Added a much better fix for the IE/SSL problem. No security hazards
[squirrelmail.git] / functions / imap_general.php
index 133e9851b402dedd028ba781bb09a31898f4297d..7222eed933ae1f16fe911f4acfa5a09939c6e7db 100755 (executable)
     **  This implements all functions that do general imap functions.
     **/
 
+   $imap_general_debug = false;
+
    /******************************************************************************
     **  Reads the output from the IMAP stream.  If handle_errors is set to true,
     **  this will also handle all errors that are received.  If it is not set,
     **  the errors will be sent back through $response and $message
     ******************************************************************************/
-   function sqimap_read_data ($imap_stream, $pre, $handle_errors, $response, $message) {
-      global $color;
+   function sqimap_read_data ($imap_stream, $pre, $handle_errors, &$response, &$message) {
+      global $color, $squirrelmail_language, $imap_general_debug;
 
-      $read = fgets ($imap_stream, 1024);
-//             echo "<small><tt><font color=cc0000>$read</font></tt></small><br>";
-      $counter = 0;
-      while ((substr($read, 0, strlen("$pre OK")) != "$pre OK") &&
-             (substr($read, 0, strlen("$pre BAD")) != "$pre BAD") &&
-             (substr($read, 0, strlen("$pre NO")) != "$pre NO")) {
-         $data[$counter] = $read;
-         $read = fgets ($imap_stream, 1024);
-//                     echo "<small><tt><font color=cc0000>$read</font></tt></small><br>";
-         $counter++;
-      }       
-//      echo "--<br>";
-      if (substr($read, 0, strlen("$pre OK")) == "$pre OK") {
-         $response = "OK";
-         $message = trim(substr($read, strlen("$pre OK"), strlen($read)));
-      }
-      else if (substr($read, 0, strlen("$pre BAD")) == "$pre BAD") {
-         $response = "BAD";
-         $message = trim(substr($read, strlen("$pre BAD"), strlen($read)));
-      }
-      else {   
-         $response = "NO";
-         $message = trim(substr($read, strlen("$pre NO"), strlen($read)));
+      $keep_going = true;
+      $read = fgets($imap_stream, 9096);
+      while ($keep_going)
+      {
+          // Continue if needed for this single line
+          while (strpos($read, "\n") === false)
+         {
+             $read .= fgets($imap_stream, 9096);
+         }
+         
+         if ($imap_general_debug)
+         {
+             echo "<small><tt><font color=\"#CC0000\">$read</font></tt></small><br>\n";
+             flush();
+         }
+
+          if (ereg("^$pre (OK|BAD|NO)(.*)$", $read, $regs))
+         {
+             // Test if this is really the last line.
+             // Very much a hack, but what else can I do?
+             socket_set_blocking($imap_stream, false);
+             $read_next = fgets($imap_stream, 2);
+             socket_set_blocking($imap_stream, true);
+             
+             if ($read_next == "")
+             {
+                 $keep_going = 0;
+             }
+         }
+         else
+         {
+             $read_next = fgets($imap_stream, 9096);
+         }
+
+          $data[] = $read;
+         $read = $read_next;
       }
 
-      if ($handle_errors == true) {
-         if ($response == "NO") {
-            echo "<br><b><font color=$color[2]>";
+      $response = $regs[1];
+      $message = trim($regs[2]);
+      
+      if ($imap_general_debug) echo "--<br>";
+
+      if ($handle_errors == false)
+          return $data;
+         
+      if ($response == "NO") {
+         // ignore this error from m$ exchange, it is not fatal (aka bug)
+         if (!ereg("command resulted in",$message)) { 
+            set_up_language($squirrelmail_language);
+            echo "<br><b><font color=$color[2]>\n";
             echo _("ERROR : Could not complete request.");
-            echo "</b><br>";
+            echo "</b><br>\n";
             echo _("Reason Given: ");
-            echo "$message</font><br>";
-            exit;
-         } else if ($response == "BAD") {
-            echo "<br><b><font color=$color[2]>";
-            echo _("ERROR : Bad or malformed request.");
-            echo "</b><br>";
-            echo _("Server responded: ");
-            echo "$message</font><br>";
+            echo $message . "</font><br>\n";
             exit;
          }
+      } else if ($response == "BAD") {
+         set_up_language($squirrelmail_language);
+         echo "<br><b><font color=$color[2]>\n";
+         echo _("ERROR : Bad or malformed request.");
+         echo "</b><br>\n";
+         echo _("Server responded: ");
+         echo $message . "</font><br>\n";
+         exit;
       }
       
