the
136 * content-type as application/octet-stream
138 if (isset($absolute_dl) && $absolute_dl) {
139 DumpHeaders($type0, $type1, $filename, 1);
141 DumpHeaders($type0, $type1, $filename, 0);
143 /* be aware that any warning caused by download.php will corrupt the
144 * attachment in case of ERROR reporting = E_ALL and the output is the screen */
145 mime_print_body_lines ($imapConnection, $passed_id, $ent_id, $encoding);
148 * This function is verified to work with Netscape and the *very latest*
149 * version of IE. I don't know if it works with Opera, but it should now.
151 function DumpHeaders($type0, $type1, $filename, $force) {
152 global $_SERVER, $languages, $squirrelmail_language;
155 $HTTP_USER_AGENT = $_SERVER['HTTP_USER_AGENT'];
157 if (strstr($HTTP_USER_AGENT, 'compatible; MSIE ') !== false &&
158 strstr($HTTP_USER_AGENT, 'Opera') === false) {
162 if (strstr($HTTP_USER_AGENT, 'compatible; MSIE 6') !== false &&
163 strstr($HTTP_USER_AGENT, 'Opera') === false) {
167 if (isset($languages[$squirrelmail_language]['XTRA_CODE']) &&
168 function_exists($languages[$squirrelmail_language]['XTRA_CODE'])) {
170 $languages[$squirrelmail_language]['XTRA_CODE']('downloadfilename', $filename, $HTTP_USER_AGENT);
172 $filename = ereg_replace('[^-a-zA-Z0-9\.]', '_', $filename);
175 // A Pox on Microsoft and it's Office!
177 // Try to show in browser window
178 header("Content-Disposition: inline; filename=\"$filename\"");
179 header("Content-Type: $type0/$type1; name=\"$filename\"");
181 // Try to pop up the "save as" box
182 // IE makes this hard. It pops up 2 save boxes, or none.
183 // http://support.microsoft.com/support/kb/articles/Q238/5/88.ASP
184 // But, accordint to Microsoft, it is "RFC compliant but doesn't
185 // take into account some deviations that allowed within the
186 // specification." Doesn't that mean RFC non-compliant?
187 // http://support.microsoft.com/support/kb/articles/Q258/4/52.ASP
189 // The best thing you can do for IE is to upgrade to the latest
191 if ($isIE && !$isIE6) {
192 // http://support.microsoft.com/support/kb/articles/Q182/3/15.asp
193 // Do not have quotes around filename, but that applied to
194 // "attachment"... does it apply to inline too?
196 // This combination seems to work mostly. IE 5.5 SP 1 has
197 // known issues (see the Microsoft Knowledge Base)
198 header("Content-Disposition: inline; filename=$filename");
199 // This works for most types, but doesn't work with Word files
200 header("Content-Type: application/download; name=\"$filename\"");
202 // These are spares, just in case. :-)
203 //header("Content-Type: $type0/$type1; name=\"$filename\"");
204 //header("Content-Type: application/x-msdownload; name=\"$filename\"");
205 //header("Content-Type: application/octet-stream; name=\"$filename\"");
207 header("Content-Disposition: attachment; filename=\"$filename\"");
208 // application/octet-stream forces download for Netscape
209 header("Content-Type: application/octet-stream; name=\"$filename\"");