X-Git-Url: https://vcs.fsf.org/?p=squirrelmail.git;a=blobdiff_plain;f=src%2Faddrbook_search_html.php;h=c7062491e8a8283153f7550a10c8e06cbc034fad;hp=cd8fb2ca26155023c7a829d3953a6596ac782dd8;hb=e38807da7cc331846514027ebc62b9c0456b1ada;hpb=7aaa81fcf8383ee72ee0e4fd3cb2fd8d5f9708b5

diff --git a/src/addrbook_search_html.php b/src/addrbook_search_html.php
index cd8fb2ca..c7062491 100644
--- a/src/addrbook_search_html.php
+++ b/src/addrbook_search_html.php
@@ -1,55 +1,67 @@
 <?php
-   /**
-    **  addrbook_search.php
-    **
-    **  Copyright (c) 1999-2000 The SquirrelMail development team
-    **  Licensed under the GNU GPL. For full terms see the file COPYING.
-    **
-    **  Handle addressbook searching with pure html. 
-    ** 
-    **  This file is included from compose.php 
-    **
-    **  NOTE: A lot of this code is similar to the code in
-    **        addrbook_search.html -- If you change one, change
-    **        the other one too!
-    **/
-
-   session_start();
-
-   if (!isset($config_php))
-      include("../config/config.php");
-   if (!isset($strings_php))
-      include("../functions/strings.php");
-   if (!isset($auth_php))
-      include("../functions/auth.php");
-   if (!isset($page_header_php))
-      include("../functions/page_header.php");
-   if (!isset($date_php))
-      include("../functions/date.php");
-   if (!isset($smtp_php))
-      include("../functions/smtp.php");
-   if (!isset($display_messages_php))
-      include("../functions/display_messages.php");
-   if (!isset($addressbook_php))
-      include("../functions/addressbook.php");
-   if (!isset($plugin_php))
-      include("../functions/plugin.php");
-
-   include("../src/load_prefs.php");
+
+/**
+ * addrbook_search_html.php
+ *
+ * Copyright (c) 1999-2001 The Squirrelmail Development Team
+ * Licensed under the GNU GPL. For full terms see the file COPYING.
+ *
+ * Handle addressbook searching with pure html.
+ *
+ * This file is included from compose.php
+ *
+ * NOTE: A lot of this code is similar to the code in
+ *       addrbook_search.html -- If you change one, change
+ *       the other one too!
+ *
+ * $Id$
+ */
+
+/*****************************************************************/
+/*** THIS FILE NEEDS TO HAVE ITS FORMATTING FIXED!!!           ***/
+/*** PLEASE DO SO AND REMOVE THIS COMMENT SECTION.             ***/
+/***    + Base level indent should begin at left margin, as    ***/
+/***      the require_once below looks.                        ***/
+/***    + All identation should consist of four space blocks   ***/
+/***    + Tab characters are evil.                             ***/
+/***    + all comments should use "slash-star ... star-slash"  ***/
+/***      style -- no pound characters, no slash-slash style   ***/
+/***    + FLOW CONTROL STATEMENTS (if, while, etc) SHOULD      ***/
+/***      ALWAYS USE { AND } CHARACTERS!!!                     ***/
+/***    + Please use ' instead of ", when possible. Note "     ***/
+/***      should always be used in _( ) function calls.        ***/
+/*** Thank you for your help making the SM code more readable. ***/
+/*****************************************************************/
+
+require_once('../src/validate.php');
+require_once('../functions/date.php');
+require_once('../functions/smtp.php');
+require_once('../functions/display_messages.php');
+require_once('../functions/addressbook.php');
+require_once('../functions/plugin.php');
 