       return $data;
    }
    
-
-
-   
    /******************************************************************************
     **  Logs the user into the imap server.  If $hide is set, no error messages
     **  will be displayed.  This function returns the imap connection handle.
     ******************************************************************************/
    function sqimap_login ($username, $password, $imap_server_address, $imap_port, $hide) {
-      global $color, $squirrelmail_language, $HTTP_ACCEPT_LANGUAGE;
+      global $color, $squirrelmail_language, $HTTP_ACCEPT_LANGUAGE, $onetimepad;
 
-      $imap_stream = fsockopen ($imap_server_address, $imap_port, &$error_number, &$error_string);
+      $imap_stream = fsockopen ($imap_server_address, $imap_port,
+         &$error_number, &$error_string, 15);
       $server_info = fgets ($imap_stream, 1024);
       
-      // This function can sometimes be called before the check for
-      // gettext is done.
-      if (!function_exists("_")) {
-         function _($string) {
-            return $string;
-         }
-      }
+      // Decrypt the password
+      $password = OneTimePadDecrypt($password, $onetimepad);
 
       /** Do some error correction **/
       if (!$imap_stream) {
          if (!$hide) {
+            set_up_language($squirrelmail_language, true);
             printf (_("Error connecting to IMAP server: %s.")."<br>\r\n", $imap_server_address);
             echo "$error_number : $error_string<br>\r\n";
          }
          exit;
       }
 
-      fputs ($imap_stream, "a001 LOGIN \"$username\" \"$password\"\r\n");
-      $read = fgets ($imap_stream, 1024);
+      fputs ($imap_stream, "a001 LOGIN \"" . quotemeta($username) . 
+         "\" \"" . quotemeta($password) . "\"\r\n");
+      $read = sqimap_read_data ($imap_stream, "a001", false, $response, $message);
 
       /** If the connection was not successful, lets see why **/
-      if (substr($read, 0, 7) != "a001 OK") {
+      if ($response != "OK") {
          if (!$hide) {
-            if (substr($read, 0, 8) == "a001 BAD") {
-               printf (_("Bad request: %s")."<br>\r\n", $read);
+            if ($response != "NO") {
+               // "BAD" and anything else gets reported here.
+               set_up_language($squirrelmail_language, true);
+               if ($response == "BAD")
+                   printf (_("Bad request: %s")."<br>\r\n", $message);
+               else
+                   printf (_("Unknown error: %s") . "<br>\n", $message);
+               echo "<br>";
+               echo _("Read data:") . "<br>\n";
+              if (is_array($read))
+              {
+                   foreach ($read as $line)
+                   {
+                       echo htmlspecialchars($line) . "<br>\n";
+                  }
+               }
                exit;
-            } else if (substr($read, 0, 7) == "a001 NO") {
+            } else {
                // If the user does not log in with the correct
                // username and password it is not possible to get the
                // correct locale from the user's preferences.
                // $squirrelmail_language is set by a cookie when
                // the user selects language and logs out
                
