X-Git-Url: https://vcs.fsf.org/?p=squirrelmail.git;a=blobdiff_plain;f=src%2Faddrbook_search.php;h=53f81c9bf3eb71c69976b1cd953896ad157403a3;hp=fca02aff45349c7f7a9da7f6426acfc4aa2ad7ad;hb=0b97a708e71c931153cd1ceee1495c9f4e1e209b;hpb=db48e3f5d3a7dfaeb19e9e87b9d6a8f6effe11dc

diff --git a/src/addrbook_search.php b/src/addrbook_search.php
index fca02aff..53f81c9b 100644
--- a/src/addrbook_search.php
+++ b/src/addrbook_search.php
@@ -15,8 +15,30 @@
  * $Id$
  */
 
-require_once('../src/validate.php');
-require_once('../functions/strings.php');
+/* Path for SquirrelMail required files. */
+define('SM_PATH','../');
+
+/* SquirrelMail required files. */
+require_once(SM_PATH . 'include/validate.php');
+require_once(SM_PATH . 'functions/strings.php');
+require_once(SM_PATH . 'functions/html.php');
+
+/* lets get the global vars we may need */
+$key  = $_COOKIE['key'];
+$username = $_SESSION['username'];
+$onetimepad = $_SESSION['onetimepad'];
+$base_uri = $_SESSION['base_uri'];
+
+sqextractGlobalVar('show');
+if ( isset($_POST['query']) ) {
+    $query = $_POST['query'];
+}
+if ( isset($_POST['listall']) ) {
+    $listall = $_POST['listall'];
+}
+if ( isset($_POST['backend'] ) ) {
+    $backend = $_POST['backend'];
+}
 
 /* Function to include JavaScript code */
 function insert_javascript() {
@@ -93,40 +115,45 @@ function display_result($res, $includesource = true) {
     insert_javascript();
         
     $line = 0;
-    echo '<TABLE BORDER="0" WIDTH="98%" ALIGN=center>' .
-         '<TR BGCOLOR="' . $color[9] . '"><TH ALIGN=left>&nbsp;' .
-         '<TH ALIGN=left>&nbsp;' . _("Name") .
-         '<TH ALIGN=left>&nbsp;' . _("E-mail") .
-         '<TH ALIGN=left>&nbsp;' . _("Info");
+    echo html_tag( 'table', '', 'center', '', 'border="0" width="98%"' ) .
+    html_tag( 'tr', '', '', $color[9] ) .
+    html_tag( 'th', '&nbsp;', 'left' ) .
+    html_tag( 'th', '&nbsp;' . _("Name"), 'left' ) .
+    html_tag( 'th', '&nbsp;' . _("E-mail"), 'left' ) .
+    html_tag( 'th', '&nbsp;' . _("Info"), 'left' );
 
     if ($includesource) {
-        echo '<TH ALIGN=left WIDTH="10%">&nbsp;' . _("Source");
+        echo html_tag( 'th', '&nbsp;' . _("Source"), 'left', 'width="10%"' );
     }    
-    echo "</TR>\n";
+    echo "</tr>\n";
     
     while (list($undef, $row) = each($res)) {
-        echo '<tr';
-        if ($line % 2) { echo ' bgcolor="' . $color[0] . '"'; }
-        echo ' nowrap><td valign=top nowrap align=center width="5%">' .
+        $tr_bgcolor = '';
+        $email = htmlspecialchars(addcslashes(AddressBook::full_address($row), "'"), ENT_QUOTES);
+        if ($line % 2) { $tr_bgcolor = $color[0]; }
+        echo html_tag( 'tr', '', '', $tr_bgcolor, 'nowrap' ) .
+        html_tag( 'td',
              '<small><a href="javascript:to_address(' . 
-                                       "'" . $row['email'] . "');\">To</A> | " .
+                                       "'" . $email . "');\">To</A> | " .
              '<a href="javascript:cc_address(' . 
-                                       "'" . $row['email'] . "');\">Cc</A> | " .
+                                       "'" . $email . "');\">Cc</A> | " .
              '<a href="javascript:bcc_address(' . 
-                                 "'" . $row['email'] . "');\">Bcc</A></small>" .
-             '<td nowrap valign=top>&nbsp;' .
-                                 $row['name'] . '&nbsp;<td nowrap valign=top>' .
-             '&nbsp;<a href="javascript:to_and_close(' .
-                 "'" . $row['email'] . "');\">" . $row['email'] . '</A>&nbsp;' .
-             '<td valign=top>&nbsp;' . $row['label'] . '&nbsp;';
+                                 "'" . $email . "');\">Bcc</A></small>",
+        'center', '', 'valign="top" width="5%" nowrap' ) .
+        html_tag( 'td', '&nbsp;' . htmlspecialchars($row['name']), 'left', '', 'valign="top" nowrap' ) .
+        html_tag( 'td', '&nbsp;' .
+             '<a href="javascript:to_and_close(' .
+                 "'" . $email . "');\">" . htmlspecialchars($row['email']) . '</A>'
+        , 'left', '', 'valign="top"' ) .
+        html_tag( 'td', htmlspecialchars($row['label']), 'left', '', 'valign="top" nowrap' );
         if ($includesource) {
-            echo '<td nowrap valign=top>&nbsp;' . $row['source'];
+            echo html_tag( 'td', '&nbsp;' . $row['source'], 'left', '', 'valign="top" nowrap' );
         }
 
-        echo "</TR>\n";
+        echo "</tr>\n";
         $line++;
     }
-    echo '</TABLE>';
+    echo '</table>';
 }
 
