X-Git-Url: https://vcs.fsf.org/?p=squirrelmail.git;a=blobdiff_plain;f=src%2Faddrbook_search.php;h=05777b89e1f7c381350d88bcc4c723e51f398141;hp=cda2f1bc9cb0887ee50c96f7fed2b8321c0a4785;hb=77180a756d97ef3a08d1029eccb8e8ec9e780a35;hpb=12b4ef8b0689e6e2dbcc3c6f7605ca8e7d99e50d

diff --git a/src/addrbook_search.php b/src/addrbook_search.php
index cda2f1bc..05777b89 100644
--- a/src/addrbook_search.php
+++ b/src/addrbook_search.php
@@ -1,274 +1,312 @@
 <?php
-   /**
-    **  addrbook_search.php
-    **
-    **  Copyright (c) 1999-2000 The SquirrelMail development team
-    **  Licensed under the GNU GPL. For full terms see the file COPYING.
-    **
-    **  Handle addressbook searching in the popup window.
-    **
-    **  NOTE: A lot of this code is similar to the code in
-    **        addrbook_search_html.html -- If you change one,
-    **        change the other one too!
-    **
-    **  $Id$
-    **/
-
-   // Function to include JavaScript code
-   function insert_javascript() {
-?>
-<SCRIPT LANGUAGE="Javascript"><!--
 
-function to_and_close($addr) {
-  to_address($addr);
-  parent.close();
-}
+/**
+ * addrbook_search.php
+ *
+ * Copyright (c) 1999-2005 The SquirrelMail Project Team
+ * Licensed under the GNU GPL. For full terms see the file COPYING.
+ *
+ * Handle addressbook searching in the popup window.
+ *
+ * NOTE: A lot of this code is similar to the code in
+ *       addrbook_search_html.html -- If you change one,
+ *       change the other one too!
+ *
+ * @version $Id$
+ * @package squirrelmail
+ * @subpackage addressbook
+ */
+
+/**
+ * Path for SquirrelMail required files.
+ * @ignore
+ */
+define('SM_PATH','../');
+
+/** SquirrelMail required files. */
+require_once(SM_PATH . 'include/validate.php');
+require_once(SM_PATH . 'functions/strings.php');
+require_once(SM_PATH . 'functions/global.php');
+require_once(SM_PATH . 'functions/html.php');
+require_once(SM_PATH . 'functions/forms.php');
+
+/** lets get the global vars we may need */
+sqgetGlobalVar('key',       $key,           SQ_COOKIE);
+sqgetGlobalVar('username',  $username,      SQ_SESSION);
+sqgetGlobalVar('onetimepad',$onetimepad,    SQ_SESSION);
+sqgetGlobalVar('base_uri',  $base_uri,      SQ_SESSION);
+
+sqgetGlobalVar('show' ,   $show);
+sqgetGlobalVar('query',   $query,   SQ_POST);
+sqgetGlobalVar('listall', $listall, SQ_POST);
+sqgetGlobalVar('backend', $backend, SQ_POST);
+
+/**
+ * Function to include JavaScript code
+ * @return void
+ */
+function insert_javascript() {
+    ?>
+    <script language="Javascript"><!--
+
+    function to_and_close($addr) {
+        to_address($addr);
+        parent.close();
+    }
 
-function to_address($addr) {
-  var prefix    = "";
-  var pwintype = typeof parent.opener.document.compose;
+    function to_address($addr) {
+        var prefix    = "";
+        var pwintype = typeof parent.opener.document.compose;
+
+        $addr = $addr.replace(/ {1,35}$/, "");
+
+        if (pwintype != "undefined") {
+            if (parent.opener.document.compose.send_to.value) {
+                prefix = ", ";
+                parent.opener.document.compose.send_to.value =
+                    parent.opener.document.compose.send_to.value + ", " + $addr;
+            } else {
+                parent.opener.document.compose.send_to.value = $addr;
+            }
+        }
+    }
 
-  $addr = $addr.replace(/ {1,35}$/, "");
+    function cc_address($addr) {
+        var prefix    = "";
+        var pwintype = typeof parent.opener.document.compose;
+
+        $addr = $addr.replace(/ {1,35}$/, "");
+
+        if (pwintype != "undefined") {
+            if (parent.opener.document.compose.send_to_cc.value) {
+                prefix = ", ";
+                parent.opener.document.compose.send_to_cc.value =
+                    parent.opener.document.compose.send_to_cc.value + ", " + $addr;
+            } else {
+                parent.opener.document.compose.send_to_cc.value = $addr;
+            }
+        }
+    }
 