    // Insert hidden data
    function addr_insert_hidden() {
-      global $body, $subject, $send_to, $send_to_cc, $send_to_bcc;
-      printf("<input type=hidden value=\"%s\" name=body>\n", 
-	     htmlspecialchars($body));
-      printf("<input type=hidden value=\"%s\" name=subject>\n", 
-	     htmlspecialchars($subject));
-      printf("<input type=hidden value=\"%s\" name=send_to>\n", 
-	     htmlspecialchars($send_to));
-      printf("<input type=hidden value=\"%s\" name=send_to_cc>\n", 
-	     htmlspecialchars($send_to_cc));
-      printf("<input type=hidden value=\"%s\" name=send_to_bcc>\n", 
-	     htmlspecialchars($send_to_bcc));     
+      global $body, $subject, $send_to, $send_to_cc, $send_to_bcc, $mailbox,
+         $identity;
+
+      echo '<input type=hidden value="';
+      if (substr($body, 0, 1) == "\r")
+          echo "\n";
+      echo htmlspecialchars($body) . '" name=body>' . "\n";
+      echo '<input type=hidden value="' . htmlspecialchars($subject)
+          . '" name=subject>' . "\n";
+      echo '<input type=hidden value="' . htmlspecialchars($send_to)
+          . '" name=send_to>' . "\n";
+      echo "<input type=hidden value=\"" . htmlspecialchars($send_to_cc)
+          . '" name=send_to_cc>' . "\n";
+      echo "<input type=hidden value=\"" . htmlspecialchars($send_to_bcc)
+          . '" name=send_to_bcc>' . "\n";
+      echo "<input type=hidden value=\"" . htmlspecialchars($identity)
+          . '" name=identity>' . "\n";
+      echo "<input type=hidden name=mailbox value=\"" .
+          htmlspecialchars($mailbox) . "\">\n";
+      echo "<input type=hidden value=\"true\" name=from_htmladdr_search>\n";
    }
 
 
@@ -59,127 +71,133 @@
 
       if(sizeof($res) <= 0) return;
 
-      printf('<FORM METHOD=post ACTION="%s?html_addr_search_done=true">'."\n",
-	     $PHP_SELF);
+      echo '<form method=post action="' . $PHP_SELF . "\">\n";
+      echo '<input type=hidden name="html_addr_search_done" value="true">';
+      echo "\n";
       addr_insert_hidden();
       $line = 0;
 
       print "<TABLE BORDER=0 WIDTH=\"98%\" ALIGN=center>";
       printf("<TR BGCOLOR=\"$color[9]\"><TH ALIGN=left>&nbsp;".
-	     "<TH ALIGN=left>&nbsp;%s<TH ALIGN=left>&nbsp;%s".
-	     "<TH ALIGN=left>&nbsp;%s",
-	     _("Name"), _("E-mail"), _("Info"));
+             "<TH ALIGN=left>&nbsp;%s<TH ALIGN=left>&nbsp;%s".
+             "<TH ALIGN=left>&nbsp;%s",
+             _("Name"), _("E-mail"), _("Info"));
 
       if($includesource)
-	 printf("<TH ALIGN=left WIDTH=\"10%%\">&nbsp;%s", _("Source"));
+         printf("<TH ALIGN=left WIDTH=\"10%%\">&nbsp;%s", _("Source"));
 
       print "</TR>\n";
-      
-      while(list($undef, $row) = each($res)) {
-         printf("<tr%s nowrap><td nowrap align=center width=\"5%%\">".
-                "<input type=checkbox name=\"send_to_search[]\" value=\"%s\">&nbsp;To".
-                "<input type=checkbox name=\"send_to_cc_search[]\" value=\"%s\">&nbsp;Cc&nbsp;".
-                "<td nowrap>&nbsp;%s&nbsp;<td nowrap>&nbsp;".
-                "%s".
-                "<td nowrap>&nbsp;%s&nbsp;",
-                ($line % 2) ? " bgcolor=\"$color[0]\"" : "", 
-		htmlspecialchars($row["email"]), htmlspecialchars($row["email"]), 
-		$row["name"], $row["email"], $row["label"]);
-	 if($includesource)
-	    printf("<td nowrap>&nbsp;%s", $row["source"]);
-	 
-	 print "</TR>\n";
-         $line++;
+
+      foreach ($res as $row) {
+         echo '<tr';
+	 if ($line % 2) echo ' bgcolor="' . $color[0] . '"';
+	 echo ' nowrap><td nowrap align=center width="5%">';
+	 echo '<input type=checkbox name="send_to_search[T' . $line . ']" value = "' .
+	    htmlspecialchars($row['email']) . '">&nbsp;To&nbsp;';
+	 echo '<input type=checkbox name="send_to_search[C' . $line . ']" value = "' .
+	    htmlspecialchars($row['email']) . '">&nbsp;Cc&nbsp;';
+	 echo '<input type=checkbox name="send_to_search[B' . $line . ']" value = "' .
+	    htmlspecialchars($row['email']) . '">&nbsp;Bcc&nbsp;';
+         echo '</td><td nowrap>&nbsp;' . $row['name'] . '&nbsp;</td>';
+	 echo '<td nowrap>&nbsp;' . $row['email'] . '&nbsp;</td>';
+	 echo '<td nowrap>&nbsp;' . $row['label'] . '&nbsp;</td>';
+         if($includesource)
+	    echo '<td nowrap>&nbsp;' . $row['source'] . '&nbsp;</td>';
+	 echo "</tr>\n";
+	 $line ++;
       }
       printf('<TR><TD ALIGN=center COLSPAN=%d><INPUT TYPE=submit '.
-	     'NAME="addr_search_done" VALUE="%s"></TD></TR>',
-	     4 + ($includesource ? 1 : 0), 
-	     _("Use Addresses"));
-      print "</TABLE>";
+             'NAME="addr_search_done" VALUE="%s"></TD></TR>',
+             4 + ($includesource ? 1 : 0),
+             _("Use Addresses"));
+      print '</TABLE>';
       print '<INPUT TYPE=hidden VALUE=1 NAME="html_addr_search_done">';
-      print "</FORM>";
+      print '</FORM>';
    }
 
