Added a much better fix for the IE/SSL problem. No security hazards
[squirrelmail.git] / functions / imap_general.php
index 02d94872d9d172c38b8c9eaa3179682c7a24fc1f..7222eed933ae1f16fe911f4acfa5a09939c6e7db 100755 (executable)
@@ -5,34 +5,65 @@
     **  This implements all functions that do general imap functions.
     **/
 
+   $imap_general_debug = false;
+
    /******************************************************************************
     **  Reads the output from the IMAP stream.  If handle_errors is set to true,
     **  this will also handle all errors that are received.  If it is not set,
     **  the errors will be sent back through $response and $message
     ******************************************************************************/
    function sqimap_read_data ($imap_stream, $pre, $handle_errors, &$response, &$message) {
-      global $color, $squirrelmail_language;
+      global $color, $squirrelmail_language, $imap_general_debug;
+
+      $keep_going = true;
+      $read = fgets($imap_stream, 9096);
+      while ($keep_going)
+      {
+          // Continue if needed for this single line
+          while (strpos($read, "\n") === false)
+         {
+             $read .= fgets($imap_stream, 9096);
+         }
+         
+         if ($imap_general_debug)
+         {
+             echo "<small><tt><font color=\"#CC0000\">$read</font></tt></small><br>\n";
+             flush();
+         }
 
-      //$imap_general_debug = true;
-      $imap_general_debug = false;
+          if (ereg("^$pre (OK|BAD|NO)(.*)$", $read, $regs))
+         {
+             // Test if this is really the last line.
+             // Very much a hack, but what else can I do?
+             socket_set_blocking($imap_stream, false);
+             $read_next = fgets($imap_stream, 2);
+             socket_set_blocking($imap_stream, true);
+             
+             if ($read_next == "")
+             {
+                 $keep_going = 0;
+             }
+         }
+         else
+         {
+             $read_next = fgets($imap_stream, 9096);
+         }
 
-      $read = fgets ($imap_stream, 1024);
-               if ($imap_general_debug) echo "<small><tt><font color=cc0000>$read</font></tt></small><br>";
-      $counter = 0;
-      while (! ereg("^$pre (OK|BAD|NO)(.*)$", $read, $regs)) {
-         $data[$counter] = $read;
-         $read = fgets ($imap_stream, 1024);
-                       if ($imap_general_debug) echo "<small><tt><font color=cc0000>$read</font></tt></small><br>";
-         $counter++;
+          $data[] = $read;
+         $read = $read_next;
       }
-      
+
       $response = $regs[1];
       $message = trim($regs[2]);
       
       if ($imap_general_debug) echo "--<br>";
 
-      if ($handle_errors == true) {
-         if ($response == "NO") {
+      if ($handle_errors == false)
+          return $data;
+         
+      if ($response == "NO") {
+         // ignore this error from m$ exchange, it is not fatal (aka bug)
+         if (!ereg("command resulted in",$message)) { 
             set_up_language($squirrelmail_language);
             echo "<br><b><font color=$color[2]>\n";
             echo _("ERROR : Could not complete request.");
             echo _("Reason Given: ");
             echo $message . "</font><br>\n";
             exit;
-         } else if ($response == "BAD") {
-            set_up_language($squirrelmail_language);
-            echo "<br><b><font color=$color[2]>\n";
-            echo _("ERROR : Bad or malformed request.");
-            echo "</b><br>\n";
-            echo _("Server responded: ");
-            echo $message . "</font><br>\n";
-            exit;
          }
+      } else if ($response == "BAD") {
+         set_up_language($squirrelmail_language);
+         echo "<br><b><font color=$color[2]>\n";
+         echo _("ERROR : Bad or malformed request.");
+         echo "</b><br>\n";
+         echo _("Server responded: ");
+         echo $message . "</font><br>\n";
+         exit;
       }
       
       return $data;
    }
    
-
-
-   
    /******************************************************************************
     **  Logs the user into the imap server.  If $hide is set, no error messages
     **  will be displayed.  This function returns the imap connection handle.
@@ -64,7 +92,8 @@
    function sqimap_login ($username, $password, $imap_server_address, $imap_port, $hide) {
       global $color, $squirrelmail_language, $HTTP_ACCEPT_LANGUAGE, $onetimepad;
 
-      $imap_stream = fsockopen ($imap_server_address, $imap_port, &$error_number, &$error_string);
+      $imap_stream = fsockopen ($imap_server_address, $imap_port,
+         &$error_number, &$error_string, 15);
       $server_info = fgets ($imap_stream, 1024);
       
       // Decrypt the password
          exit;
       }
 
-      fputs ($imap_stream, "a001 LOGIN \"$username\" \"$password\"\r\n");
+      fputs ($imap_stream, "a001 LOGIN \"" . quotemeta($username) . 
+         "\" \"" . quotemeta($password) . "\"\r\n");
       $read = sqimap_read_data ($imap_stream, "a001", false, $response, $message);
 
