Added a much better fix for the IE/SSL problem. No security hazards
[squirrelmail.git] / src / download.php
index b69c01bb5a93b9c63ad0a23cb63238bc2eb5e6b4..03505fb3c7c28a35c9d7450e771c8a85fdbcb1f9 100644 (file)
-<?
-   include("../config/config.php");
-   include("../functions/strings.php");
-   include("../functions/page_header.php");
-   include("../functions/imap.php");
-   include("../functions/mime.php");
-   include("../functions/mailbox.php");
-   include("../functions/date.php");
-
-   $imapConnection = loginToImapServer($username, $key, $imapServerAddress);
-   selectMailbox($imapConnection, $mailbox, $numMessages);
+<?php
+   /**
+    **  download.php
+    **
+    **  Copyright (c) 1999-2000 The SquirrelMail development team
+    **  Licensed under the GNU GPL. For full terms see the file COPYING.
+    **
+    **  Handles attachment downloads to the users computer.
+    **  Also allows displaying of attachments when possible.
+    **/
+
+   if (!isset($config_php))
+      include("../config/config.php");
+   if (!isset($strings_php))
+      include("../functions/strings.php");
+   if (!isset($imap_php))
+      include("../functions/imap.php");
+   if (!isset($mime_php))
+      include("../functions/mime.php");
+   if (!isset($date_php))
+      include("../functions/date.php");
+   if (!isset($i18n_php))
+      include("../functions/i18n.php");
+
+   session_start();
+   header("Pragma: ");
+   header("Cache-Control: cache");
+
+   include("../src/load_prefs.php");
+
+   function viewText($color, $body, $id, $entid, $mailbox, $type1, $wrap_at) {
+      global $where, $what, $charset;
+      global $startMessage;
+      
+      displayPageHeader($color, "None");
+
+      echo "<BR><TABLE WIDTH=100% BORDER=0 CELLSPACING=0 CELLPADDING=2 ALIGN=CENTER><TR><TD BGCOLOR=\"$color[0]\">";
+      echo "<B><CENTER>";
+      echo _("Viewing a text attachment") . " - ";
+      if ($where && $what) {
+         // from a search
+         echo "<a href=\"read_body.php?mailbox=".urlencode($mailbox)."&passed_id=$id&where=".urlencode($where)."&what=".urlencode($what)."\">". _("View message") . "</a>";
+      } else {   
+         echo "<a href=\"read_body.php?mailbox=".urlencode($mailbox)."&passed_id=$id&startMessage=$startMessage&show_more=0\">". _("View message") . "</a>";
+      }   
+
+      $urlmailbox = urlencode($mailbox);
+      echo "</b></td><tr><tr><td><CENTER><A HREF=\"../src/download.php?absolute_dl=true&passed_id=$id&passed_ent_id=$entid&mailbox=$urlmailbox\">";
+      echo _("Download this as a file");
+      echo "</A></CENTER><BR>";
+      echo "</CENTER></B>";
+      echo "</TD></TR></TABLE>";
+
+      echo "<TABLE WIDTH=98% BORDER=0 CELLSPACING=0 CELLPADDING=2 ALIGN=CENTER><TR><TD BGCOLOR=\"$color[0]\">";
+      echo "<TR><TD BGCOLOR=\"$color[4]\"><TT>";
+
+      if ($type1 != "html")
+         translateText($body, $wrap_at, $charset);
+      
+      echo $body;
+
+      echo "</TT></TD></TR></TABLE>";
+   }
+
+   $imapConnection = sqimap_login($username, $key, $imapServerAddress, $imapPort, 0);
+   sqimap_mailbox_select($imapConnection, $mailbox);
 
    // $message contains all information about the message
    // including header and body
-   $message = fetchMessage($imapConnection, $passed_id, $mailbox);
+   $message = sqimap_get_message($imapConnection, $passed_id, $mailbox);
+   $top_header = $message->header;
 
-   $type0 = $message["ENTITIES"][$passed_ent_id]["TYPE0"];
-   $type1 = $message["ENTITIES"][$passed_ent_id]["TYPE1"];
-   $filename = $message["ENTITIES"][$passed_ent_id]["FILENAME"];
-   $body = decodeBody($message["ENTITIES"][$passed_ent_id]["BODY"][0], $message["ENTITIES"][$passed_ent_id]["ENCODING"]);
+   // lets redefine message as this particular entity that we wish to display.
+   // it should hold only the header for this entity.  We need to fetch the body
+   // yet before we can display anything.
+   $message = getEntity($message, $passed_ent_id);
 
+   $header = $message->header;
 