-  if(pwintype != "undefined" ) {
-    if ( parent.opener.document.compose.send_to.value ) {
-      prefix = ", ";
-      parent.opener.document.compose.send_to.value = 
-        parent.opener.document.compose.send_to.value + ", " + $addr;
-        
-    } else {
-      parent.opener.document.compose.send_to.value = $addr;
+    function bcc_address($addr) {
+        var prefix    = "";
+        var pwintype = typeof parent.opener.document.compose;
+
+        $addr = $addr.replace(/ {1,35}$/, "");
+
+        if (pwintype != "undefined") {
+            if (parent.opener.document.compose.send_to_bcc.value) {
+                prefix = ", ";
+                parent.opener.document.compose.send_to_bcc.value =
+                    parent.opener.document.compose.send_to_bcc.value + ", " + $addr;
+            } else {
+                parent.opener.document.compose.send_to_bcc.value = $addr;
+            }
+        }
+    }
+
+// --></script>
+<?php
+} /* End of included JavaScript */
+
+
+/**
+ * List search results
+ * @param array $res Array of search results
+ * @param bool $includesource [Default=true]
+ * @return void
+ */
+function display_result($res, $includesource = true) {
+    global $color;
+
+    if(sizeof($res) <= 0) return;
+
+    insert_javascript();
+
+    $line = 0;
+    echo html_tag( 'table', '', 'center', '', 'border="0" width="98%"' ) .
+    html_tag( 'tr', '', '', $color[9] ) .
+    html_tag( 'th', '&nbsp;', 'left' ) .
+    html_tag( 'th', '&nbsp;' . _("Name"), 'left' ) .
+    html_tag( 'th', '&nbsp;' . _("E-mail"), 'left' ) .
+    html_tag( 'th', '&nbsp;' . _("Info"), 'left' );
+
+    if ($includesource) {
+        echo html_tag( 'th', '&nbsp;' . _("Source"), 'left', 'width="10%"' );
+    }
+    echo "</tr>\n";
+
+    while (list($undef, $row) = each($res)) {
+        $email = htmlspecialchars(addcslashes(AddressBook::full_address($row), "'"), ENT_QUOTES);
+        if ($line % 2) {
+            $tr_bgcolor = $color[12];
+        } else {
+            $tr_bgcolor = $color[4];
+        }
+        echo html_tag( 'tr', '', '', $tr_bgcolor, 'style="white-space: nowrap;"' ) .
+        html_tag( 'td',
+             '<small><a href="javascript:to_address(' .
+                                       "'" . $email . "');\">"._("To")."</a> | " .
+             '<a href="javascript:cc_address(' .
+                                       "'" . $email . "');\">"._("Cc")."</a> | " .
+             '<a href="javascript:bcc_address(' .
+                                 "'" . $email . "');\">"._("Bcc")."</a></small>",
+        'center', '', 'valign="top" width="5%" style="white-space: nowrap;"' ) .
+        html_tag( 'td', '&nbsp;' . htmlspecialchars($row['name']), 'left', '', 'valign="top" style="white-space: nowrap;"' ) .
+        html_tag( 'td', '&nbsp;' .
+             '<a href="javascript:to_and_close(' .
+                 "'" . $email . "');\">" . htmlspecialchars($row['email']) . '</a>'
+        , 'left', '', 'valign="top"' ) .
+        html_tag( 'td', htmlspecialchars($row['label']), 'left', '', 'valign="top" style="white-space: nowrap;"' );
+        if ($includesource) {
+            echo html_tag( 'td', '&nbsp;' . $row['source'], 'left', '', 'valign="top" style="white-space: nowrap;"' );
+        }
+
+        echo "</tr>\n";
+        $line++;
     }
-  }
+    echo '</table>';
 }
 