       /** If the connection was not successful, lets see why **/
                    printf (_("Unknown error: %s") . "<br>\n", $message);
                echo "<br>";
                echo _("Read data:") . "<br>\n";
-               foreach ($read as $line)
-               {
-                   echo htmlspecialchars($line) . "<br>\n";
+              if (is_array($read))
+              {
+                   foreach ($read as $line)
+                   {
+                       echo htmlspecialchars($line) . "<br>\n";
+                  }
                }
                exit;
             } else {
       fputs ($imap_stream, "a001 LOGOUT\r\n");
    }
 
+function sqimap_capability($imap_stream, $capability) {
+       global $sqimap_capabilities;
+       global $imap_general_debug;
+
+       if (!is_array($sqimap_capabilities)) {
+               fputs ($imap_stream, "a001 CAPABILITY\r\n");
+               $read = sqimap_read_data($imap_stream, "a001", true, $a, $b);
 
+               $c = explode(' ', $read[0]);
+               for ($i=2; $i < count($c); $i++) {
+                       list($k, $v) = explode('=', $c[$i]);
+                       $sqimap_capabilities[$k] = ($v)?$v:TRUE;
+               }
+       }
+       return $sqimap_capabilities[$capability];
+}
 
    /******************************************************************************
     **  Returns the delimeter between mailboxes:  INBOX/Test, or INBOX.Test... 
     ******************************************************************************/
-   function sqimap_get_delimiter ($imap_stream = false) {
-               global $optional_delimiter;
-               if (!$optional_delimiter) $optional_delimiter = "detect";
+function sqimap_get_delimiter ($imap_stream = false) {
+   global $imap_general_debug;
+   global $sqimap_delimiter;
+   global $optional_delimiter;
 
-               if (strtolower($optional_delimiter) == "detect") {
-       fputs ($imap_stream, ". LIST \"INBOX\" \"\"\r\n");
-       $read = sqimap_read_data($imap_stream, ".", true, $a, $b);
-       $quote_position = strpos ($read[0], "\"");
-       $delim = substr ($read[0], $quote_position+1, 1);
-       return $delim;
-               } else {
-                       return $optional_delimiter;
-               }
-   
-   /* According to something that I can't find, this is supposed to work on all systems
-   
-      fputs ($imap_stream, "a001 NAMESPACE\r\n");
-      $read = sqimap_read_data($imap_stream, "a001", true, $a, $b);
-      eregi("\"\" \"(.)\"", $read[0], $regs);
-      return $regs[1];
-   */
+   /* Use configured delimiter if set */
+   if((!empty($optional_delimiter)) && $optional_delimiter != "detect") {
+      return $optional_delimiter;
    }
 
-
+       /* Do some caching here */
+    if (!$sqimap_delimiter) {
+               if (sqimap_capability($imap_stream, "NAMESPACE")) {
+                       /* According to something that I can't find, this is supposed to work on all systems
+                          OS: This won't work in Courier IMAP.
+                          OS:  According to rfc2342 response from NAMESPACE command is:
+                          OS:  * NAMESPACE (PERSONAL NAMESPACES) (OTHER_USERS NAMESPACE) (SHARED NAMESPACES)
+                          OS:  We want to lookup all personal NAMESPACES...
+                       */
+                       fputs ($imap_stream, "a001 NAMESPACE\r\n");
+                       $read = sqimap_read_data($imap_stream, "a001", true, $a, $b);
+                       if (eregi('\* NAMESPACE +(\( *\(.+\) *\)|NIL) +(\( *\(.+\) *\)|NIL) +(\( *\(.+\) *\)|NIL)', $read[0], $data)) {
+                               if (eregi('^\( *\((.*)\) *\)', $data[1], $data2))
+                                       $pn = $data2[1];
+                               $pna = explode(')(', $pn);
+                               while (list($k, $v) = each($pna))
+                               {
+                                       list($_, $n, $_, $d) = explode('"', $v);
+                                       $pn[$n] = $d;
+                               }
+/* OS: We don't need this code right now, it is for other_users and shared folders
+                               if (eregi('^\( *\((.*)\) *\)', $data[2], $data2))
+                                       $on = $data2[1];
+                               if (eregi('^\( *\((.*)\) *\)', $data[3], $data2))
+                                       $sn = $data2[1];
+                               unset($data);
+                               $ona = explode(')(', $on);
+                               while (list($k, $v) = each($ona))
+                               {
+                                       list($_, $n, $_, $d) = explode('"', $v);
+                                       $on[$n] = $d;
+                               }
+                               $sna = explode(')(', $sn);
+                               while (list($k, $v) = each($sna))
+                               {
+                                       list($_, $n, $_, $d) = explode('"', $v);
+                                       $sn[$n] = $d;
+                               }
+*/
+                       }
+                       $sqimap_delimiter = $pn[0];
+               } else {
+                       fputs ($imap_stream, ". LIST \"INBOX\" \"\"\r\n");
+                       $read = sqimap_read_data($imap_stream, ".", true, $a, $b);
+                       $quote_position = strpos ($read[0], "\"");
+                       $sqimap_delimiter = substr ($read[0], $quote_position+1, 1);
+               }
+       }
+       return $sqimap_delimiter;
+}
 
 
    /******************************************************************************