/**
* webmail.php -- Displays the main frameset
*
- * Copyright (c) 1999-2002 The SquirrelMail development team
- * Licensed under the GNU GPL. For full terms see the file COPYING.
- *
* This file generates the main frameset. The files that are
* shown can be given as parameters. If the user is not logged in
* this file will verify username and password.
*
- * $Id$
+ * @copyright © 1999-2006 The SquirrelMail Project Team
+ * @license http://opensource.org/licenses/gpl-license.php GNU Public License
+ * @version $Id$
+ * @package squirrelmail
*/
-/* Path for SquirrelMail required files. */
+/**
+ * Path for SquirrelMail required files.
+ * @ignore
+ */
define('SM_PATH','../');
/* SquirrelMail required files. */
}
$base_uri = sqm_baseuri();
-session_start();
+sqsession_is_active();
+
+sqgetGlobalVar('username', $username, SQ_SESSION);
+sqgetGlobalVar('delimiter', $delimiter, SQ_SESSION);
+sqgetGlobalVar('onetimepad', $onetimepad, SQ_SESSION);
+
+if (sqgetGlobalVar('sort', $sort)) {
+ $sort = (int) $sort;
+}
-if (isset($_SESSION['username'])) {
- $username = $_SESSION['username'];
+if (sqgetGlobalVar('startMessage', $startMessage)) {
+ $startMessage = (int) $startMessage;
}
-if (isset($_SESSION['delimiter'])) {
- $delimiter = $_SESSION['delimiter'];
+
+if (!sqgetGlobalVar('mailbox', $mailbox)) {
+ $mailbox = 'INBOX';
}
-if (isset($_SESSION['onetimepad'])) {
- $onetimepad = $_SESSION['onetimepad'];
+
+sqgetGlobalVar('right_frame', $right_frame, SQ_GET);
+
+if ( isset($_SESSION['session_expired_post']) ) {
+ sqsession_unregister('session_expired_post');
}
-if (isset($_GET['right_frame'])) {
- $right_frame = $_GET['right_frame'];
+if(!sqgetGlobalVar('mailto', $mailto)) {
+ $mailto = '';
}
is_logged_in();
*/
$my_language = getPref($data_dir, $username, 'language');
if ($my_language != $squirrelmail_language) {
- setcookie('squirrelmail_language', $my_language, time()+2592000, $base_uri);
+ sqsetcookie('squirrelmail_language', $my_language, time()+2592000, $base_uri);
}
-set_up_language(getPref($data_dir, $username, 'language'));
-
-echo "<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.01 Frameset//EN\">\n".
- "<html><head>\n" .
- "<title>$org_title</title>\n";
+$err=set_up_language(getPref($data_dir, $username, 'language'));
+
+$output = "<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.01 Frameset//EN\"\n".
+ " \"http://www.w3.org/TR/1999/REC-html401-19991224/frameset.dtd\">\n".
+ "<html><head>\n" .
+ "<meta name=\"robots\" content=\"noindex,nofollow\">\n" .
+ "<title>$org_title</title>\n".
+ "</head>";
+
+// Japanese translation used without mbstring support
+if ($err==2) {
+ echo $output.
+ "<body>\n".
+ "<p>You need to have PHP installed with the multibyte string function \n".
+ "enabled (using configure option --enable-mbstring).</p>\n".
+ "<p>System assumed that you accidently switched to Japanese translation \n".
+ "and reverted your language preference to English.</p>\n".
+ "<p>Please refresh this page in order to use webmail.</p>\n".
+ "</body></html>";
+ return;
+}
$left_size = getPref($data_dir, $username, 'left_size');
$location_of_bar = getPref($data_dir, $username, 'location_of_bar');
}
if ($location_of_bar == 'right') {
- echo "<frameset cols=\"*, $left_size\" id=\"fs1\">\n";
+ $output .= "<frameset cols=\"*, $left_size\" id=\"fs1\">\n";
}
else {
- echo "<frameset cols=\"$left_size, *\" id=\"fs1\">\n";
+ $output .= "<frameset cols=\"$left_size, *\" id=\"fs1\">\n";
}
/*
*
* This was done to create a pure HTML way of refreshing the folder list since
* we would like to use as little Javascript as possible.
+ *
+ * The test for // should catch any attempt to include off-site webpages into
+ * our frameset.
*/
-if (!isset($right_frame)) {
+
+if (empty($right_frame) || (strpos(urldecode($right_frame), '//') !== false)) {
$right_frame = '';
-}
-if ($right_frame == 'right_main.php') {
- $urlMailbox = urlencode($mailbox);
- $right_frame_url =
- "right_main.php?mailbox=$urlMailbox&sort=$sort&startMessage=$startMessage";
-} elseif ($right_frame == 'options.php') {
- $right_frame_url = 'options.php';
-} elseif ($right_frame == 'folders.php') {
- $right_frame_url = 'folders.php';
-} else if ($right_frame == '') {
- $right_frame_url = 'right_main.php';
-} else {
- $right_frame_url = urldecode($right_frame);
}
+switch($right_frame) {
+ case 'right_main.php':
+ $right_frame_url = "right_main.php?mailbox=".urlencode($mailbox)
+ . (!empty($sort)?"&sort=$sort":'')
+ . (!empty($startMessage)?"&startMessage=$startMessage":'');
+ break;
+ case 'options.php':
+ $right_frame_url = 'options.php';
+ break;
+ case 'folders.php':
+ $right_frame_url = 'folders.php';
+ break;
+ case 'compose.php':
+ $right_frame_url = 'compose.php?' . $mailto;
+ break;
+ case '':
+ $right_frame_url = 'right_main.php';
+ break;
+ default:
+ $right_frame_url = urlencode($right_frame);
+ break;
+}
+
+$left_frame = '<frame src="left_main.php" name="left" frameborder="1" title="'.
+ _("Folder List") ."\" />\n";
+$right_frame = '<frame src="'.$right_frame_url.'" name="right" frameborder="1" title="'.
+ _("Message List") ."\" />\n";
+
if ($location_of_bar == 'right') {
- echo "<FRAME SRC=\"$right_frame_url\" NAME=\"right\" frameborder=\"1\">\n" .
- "<FRAME SRC=\"left_main.php\" NAME=\"left\" frameborder=\"1\">\n";
+ $output .= $right_frame . $left_frame;
}
else {
- echo "<FRAME SRC=\"left_main.php\" NAME=\"left\" frameborder=\"1\">\n".
- "<FRAME SRC=\"$right_frame_url\" NAME=\"right\" frameborder=\"1\">\n";
+ $output .= $left_frame . $right_frame;
}
-do_hook('webmail_bottom');
+$ret = concat_hook_function('webmail_bottom', $output);
+if($ret != '') {
+ $output = $ret;
+}
+echo $output;
+
?>
-</FRAMESET>
-</HEAD></HTML>
+</frameset>
+</html>
projects / squirrelmail.git / blobdiff