    // --- End functions ---
 
-   displayPageHeader($color, "None");
+   global $mailbox;
+   displayPageHeader($color, $mailbox);
 
    // Initialize addressbook
    $abook = addressbook_init();
 
-   $body = sqStripSlashes($body);
-   $send_to = sqStripSlashes($send_to);
-   $send_to_cc = sqStripSlashes($send_to_cc);
-   $send_to_bcc = sqStripSlashes($send_to_bcc);
-   $subject = sqStripSlashes($subject);
-
+?>
 
-   // Header
-   print  "<TABLE BORDER=0 WIDTH=100% COLS=1 ALIGN=CENTER>\n";
-   printf('<TR><TD BGCOLOR="%s" ALIGN=CENTER><STRONG>%s</STRONG></TD></TR>', 
-	  $color[0], _("Address Book Search"));
-   print  "</TABLE>\n";
+<br>
+<table width=95% align=center cellpadding=2 cellspacing=2 border=0>
+<tr><td bgcolor="<?php echo $color[0] ?>">
+   <center><b><?php echo _("Address Book Search") ?></b></center>
+</td></tr></table>
 
+<?php
    // Search form
    print "<CENTER>\n";
-   printf('<FORM METHOD=post NAME=f ACTION="%s?html_addr_search=true">'."\n",
-	  $PHP_SELF);
    print "<TABLE BORDER=0>\n";
-   printf("<TR><TD NOWRAP VALIGN=middle>\n");
-   printf("  <STRONG>%s</STRONG>\n", _("Search for"));
+   print "<TR><TD NOWRAP VALIGN=middle>\n";
+   printf('<FORM METHOD=post NAME=f ACTION="%s?html_addr_search=true">'."\n", $PHP_SELF);
+   print "<CENTER>\n";
+   printf("  <nobr><STRONG>%s</STRONG>\n", _("Search for"));
+   addr_insert_hidden();
+   if (! isset($addrquery))
+       $addrquery = '';
    printf("  <INPUT TYPE=text NAME=addrquery VALUE=\"%s\" SIZE=26>\n",
-	  htmlspecialchars($addrquery));
+          htmlspecialchars($addrquery));
 