-               // Use HTTP content language negotiation if cookie
-               // not set
-               if (!isset($squirrelmail_language) && isset($HTTP_ACCEPT_LANGUAGE)) {
-                  $squirrelmail_language = substr($HTTP_ACCEPT_LANGUAGE, 0, 2);
-               }
-               
-               if (isset($squirrelmail_language)) {
-                  if ($squirrelmail_language != "en" && $squirrelmail_language != "") {
-                     putenv("LC_ALL=".$squirrelmail_language);
-                     bindtextdomain("squirrelmail", "../locale/");
-                     textdomain("squirrelmail");
-                     header ("Content-Type: text/html; charset=".$languages[$squirrelmail_language]["CHARSET"]);
-                  }
-               }
+               set_up_language($squirrelmail_language, true);
                
                ?>
                   <html>
                               <td>
                                  <center>
                                  <?php echo _("Unknown user or password incorrect.") ?><br>
-                                 <a href="login.php"><?php echo _("Click here to try again") ?></a>
+                                 <a href="login.php" target="_top"><?php echo _("Click here to try again") ?></a>
                                  </center>
                               </td>
                            </tr>
                <?php
                session_destroy();
                exit;
-            } else {
-               printf (_("Unknown error: %s")."<br>", $read);
-               exit;
             }
          } else {
             exit;
       fputs ($imap_stream, "a001 LOGOUT\r\n");
    }
 
+function sqimap_capability($imap_stream, $capability) {
+       global $sqimap_capabilities;
+       global $imap_general_debug;
 
+       if (!is_array($sqimap_capabilities)) {
+               fputs ($imap_stream, "a001 CAPABILITY\r\n");
+               $read = sqimap_read_data($imap_stream, "a001", true, $a, $b);
+
+               $c = explode(' ', $read[0]);
+               for ($i=2; $i < count($c); $i++) {
+                       list($k, $v) = explode('=', $c[$i]);
+                       $sqimap_capabilities[$k] = ($v)?$v:TRUE;
+               }
+       }
+       return $sqimap_capabilities[$capability];
+}
 
    /******************************************************************************
     **  Returns the delimeter between mailboxes:  INBOX/Test, or INBOX.Test... 
     ******************************************************************************/
-   function sqimap_get_delimiter ($imap_stream) {
-      fputs ($imap_stream, ". LIST \"INBOX\" \"\"\r\n");
-      $read = sqimap_read_data($imap_stream, ".", true, $a, $b);
-      $quote_position = strpos ($read[0], "\"");
-      $delim = substr ($read[0], $quote_position+1, 1);
+function sqimap_get_delimiter ($imap_stream = false) {
+   global $imap_general_debug;
+   global $sqimap_delimiter;
+   global $optional_delimiter;
 
-      return $delim;
+   /* Use configured delimiter if set */
+   if((!empty($optional_delimiter)) && $optional_delimiter != "detect") {
+      return $optional_delimiter;
    }
 
-
+       /* Do some caching here */
+    if (!$sqimap_delimiter) {
+               if (sqimap_capability($imap_stream, "NAMESPACE")) {
+                       /* According to something that I can't find, this is supposed to work on all systems
+                          OS: This won't work in Courier IMAP.
+                          OS:  According to rfc2342 response from NAMESPACE command is:
+                          OS:  * NAMESPACE (PERSONAL NAMESPACES) (OTHER_USERS NAMESPACE) (SHARED NAMESPACES)
+                          OS:  We want to lookup all personal NAMESPACES...
+                       */
+                       fputs ($imap_stream, "a001 NAMESPACE\r\n");
+                       $read = sqimap_read_data($imap_stream, "a001", true, $a, $b);
+                       if (eregi('\* NAMESPACE +(\( *\(.+\) *\)|NIL) +(\( *\(.+\) *\)|NIL) +(\( *\(.+\) *\)|NIL)', $read[0], $data)) {
+                               if (eregi('^\( *\((.*)\) *\)', $data[1], $data2))
+                                       $pn = $data2[1];
+                               $pna = explode(')(', $pn);
+                               while (list($k, $v) = each($pna))
+                               {
+                                       list($_, $n, $_, $d) = explode('"', $v);
+                                       $pn[$n] = $d;
+                               }
+/* OS: We don't need this code right now, it is for other_users and shared folders
+                               if (eregi('^\( *\((.*)\) *\)', $data[2], $data2))
+                                       $on = $data2[1];
+                               if (eregi('^\( *\((.*)\) *\)', $data[3], $data2))
+                                       $sn = $data2[1];
+                               unset($data);
+                               $ona = explode(')(', $on);
+                               while (list($k, $v) = each($ona))
+                               {
+                                       list($_, $n, $_, $d) = explode('"', $v);
+                                       $on[$n] = $d;
+                               }
+                               $sna = explode(')(', $sn);
+                               while (list($k, $v) = each($sna))
+                               {
+                                       list($_, $n, $_, $d) = explode('"', $v);
+                                       $sn[$n] = $d;
+                               }
+*/
+                       }
+                       $sqimap_delimiter = $pn[0];
+               } else {
+                       fputs ($imap_stream, ". LIST \"INBOX\" \"\"\r\n");
+                       $read = sqimap_read_data($imap_stream, ".", true, $a, $b);
+                       $quote_position = strpos ($read[0], "\"");
+                       $sqimap_delimiter = substr ($read[0], $quote_position+1, 1);
+               }
+       }
+       return $sqimap_delimiter;
+}
 