-function cc_address($addr) {
-  var prefix    = "";
-  var pwintype = typeof parent.opener.document.compose;
+/* ================= End of functions ================= */
+
+require_once('../functions/strings.php');
+require_once('../functions/addressbook.php');
+
+displayHtmlHeader();
+
+/** set correct value of $default_charset */
+global $default_charset;
+set_my_charset();
+
+/* Initialize vars */
+if (!isset($query)) { $query = ''; }
+if (!isset($show))  { $show  = ''; }
+if (!isset($backend)) { $backend = ''; }
+
+/* Choose correct colors for top and bottom frame */
+if ($show == 'form' && !isset($listall)) {
+    echo '<body text="' . $color[6] . '" bgcolor="' . $color[3] . '" ' .
+               'link="' . $color[6] . '" vlink="'   . $color[6] . '" ' .
+                                        'alink="'   . $color[6] . '" ' .
+         'OnLoad="document.sform.query.focus();">';
+} else {
+    echo '<body text="' . $color[8] . '" bgcolor="' . $color[4] . '" ' .
+               'link="' . $color[7] . '" vlink="'   . $color[7] . '" ' .
+                                        'alink="'   . $color[7] . "\">\n";
+}
 
-  $addr = $addr.replace(/ {1,35}$/, "");
+/* Empty search */
+if (empty($query) && empty($show) && empty($listall)) {
+    echo html_tag( 'p', '<br />' .
+                      _("No persons matching your search were found"),
+            'center' ) .
+          "\n</body></html>\n";
+    exit;
+}
 
-  if(pwintype != "undefined" ) {
-    if ( parent.opener.document.compose.send_to_cc.value ) {
-      prefix = ", ";
-      parent.opener.document.compose.send_to_cc.value = 
-        parent.opener.document.compose.send_to_cc.value + ", " + $addr;      
+/* Initialize addressbook, show init errors only in bottom frame */
+$showerr=($show=='form' ? false : true);
+$abook = addressbook_init($showerr);
+
+/* Create search form */
+if ($show == 'form' && empty($listall)) {
+    echo '<form name="sform" target="abookres" action="addrbook_search.php'.
+            '" method="post">' . "\n" .
+         html_tag( 'table', '', '', '', 'border="0" width="100%" height="100%"' ) .
+         html_tag( 'tr' ) .
+         html_tag( 'td', '  <strong>' . _("Search for") . "</strong>\n", 'left', '', 'style="white-space: nowrap;" valign="middle" width="10%"' ) .
+         html_tag( 'td', '', 'left', '', '' ) .
+         addInput('query', $query, 28);
+
+    /* List all backends to allow the user to choose where to search */
+    if ($abook->numbackends > 1) {
+        echo '<strong>' . _("in") . '</strong>&nbsp;'."\n";
+        $selopts = array();
+        $selopts['-1'] = _("All address books");
+
+        $ret = $abook->get_backend_list();
+        while (list($undef,$v) = each($ret)) {
+            $selopts[$v->bnum] = $v->sname;
+        }
+        echo addSelect('backend', $selopts, '-1', TRUE);
     } else {
-      parent.opener.document.compose.send_to_cc.value = $addr;
+        echo addHidden('backend', '-1');
     }
-  }
-}
 
-function bcc_address($addr) {
-  var prefix    = "";
-  var pwintype = typeof parent.opener.document.compose;
-  
-  $addr = $addr.replace(/ {1,35}$/, "");
-
-  if(pwintype != "undefined" ) {
-    if ( parent.opener.document.compose.send_to_bcc.value ) {
-      prefix = ", ";
-      parent.opener.document.compose.send_to_bcc.value = 
-        parent.opener.document.compose.send_to_bcc.value + ", " + $addr;      
+    echo '</td></tr>' .
+    html_tag( 'tr',
+                    html_tag( 'td', '', 'left' ) .
+                    html_tag( 'td',
+                            '<input type="submit" value="' . _("Search") . '" name="show" />' .
+                            '&nbsp;|&nbsp;<input type="submit" value="' . _("List all") .
+                            '" name="listall" />' . "\n" .
+                            '&nbsp;|&nbsp;<input type="button" value="' . _("Close") .
+                            '" onclick="parent.close();" />' . "\n" ,
+                    'left' )
+            ) .
+         '</table></form>' . "\n";
+} else {
+
+    /* Show personal addressbook */
+    if ($show == 'blank' && empty($listall)) {
+
+        if($backend != -1 || $show == 'blank') {
+            if ($show == 'blank') {
+                $backend = $abook->localbackend;
+            }
+            $res = $abook->list_addr($backend);
+
+            if(is_array($res)) {
+                usort($res,'alistcmp');
+                display_result($res, false);
+            } else {
+                echo html_tag( 'p', '<strong>' .
+                                 sprintf(_("Unable to list addresses from %s"),
+                                     $abook->backends[$backend]->sname) . '</strong>' ,
+                       'center' ) . "\n";
+            }
+        } else {
+            $res = $abook->list_addr();
+            usort($res,'alistcmp');
+            display_result($res, true);
+        }
+
     } else {
-      parent.opener.document.compose.send_to_bcc.value = $addr;
+        if( !empty( $listall ) ){
+          $query = '*';
+        }
+
+        /* Do the search */
+        if (!empty($query)) {
+
+            if($backend == -1) {
+                $res = $abook->s_search($query);
+            } else {
+                $res = $abook->s_search($query, $backend);
+            }
+
+            if (!is_array($res)) {
+                echo html_tag( 'p', '<b><br />' .
+                                 _("Your search failed with the following error(s)") .
+                                 ':<br />' . $abook->error . "</b>\n" ,
+                       'center' ) .
+                "\n</body></html>\n";
+                exit;
+            }
+
+            if (sizeof($res) == 0) {
+                echo html_tag( 'p', '<br /><b>' .
+                                 _("No persons matching your search were found") . "</b>\n" ,
+                       'center' ) .
+                "\n</body></html>\n";
+                exit;
+            }
+
+            display_result($res);
+        }
     }
-  }
-}
 