    // List all backends to allow the user to choose where to search
+   if(!isset($backend)) $backend = "";
    if($abook->numbackends > 1) {
-      printf("<STRONG>%s</STRONG>&nbsp;<SELECT NAME=backend>\n", 
-	     _("in"));
-      printf("<OPTION VALUE=-1 %s>%s\n", 
-	     ($backend == -1) ? "SELECTED" : "",
-	     _("All address books"));
+      printf("<STRONG>%s</STRONG>&nbsp;<SELECT NAME=backend>\n",
+             _("in"));
+      printf("<OPTION VALUE=-1 %s>%s\n",
+             ($backend == -1) ? "SELECTED" : "",
+             _("All address books"));
       $ret = $abook->get_backend_list();
-      while(list($undef,$v) = each($ret)) 
-	 printf("<OPTION VALUE=%d %s>%s\n", 
-		$v->bnum, 
-		($backend == $v->bnum) ? "SELECTED" : "",
-		$v->sname);
-      printf("</SELECT>\n");
+      while(list($undef,$v) = each($ret))
+         printf("<OPTION VALUE=%d %s>%s\n",
+                $v->bnum,
+                ($backend == $v->bnum) ? "SELECTED" : "",
+                $v->sname);
+      print "</SELECT>\n";
    } else {
-      printf("<INPUT TYPE=hidden NAME=backend VALUE=-1>\n");
+      print "<INPUT TYPE=hidden NAME=backend VALUE=-1>\n";
    }
    printf("<INPUT TYPE=submit VALUE=\"%s\">",
-	  _("Search"));
+          _("Search"));
    printf("&nbsp;|&nbsp;<INPUT TYPE=submit VALUE=\"%s\" NAME=listall>\n",
-	  _("List all"));
-   printf("</TD></TR></TABLE>\n");
+          _("List all"));
+   print '</FORM></center>';
+
+   print "</TD></TR></TABLE>\n";
    addr_insert_hidden();
-   print "</FORM>";
    print "</CENTER>";
-   do_hook("addrbook_html_search_below");
+   do_hook('addrbook_html_search_below');
    // End search form
 
    // Show personal addressbook
-   if(!isset($addrquery) || !empty($listall)) {
+   if($addrquery == '' || !empty($listall)) {
 
-      if($backend != -1 || !isset($addrquery)) {
-	 if(!isset($addrquery)) 
-	    $backend = $abook->localbackend;
+      if(! isset($backend) || $backend != -1 || $addrquery == '') {
+         if($addrquery == '')
+            $backend = $abook->localbackend;
 
-	 //printf("<H3 ALIGN=center>%s</H3>\n", $abook->backends[$backend]->sname);
+         //printf("<H3 ALIGN=center>%s</H3>\n", $abook->backends[$backend]->sname);
 
-	 $res = $abook->list_addr($backend);
+         $res = $abook->list_addr($backend);
 
-	 if(is_array($res)) {
-	    addr_display_result($res, false);
-	 } else {
-	    printf("<P ALIGN=center><STRONG>"._("Unable to list addresses from %s").
-		   "</STRONG></P>\n", $abook->backends[$backend]->sname);
-	 }
+         if(is_array($res)) {
+            addr_display_result($res, false);
+         } else {
+            printf("<P ALIGN=center><STRONG>"._("Unable to list addresses from %s").
+                   "</STRONG></P>\n", $abook->backends[$backend]->sname);
+         }
 
       } else {
-	 $res = $abook->list_addr();
-	 addr_display_result($res, true);
+         $res = $abook->list_addr();
+         addr_display_result($res, true);
       }
+      exit;
 
    } else
 
@@ -187,25 +205,29 @@
    if(!empty($addrquery) && empty($listall)) {
 
       if($backend == -1) {
-	 $res = $abook->s_search($addrquery);
+         $res = $abook->s_search($addrquery);
       } else {
-	 $res = $abook->s_search($addrquery, $backend);
+         $res = $abook->s_search($addrquery, $backend);
       }
 
       if(!is_array($res)) {
-	 printf("<P ALIGN=center><B><BR>%s:<br>%s</B></P>\n</BODY></HTML>\n",
-		_("Your search failed with the following error(s)"),
-		$abook->error);
-	 exit;
-      }
-
-      if(sizeof($res) == 0) {
-	 printf("<P ALIGN=center><BR><B>%s.</B></P>\n</BODY></HTML>\n",
-		_("No persons matching your search was found"));
-	 exit;
+         printf("<P ALIGN=center><B><BR>%s:<br>%s</B></P>\n</BODY></HTML>\n",
+                _("Your search failed with the following error(s)"),
+                $abook->error);
+      } else if(sizeof($res) == 0) {
+         printf("<P ALIGN=center><BR><B>%s.</B></P>\n</BODY></HTML>\n",
+                _("No persons matching your search was found"));
+      } else {
+         addr_display_result($res);
       }
+   }
 
-      addr_display_result($res);
+   if ($addrquery == '' || sizeof($res) == 0) {
+      printf('<center><FORM METHOD=post NAME=k ACTION="compose.php">'."\n", $PHP_SELF);
+      addr_insert_hidden();
+      printf("<INPUT TYPE=submit VALUE=\"%s\" NAME=return>\n", _("Return"));
+      print '</form>';
+      print '</center></nobr>';
    }
 
 ?>