 
    /******************************************************************************
       fputs ($imap_stream, "a001 EXAMINE \"$mailbox\"\r\n");
       $read_ary = sqimap_read_data ($imap_stream, "a001", true, $result, $message);
       for ($i = 0; $i < count($read_ary); $i++) {
-         if (substr(trim($read_ary[$i]), -6) == EXISTS) {
-            $array = explode (" ", $read_ary[$i]);
-            $num = $array[1];
+         if (ereg("[^ ]+ +([^ ]+) +EXISTS", $read_ary[$i], $regs)) {
+           return $regs[1];
          }
       }
-      return $num;
+      return "BUG!  Couldn't get number of messages in $mailbox!";
    }
 
    
       /** Luke Ehresman <lehresma@css.tayloru.edu>
        ** <lehresma@css.tayloru.edu>
        ** lehresma@css.tayloru.edu
+       **
+       ** What about
+       **    lehresma@css.tayloru.edu (Luke Ehresman)
        **/
 
-      if (strpos($string, "<") && strpos($string, ">")) {
-         $string = substr($string, strpos($string, "<")+1);
-         $string = substr($string, 0, strpos($string, ">"));
+      if (ereg("<([^>]+)>", $string, $regs)) {
+          $string = $regs[1];
       }
       return trim($string); 
    }
     ******************************************************************************/
    function sqimap_find_displayable_name ($string) {
       $string = " ".trim($string);
+      $orig_string = $string;
       if (strpos($string, "<") && strpos($string, ">")) {
          if (strpos($string, "<") == 1) {
             $string = sqimap_find_email($string);
             $string = substr($string, 0, strpos($string, "<"));
             $string = ereg_replace ("\"", "", $string);   
          }   
+
+         if (trim($string) == "") {
+            $string = sqimap_find_email($orig_string);
+         }
       }
       return $string; 
    }
 
 
-   
    /******************************************************************************
     **  Returns the number of unseen messages in this folder 
     ******************************************************************************/
       //fputs ($imap_stream, "a001 SEARCH UNSEEN NOT DELETED\r\n");
       fputs ($imap_stream, "a001 STATUS \"$mailbox\" (UNSEEN)\r\n");
       $read_ary = sqimap_read_data ($imap_stream, "a001", true, $result, $message);
-      $unseen = false;
-      
-               $read_ary[0] = trim($read_ary[0]);
-               return substr($read_ary[0], strrpos($read_ary[0], " ")+1, (strlen($read_ary[0]) - strrpos($read_ary[0], " ") - 2)); 
+      ereg("UNSEEN ([0-9]+)", $read_ary[0], $regs);
+      return $regs[1];
    }