X-Git-Url: https://vcs.fsf.org/?p=squirrelmail.git;a=blobdiff_plain;f=src%2Fdownload.php;h=655aa76ee770ea4199b86c12cafa474e66c0dd64;hp=1bc5f4e5c86b996ef410737fffad42931d03f7ac;hb=bbb2bab55dbfb58735b8aa3eab53c052410753fa;hpb=38bca81c320d9a95a3e3329d9dbf7407e85bb6b1 diff --git a/src/download.php b/src/download.php index 1bc5f4e5..655aa76e 100644 --- a/src/download.php +++ b/src/download.php @@ -3,76 +3,94 @@ /** * download.php * - * Copyright (c) 1999-2002 The SquirrelMail Project Team - * Licensed under the GNU GPL. For full terms see the file COPYING. - * * Handles attachment downloads to the users computer. * Also allows displaying of attachments when possible. * - * $Id$ + * @copyright © 1999-2009 The SquirrelMail Project Team + * @license http://opensource.org/licenses/gpl-license.php GNU Public License + * @version $Id$ + * @package squirrelmail + */ + +/** This is the download page */ +define('PAGE_NAME', 'download'); + +/** + * Include the SquirrelMail initialization file. */ +require('../include/init.php'); -require_once('../src/validate.php'); -require_once('../functions/imap.php'); -require_once('../functions/mime.php'); +/* SquirrelMail required files. */ +require(SM_PATH . 'functions/imap_general.php'); +require(SM_PATH . 'functions/mailbox_display.php'); +require(SM_PATH . 'functions/mime.php'); + +/** + * If a message is viewed from the search page, $aMailbox[$passed_id]['MESSAGE_OBJECT'] + * is not initialized, which makes this page error out on line 65 with an + * undefined function. We need to include some additional files in case the + * object has not been initialized. + * + * TODO: Determine why the object in question is not initialized when coming from + * a search page and correct. Once that is done, we can remove these + * includes. + */ +require(SM_PATH . 'functions/imap_messages.php'); +require(SM_PATH . 'functions/date.php'); header('Pragma: '); header('Cache-Control: cache'); -function get_extract_to_target_list($imapConnection) { - $boxes = sqimap_mailbox_list($imapConnection); - for ($i = 0; $i < count($boxes); $i++) { - if (!in_array('noselect', $boxes[$i]['flags'])) { - $box = $boxes[$i]['unformatted']; - $box2 = str_replace(' ', ' ', $boxes[$i]['unformatted-disp']); - if ( $box2 == 'INBOX' ) { - $box2 = _("INBOX"); - } - echo "\n"; - } - } +/* globals */ +sqgetGlobalVar('mailbox_cache',$mailbox_cache,SQ_SESSION); +sqgetGlobalVar('messages', $messages, SQ_SESSION); +sqgetGlobalVar('mailbox', $mailbox, SQ_GET); +sqgetGlobalVar('ent_id', $ent_id, SQ_GET); +sqgetGlobalVar('absolute_dl',$absolute_dl, SQ_GET); +sqgetGlobalVar('force_crlf', $force_crlf, SQ_GET); +sqgetGlobalVar('passed_id', $passed_id, SQ_GET, NULL, SQ_TYPE_BIGINT); +if (!sqgetGlobalVar('account', $account, SQ_GET) ) { + $account = 0; } -$mailbox = decodeHeader($mailbox); -global $messages, $uid_support; +global $default_charset; +set_my_charset(); + +/* end globals */ + +$imapConnection = sqimap_login($username, false, $imapServerAddress, $imapPort, 0); +$aMailbox = sqm_api_mailbox_select($imapConnection, $account, $mailbox,array(),array()); -$imapConnection = sqimap_login($username, $key, $imapServerAddress, $imapPort, 0); -$mbx_response = sqimap_mailbox_select($imapConnection, $mailbox); -if (!isset($passed_ent_id)) { - $passed_ent_id = ''; +if (isset($aMailbox['MSG_HEADERS'][$passed_id]['MESSAGE_OBJECT']) && + is_object($aMailbox['MSG_HEADERS'][$passed_id]['MESSAGE_OBJECT']) ) { + $message = $aMailbox['MSG_HEADERS'][$passed_id]['MESSAGE_OBJECT']; +} else { + $message = sqimap_get_message($imapConnection, $passed_id, $mailbox); + $aMailbox['MSG_HEADERS'][$passed_id]['MESSAGE_OBJECT'] = $message; } -$message = &$messages[$mbx_response['UIDVALIDITY']]["$passed_id"]; -$message = &$message->getEntity($passed_ent_id); +$subject = $message->rfc822_header->subject; +if ($ent_id) { + // replace message with message part, if message part is requested. + $message = $message->getEntity($ent_id); + $header = $message->header; -$header = $message->header; -$charset = $header->getParameter('charset'); -$type0 = $header->type0; -$type1 = $header->type1; -$encoding = strtolower($header->encoding); + if ($message->rfc822_header) { + $subject = $message->rfc822_header->subject; + } else { + $header = $message->header; + } + $type0 = $header->type0; + $type1 = $header->type1; + $encoding = strtolower($header->encoding); +} else { + /* raw message */ + $type0 = 'message'; + $type1 = 'rfc822'; + $encoding = '7bit'; + $header = $message->header; +} -/* -$extracted = false; -if (isset($extract_message) && $extract_message) { - $cmd = "FETCH $passed_id BODY[$passed_ent_id]"; - $read = sqimap_run_command ($imapConnection, $cmd, true, $response, $message, $uid_support); - $cnt = count($read); - $body = ''; - $length = 0; - for ($i=1;$i<$cnt;$i++) { - $length = $length + strlen($read[$i]); - $body .= $read[$i]; - } - if (isset($targetMailbox) && $length>0) { - sqimap_append ($imapConnection, $targetMailbox, $length); - fputs($imapConnection,$body); - sqimap_append_done ($imapConnection); - $extracted = true; - } -} - - -*/ /* * lets redefine message as this particular entity that we wish to display. * it should hold only the header for this entity. We need to fetch the body @@ -85,37 +103,54 @@ if (isset($override_type0)) { if (isset($override_type1)) { $type1 = $override_type1; } - -$filename = decodeHeader($message->header->getParameter('filename')); - -if (!$filename) { - $filename = decodeHeader($message->header->getParameter('name')); +$filename = ''; +if (is_object($message->header->disposition)) { + $filename = $header->disposition->getProperty('filename'); + if (!$filename) { + $filename = $header->disposition->getProperty('name'); + } + if (!$filename) { + $filename = $header->getParameter('name'); + } +} else { + $filename = $header->getParameter('name'); } +$filename = decodeHeader($filename,true,false); +$filename = charset_encode($filename,$default_charset,false); + +// If name is not set, use subject of email if (strlen($filename) < 1) { - if ($type1 == 'plain' && $type0 == 'text') { + $filename = decodeHeader($subject, true, true); + $filename = charset_encode($filename,$default_charset,false); + if ($type1 == 'plain' && $type0 == 'text') $suffix = 'txt'; - $filename = $header->subject . '.txt'; - } else if ($type1 == 'richtext' && $type0 == 'text') { + else if ($type1 == 'richtext' && $type0 == 'text') $suffix = 'rtf'; - $filename = $header->subject . '.rtf'; - } else if ($type1 == 'postscript' && $type0 == 'application') { + else if ($type1 == 'postscript' && $type0 == 'application') $suffix = 'ps'; - $filename = $header->subject . '.ps'; - } else if ($type1 == 'rfc822' && $type0 == 'message') { + else if ($type1 == 'rfc822' && $type0 == 'message') $suffix = 'eml'; - $filename = $header->subject . '.msg'; - } else { + else $suffix = $type1; - } - if (strlen($filename) < 1) { - $filename = "untitled$passed_ent_id.$suffix"; - } else { - $filename = "$filename.