-   switch ($type0) {
-      case "image":
-         if (($type1 == "jpeg") || ($type1 == "jpg") || ($type1 == "gif") || ($type1 == "png")) {
-            /** Add special instructions to view images inline here **/
-            header("Content-type: $type0/$type1");
-            header("Content-Disposition: attachment; filename=\"$filename\"");
-            echo $body;
-         } else {
-            header("Content-type: $type0/$type1");
-            header("Content-Disposition: attachment; filename=\"$filename\"");
-            echo $body;
-         }
-         break;
-      default:
-         header("Content-type: $type0/$type1");
-         header("Content-Disposition: attachment; filename=\"$filename\"");
-         echo $body;
-         break;
+   $charset = $header->charset;
+   $type0 = $header->type0;
+   $type1 = $header->type1;
+   $filename = decodeHeader($header->filename);
+
+   if (strlen($filename) < 1) {
+      if ($type1 == "plain" && $type0 == "text")                  $suffix = "txt";
+      else if ($type1 == "richtext" && $type0 == "text")          $suffix = "rtf";
+      else if ($type1 == "postscript" && $type0 == "application") $suffix = "ps";
+      else if ($type1 == "message" && $type0 == "rfc822")         $suffix = "msg";
+      else $suffix = $type1;
+
+      $filename = "untitled$passed_ent_id.$suffix";
    }
 
-   fputs($imapConnection, "1 logout\n");
-?>
\ No newline at end of file
+   // Note:
+   //    The following sections display the attachment in different
+   //    ways depending on how they choose.  The first way will download
+   //    under any circumstance.  This sets the Content-type to be
+   //    applicatin/octet-stream, which should be interpreted by the
+   //    browser as "download me".
+   //      The second method (view) is used for images or other formats
+   //    that should be able to be handled by the browser.  It will
+   //    most likely display the attachment inline inside the browser.
+   //      And finally, the third one will be used by default.  If it
+   //    is displayable (text or html), it will load them up in a text
+   //    viewer (built in to squirrelmail).  Otherwise, it sets the
+   //    content-type as application/octet-stream
+
+   header("Pragma: ");
+   header("Content-Description: SquirrelMail Attachment");
+   if ($absolute_dl == "true") {
+      switch($type0) {
+         case "text":
+            $body = mime_fetch_body($imapConnection, $passed_id, $passed_ent_id);
+            $body = decodeBody($body, $header->encoding);
+            header("Content-Disposition: attachment; filename=$filename");
+            header("Content-type: application/octet-stream; name=$filename");
+            set_up_language(getPref($data_dir, $username, "language"));
+            if ($type1 == "plain") {
+               echo _("Subject") . ": " . decodeHeader(sqStripSlashes($top_header->subject)) . "\n";
+               echo "   " . _("From") . ": " . decodeHeader(sqStripSlashes($top_header->from)) . "\n";
+               echo "     " . _("To") . ": " . decodeHeader(sqStripSlashes(getLineOfAddrs($top_header->to))) . "\n";
+               echo "   " . _("Date") . ": " . getLongDateString($top_header->date) . "\n\n";
+            }
+            echo trim($body);
+            break;
+         default:
+            header("Content-Disposition: attachment; filename=$filename");
+            header("Content-type: application/octet-stream; name=$filename");
+            mime_print_body_lines ($imapConnection, $passed_id, $passed_ent_id, $header->encoding);
+            break;
+      }
+   } else {
+      switch ($type0) {
+         case "text":
+            if ($type1 == "plain" || $type1 == "html") {
+                $body = mime_fetch_body($imapConnection, $passed_id, $passed_ent_id);
+                $body = decodeBody($body, $header->encoding);
+                include("../functions/page_header.php");
+                viewText($color, $body, $passed_id, $passed_ent_id, $mailbox, $type1, $wrap_at);
+            } else {
+                $body = mime_fetch_body($imapConnection, $passed_id, $passed_ent_id);
+                $body = decodeBody($body, $header->encoding);
+                header("Content-type: $type0/$type1; name=$filename");
+                header("Content-Disposition: attachment; filename=$filename");
+                echo $body;
+            }
+            break;
+         case "message":
+            $body = mime_fetch_body($imapConnection, $passed_id, $passed_ent_id);
+            $body = decodeBody($body, $header->encoding);
+            include("../functions/page_header.php");
+            viewText($color, $body, $passed_id, $passed_ent_id, $mailbox, $type1, $wrap_at);
+            break;
+         default:
+            header("Content-type: $type0/$type1; name=\"$filename\"");
+            header("Content-Disposition: attachment; filename=\"$filename\"");
+            mime_print_body_lines ($imapConnection, $passed_id, $passed_ent_id, $header->encoding);
+            break;
+      }
+   }    
+    
+   sqimap_logout($imapConnection);
+?>