-// --></SCRIPT>
-
-<?php 
-   } // End of included JavaScript
-
-
-   // List search results
-   function display_result($res, $includesource = true) {
-      global $color;
-
-      if(sizeof($res) <= 0) return;
-
-      insert_javascript();
-
-      $line = 0;
-      print '<TABLE BORDER="0" WIDTH="98%" ALIGN=center>';
-      printf("<TR BGCOLOR=\"$color[9]\"><TH ALIGN=left>&nbsp;".
-	     "<TH ALIGN=left>&nbsp;%s<TH ALIGN=left>&nbsp;%s".
-	     "<TH ALIGN=left>&nbsp;%s",
-	     _("Name"), _("E-mail"), _("Info"));
-
-      if($includesource)
-	 printf("<TH ALIGN=left WIDTH=\"10%%\">&nbsp;%s", _("Source"));
-
-      print "</TR>\n";
-      
-      while(list($undef, $row) = each($res)) {
-	 printf("<tr%s nowrap><td valign=top nowrap align=center width=\"5%%\">".
-		"<small><a href=\"javascript:to_address('%s');\">To</A> | ".
-		"<a href=\"javascript:cc_address('%s');\">Cc</A> | ".
-		"<a href=\"javascript:bcc_address('%s');\">Bcc</A></small>".
-		"<td nowrap valign=top>&nbsp;%s&nbsp;<td nowrap valign=top>".
-		"&nbsp;<a href=\"javascript:to_and_close('%s');\">%s</A>&nbsp;".
-		"<td valign=top>&nbsp;%s&nbsp;", 
-		($line % 2) ? " bgcolor=\"$color[0]\"" : "", 
-		$row["email"], $row["email"], $row["email"], 
-		$row["name"],  $row["email"], $row["email"],
-		$row["label"]);
-
-	 if($includesource)
-	    printf("<td nowrap valign=top>&nbsp;%s", $row["source"]);
-
-	 print "</TR>\n";
-	 $line++;
-      }
-      print '</TABLE>';
-   }
-
-   /* ================= End of functions ================= */
-
-   session_start();
-   
-   if (!isset($strings_php))
-      include("../functions/strings.php");
-   if (!isset($i18n_php))
-      include('../functions/i18n.php');
-
-   if(!isset($logged_in) || !isset($username) || !isset($key)) {
-      include ('../themes/default_theme.php');
-      include ('../functions/display_messages.php');
-      printf('<html><BODY TEXT="%s" BGCOLOR="%s" LINK="%s" VLINK="%s" ALINK="%s">',
-              $color[8], $color[4], $color[7], $color[7], $color[7]);
-      plain_error_message(_("You need a valid user and password to access this page!")
-                          . '<br><a href="../src/login.php">'
-                          . _("Click here to log back in.") . "</a>.", $color);
-      echo '</body></html>';
-      exit;
-   }
-   if (!isset($config_php))
-      include('../config/config.php');
-   if (!isset($array_php))
-      include('../functions/array.php');
-   if (!isset($auth_php))
-      include('../functions/auth.php');
-   if (!isset($strings_php))
-      include('../functions/strings.php');
-   if (!isset($page_header_php))
-      include('../functions/page_header.php');
-   if (!isset($addressbook_php))
-      include('../functions/addressbook.php');
-
-   is_logged_in();
-   include('../src/load_prefs.php');
-
-   displayHtmlHeader();
-
-   // Initialize vars
-   if(!isset($query)) $query = "";
-   if(!isset($show))  $show  = "";
-
-   // Choose correct colors for top and bottom frame
-   if($show == 'form') {
-      echo "<BODY BGCOLOR=\"$color[3]\" TEXT=\"$color[6]\" ";
-      echo "LINK=\"$color[6]\" VLINK=\"$color[6]\" ALINK=\"$color[6]\" ";