$suffix"; - } + if ($filename == '') + $filename = 'untitled' . strip_tags($ent_id); + $filename = $filename . '.' . $suffix; } +/** + * Update mailbox_cache and close session in order to prevent + * script locking on larger downloads. SendDownloadHeaders() and + * mime_print_body_lines() don't write information to session. + * mime_print_body_lines() call duration depends on size of + * attachment and script can cause interface lockups, if session + * is not closed. + */ +$mailbox_cache[$aMailbox['NAME']] = $aMailbox; +sqsession_register($mailbox_cache,'mailbox_cache'); +session_write_close(); + /* * Note: * The following sections display the attachment in different @@ -128,78 +163,15 @@ if (strlen($filename) < 1) { * most likely display the attachment inline inside the browser. * And finally, the third one will be used by default. If it * is displayable (text or html), it will load them up in a text - * viewer (built in to squirrelmail). Otherwise, it sets the + * viewer (built in to SquirrelMail). Otherwise, it sets the * content-type as application/octet-stream */ -if (isset($absolute_dl) && $absolute_dl == 'true') { - DumpHeaders($type0, $type1, $filename, 1); +if (isset($absolute_dl) && $absolute_dl) { + SendDownloadHeaders($type0, $type1, $filename, 1); } else { - DumpHeaders($type0, $type1, $filename, 0); + SendDownloadHeaders($type0, $type1, $filename, 0); } /* be aware that any warning caused by download.php will corrupt the * attachment in case of ERROR reporting = E_ALL and the output is the screen */ -mime_print_body_lines ($imapConnection, $passed_id, $passed_ent_id, $encoding); +mime_print_body_lines ($imapConnection, $passed_id, $ent_id, $encoding, 'php://stdout', $force_crlf); -$message = &$message->getEntity(''); -$messages[$mbx_response['UIDVALIDITY']]["$passed_id"] = &$message; - -/* - * This function is verified to work with Netscape and the *very latest* - * version of IE. I don't know if it works with Opera, but it should now. - */ -function DumpHeaders($type0, $type1, $filename, $force) { - global $HTTP_USER_AGENT; - $isIE = 0; - - if (strstr($HTTP_USER_AGENT, 'compatible; MSIE ') !== false && - strstr($HTTP_USER_AGENT, 'Opera') === false) { - $isIE = 1; - } - - if (strstr($HTTP_USER_AGENT, 'compatible; MSIE 6') !== false && - strstr($HTTP_USER_AGENT, 'Opera') === false) { - $isIE6 = 1; - } - - $filename = ereg_replace('[^-a-zA-Z0-9\.]', '_', $filename); - - // A Pox on Microsoft and it's Office! - if (! $force) { - // Try to show in browser window - header("Content-Disposition: inline; filename=\"$filename\""); - header("Content-Type: $type0/$type1; name=\"$filename\""); - } else { - // Try to pop up the "save as" box - // IE makes this hard. It pops up 2 save boxes, or none. - // http://support.microsoft.com/support/kb/articles/Q238/5/88.ASP - // But, accordint to Microsoft, it is "RFC compliant but doesn't - // take into account some deviations that allowed within the - // specification." Doesn't that mean RFC non-compliant? - // http://support.microsoft.com/support/kb/articles/Q258/4/52.ASP - // - // The best thing you can do for IE is to upgrade to the latest - // version - if ($isIE && !isset($isIE6)) { - // http://support.microsoft.com/support/kb/articles/Q182/3/15.asp - // Do not have quotes around filename, but that applied to - // "attachment"... does it apply to inline too? - // - // This combination seems to work mostly. IE 5.5 SP 1 has - // known issues (see the Microsoft Knowledge Base) - header("Content-Disposition: inline; filename=$filename"); - - // This works for most types, but doesn't work with Word files - header("Content-Type: application/download; name=\"$filename\""); - - // These are spares, just in case. :-) - //header("Content-Type: $type0/$type1; name=\"$filename\""); - //header("Content-Type: application/x-msdownload; name=\"$filename\""); - //header("Content-Type: application/octet-stream; name=\"$filename\""); - } else { - header("Content-Disposition: attachment; filename=\"$filename\""); - // application/octet-stream forces download for Netscape - header("Content-Type: application/octet-stream; name=\"$filename\""); - } - } -} -?>