 /* ================= End of functions ================= */
@@ -140,9 +167,10 @@ displayHtmlHeader();
 /* Initialize vars */
 if (!isset($query)) { $query = ''; }
 if (!isset($show))  { $show  = ''; }
+if (!isset($backend)) { $backend = ''; }
 
 /* Choose correct colors for top and bottom frame */
-if ($show == 'form') {
+if ($show == 'form' && !isset($listall)) {
     echo '<BODY TEXT="' . $color[6] . '" BGCOLOR="' . $color[3] . '" ' .
                'LINK="' . $color[6] . '" VLINK="'   . $color[6] . '" ' .
                                         'ALINK="'   . $color[6] . '" ' .
@@ -155,9 +183,10 @@ if ($show == 'form') {
 
 /* Empty search */
 if (empty($query) && empty($show) && empty($listall)) {
-    echo '<P ALIGN=center><BR>' .
-          _("No persons matching your search was found") .
-          "</P>\n</BODY></HTML>\n",
+    echo html_tag( 'p', '<br>' .
+                      _("No persons matching your search was found"),
+            'center' ) .
+          "\n</BODY></HTML>\n",
     exit;
 }
 
@@ -165,14 +194,15 @@ if (empty($query) && empty($show) && empty($listall)) {
 $abook = addressbook_init();
 
 /* Create search form */
-if ($show == 'form') {
-    echo '<FORM NAME=sform TARGET=abookres ACTION="' . $PHP_SELF .
+if ($show == 'form' && empty($listall)) {
+    echo '<FORM NAME=sform TARGET=abookres ACTION="addrbook_search.php'. 
          '" METHOD="POST">' . "\n" .
-         '<TABLE BORDER="0" WIDTH="100%" HEIGHT="100%">' .
-         '<TR><TD NOWRAP VALIGN=middle>' . "\n" .
-         '  <STRONG>' . _("Search for") . "</STRONG>\n" .
-         '  <INPUT TYPE=text NAME=query VALUE="' . htmlspecialchars($query) .
-         "\" SIZE=26>\n";
+         html_tag( 'table', '', '', '', 'border="0" width="100%" height="100%"' ) .
+         html_tag( 'tr' ) .
+         html_tag( 'td', '  <strong>' . _("Search for") . "</strong>\n", 'left', '', 'nowrap valign="middle" width="10%"' ) .
+         html_tag( 'td', '', 'left', '', '' ) .
+                 '<INPUT TYPE=text NAME=query VALUE="' . htmlspecialchars($query) .
+                 "\" SIZE=28>\n";
 
     /* List all backends to allow the user to choose where to search */
     if ($abook->numbackends > 1) {
@@ -187,13 +217,18 @@ if ($show == 'form') {
         echo '<INPUT TYPE=hidden NAME=backend VALUE=-1>' . "\n";
     }
         
-    echo '<INPUT TYPE=submit VALUE="' . _("Search") . '">' .
-         '&nbsp;|&nbsp;<INPUT TYPE=submit VALUE="' . _("List all") .
-         '" NAME=listall>' . "\n" .
-         '</TD><TD ALIGN=right>' . "\n" .
-         '<INPUT TYPE=button VALUE="' . _("Close window") .
-         '" onclick="parent.close();">' . "\n" .
-         '</TD></TR></TABLE></FORM>' . "\n";
+    echo '</td></tr>' .
+    html_tag( 'tr',
+                    html_tag( 'td', '', 'left' ) .
+                    html_tag( 'td',
+                            '<INPUT TYPE=submit VALUE="' . _("Search") . '" NAME=show>' .
+                            '&nbsp;|&nbsp;<INPUT TYPE=submit VALUE="' . _("List all") .
+                            '" NAME=listall>' . "\n" .
+                            '&nbsp;|&nbsp;<INPUT TYPE=button VALUE="' . _("Close") .
+                            '" onclick="parent.close();">' . "\n" ,
+                    'left' )
+            ) .
+         '</table></form>' . "\n";
 } else {
 
     /* Show personal addressbook */
@@ -209,10 +244,10 @@ if ($show == 'form') {
                 usort($res,'alistcmp');
                 display_result($res, false);
             } else {
-                echo '<P ALIGN=center><STRONG>' .
-                     sprintf(_("Unable to list addresses from %s"),
-                         $abook->backends[$backend]->sname) .
-                     '</STRONG></P>' . "\n";
+                echo html_tag( 'p', '<strong>' .
+                                 sprintf(_("Unable to list addresses from %s"),
+                                     $abook->backends[$backend]->sname) . '</strong>' ,
+                       'center' ) . "\n";
             }
         } else {
             $res = $abook->list_addr();
@@ -235,16 +270,19 @@ if ($show == 'form') {
             }
         
             if (!is_array($res)) {
-                echo '<P ALIGN=center><B><BR>' .
-                     _("Your search failed with the following error(s)") .
-                     ':<br>' . $abook->error . "</B></P>\n</BODY></HTML>\n";
+                echo html_tag( 'p', '<b><br>' .
+                                 _("Your search failed with the following error(s)") .
+                                 ':<br>' . $abook->error . "</b>\n" ,
+                       'center' ) .
+                "\n</BODY></HTML>\n";
                 exit;
             }
         
             if (sizeof($res) == 0) {
-                echo '<P ALIGN=center><BR><B>' .
-                     _("No persons matching your search was found") .
-                     ".</B></P>\n</BODY></HTML>\n";
+                echo html_tag( 'p', '<br><b>' .
+                                 _("No persons matching your search was found") . "</b>\n" ,
+                       'center' ) .
+                "\n</BODY></HTML>\n";
                 exit;
             }