-      echo 'OnLoad="document.sform.query.focus();">';  
-   } else {
-      echo "<BODY TEXT=\"$color[8]\" BGCOLOR=\"$color[4]\" ";
-      echo "LINK=\"$color[7]\" VLINK=\"$color[7]\" ALINK=\"$color[7]\">\n";
-   }
-
-   // Empty search
-   if(empty($query) && empty($show) && empty($listall))  {
-      printf("<P ALIGN=center><BR>%s</P>\n</BODY></HTML>\n",
-	     _("No persons matching your search was found"));
-      exit;
-   }
-
-   // Initialize addressbook
-   $abook = addressbook_init();
-
-   // Create search form 
-   if($show == 'form') {
-      printf("<FORM NAME=sform TARGET=abookres ACTION=\"%s\" METHOD=\"POST\">\n",
-	     $PHP_SELF);
-      print('<TABLE BORDER="0" WIDTH="100%" HEIGHT="100%">');
-      print("<TR><TD NOWRAP VALIGN=middle>\n");
-      printf("  <STRONG>%s</STRONG>\n", _("Search for"));
-      printf("  <INPUT TYPE=text NAME=query VALUE=\"%s\" SIZE=26>\n",
-	     htmlspecialchars($query));
-
-      // List all backends to allow the user to choose where to search
-      if($abook->numbackends > 1) {
-	 printf("<STRONG>%s</STRONG>&nbsp;<SELECT NAME=backend>\n", 
-		_("in"));
-	 printf("<OPTION VALUE=-1 SELECTED>%s\n", 
-		_("All address books"));
-	 $ret = $abook->get_backend_list();
-	 while(list($undef,$v) = each($ret)) 
-	    printf("<OPTION VALUE=%d>%s\n", $v->bnum, $v->sname);
-	 print "</SELECT>\n";
-      } else {
-	 print "<INPUT TYPE=hidden NAME=backend VALUE=-1>\n";
-      }
-
-      printf("<INPUT TYPE=submit VALUE=\"%s\">",
-	     _("Search"));
-      printf("&nbsp;|&nbsp;<INPUT TYPE=submit VALUE=\"%s\" NAME=listall>\n",
-             _("List all"));
-      print "</TD><TD ALIGN=right>\n";
-      printf("<INPUT TYPE=button VALUE=\"%s\" onclick=\"parent.close();\">\n",
-             _("Close window"));
-      print "</TD></TR></TABLE></FORM>\n";
-   } else
-
-   // Show personal addressbook
-   if($show == 'blank' || !empty($listall)) {
-
-      if($backend != -1 || $show == 'blank') {
-	 if($show == 'blank') 
-	    $backend = $abook->localbackend;
-
-	 //printf("<H3 ALIGN=center>%s</H3>\n", $abook->backends[$backend]->sname);
-
-	 $res = $abook->list_addr($backend);
-
-	 if(is_array($res)) {
-	    display_result($res, false);
-	 } else {
-	    printf("<P ALIGN=center><STRONG>"._("Unable to list addresses from %s").
-		   "</STRONG></P>\n", $abook->backends[$backend]->sname);
-	 }
-
-      } else {
-	 $res = $abook->list_addr();
-	 display_result($res, true);
-      }
-
-   } else
-
-   // Do the search
-   if(!empty($query) && empty($listall)) {
-
-      if($backend == -1) {
-	 $res = $abook->s_search($query);
-      } else {
-	 $res = $abook->s_search($query, $backend);
-      }
-
-      if(!is_array($res)) {
-	 printf("<P ALIGN=center><B><BR>%s:<br>%s</B></P>\n</BODY></HTML>\n",
-		_("Your search failed with the following error(s)"),
-		$abook->error);
-	 exit;
-      }
-
-      if(sizeof($res) == 0) {
-	 printf("<P ALIGN=center><BR><B>%s.</B></P>\n</BODY></HTML>\n",
-		_("No persons matching your search was found"));
-	 exit;
-      }
-
-      display_result($res);
-   }
+}
 ?>
-
-</BODY></HTML>
+</body></html>