githubFork/roundcubemail.git

Add config parameter to disable the installer warning

thomascube

2008-03-14 0714b7e09d9a4f26d76bf5ccbe05c356a961f4a2

commit \| author \| age
4e17e6	1	<?php
T	2	/*
	3	+-----------------------------------------------------------------------+
	4	\| RoundCube Webmail IMAP Client \|
0714b7	5	\| Version 0.1-20080314 \|
4e17e6	6	\| \|
0714b7	7	\| Copyright (C) 2005-2008, RoundCube Dev. - Switzerland \|
15fee7	8	\| Licensed under the GNU GPL \|
4e17e6	9	\| \|
T	10	\| Redistribution and use in source and binary forms, with or without \|
	11	\| modification, are permitted provided that the following conditions \|
	12	\| are met: \|
	13	\| \|
	14	\| o Redistributions of source code must retain the above copyright \|
	15	\| notice, this list of conditions and the following disclaimer. \|
	16	\| o Redistributions in binary form must reproduce the above copyright \|
	17	\| notice, this list of conditions and the following disclaimer in the \|
	18	\| documentation and/or other materials provided with the distribution.\|
	19	\| o The names of the authors may not be used to endorse or promote \|
	20	\| products derived from this software without specific prior written \|
	21	\| permission. \|
	22	\| \|
	23	\| THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS \|
	24	\| "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT \|
	25	\| LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR \|
	26	\| A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT \|
	27	\| OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, \|
	28	\| SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT \|
	29	\| LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, \|
	30	\| DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY \|
	31	\| THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT \|
	32	\| (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE \|
	33	\| OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. \|
	34	\| \|
	35	+-----------------------------------------------------------------------+
	36	\| Author: Thomas Bruederli <roundcube@gmail.com> \|
	37	+-----------------------------------------------------------------------+
	38
	39	$Id$
	40
	41	*/
15a9d1	42
f11541	43	// application constants
23b870	44	define('RCMAIL_VERSION', '0.1-trunk');
f11541	45	define('RCMAIL_CHARSET', 'UTF-8');
T	46	define('JS_OBJECT_NAME', 'rcmail');
15a9d1	47
4e17e6	48	// define global vars
T	49	$OUTPUT_TYPE = 'html';
321302	50	$INSTALL_PATH = dirname(__FILE__);
8c2e58	51	$MAIN_TASKS = array('mail','settings','addressbook','logout');
4e17e6	52
7cc38e	53	if (empty($INSTALL_PATH))
T	54	$INSTALL_PATH = './';
	55	else
	56	$INSTALL_PATH .= '/';
bac7d1	57
T	58
	59	// make sure path_separator is defined
	60	if (!defined('PATH_SEPARATOR'))
	61	define('PATH_SEPARATOR', (eregi('win', PHP_OS) ? ';' : ':'));
	62
	63
d7cb77	64	// RC include folders MUST be included FIRST to avoid other
S	65	// possible not compatible libraries (i.e PEAR) to be included
	66	// instead the ones provided by RC
7cc38e	67	ini_set('include_path', $INSTALL_PATH.PATH_SEPARATOR.$INSTALL_PATH.'program'.PATH_SEPARATOR.$INSTALL_PATH.'program/lib'.PATH_SEPARATOR.ini_get('include_path'));
d7cb77	68
234c0d	69	ini_set('session.name', 'roundcube_sessid');
4e17e6	70	ini_set('session.use_cookies', 1);
977a29	71	ini_set('session.gc_maxlifetime', 21600);
T	72	ini_set('session.gc_divisor', 500);
	73	ini_set('error_reporting', E_ALL&~E_NOTICE);
969cef	74	set_magic_quotes_runtime(0);
4e17e6	75
T	76	// increase maximum execution time for php scripts
00fd33	77	// (does not work in safe mode)
024797	78	if (!ini_get('safe_mode')) @set_time_limit(120);
4e17e6	79
T	80	// include base files
	81	require_once('include/rcube_shared.inc');
	82	require_once('include/rcube_imap.inc');
	83	require_once('include/bugs.inc');
	84	require_once('include/main.inc');
7902df	85	require_once('PEAR.php');
T	86
	87
	88	// set PEAR error handling
	89	// PEAR::setErrorHandling(PEAR_ERROR_TRIGGER, E_USER_NOTICE);
4e17e6	90
T	91
	92	// catch some url/post parameters
e34ae1	93	$_task = strip_quotes(get_input_value('_task', RCUBE_INPUT_GPC));
T	94	$_action = strip_quotes(get_input_value('_action', RCUBE_INPUT_GPC));
597170	95	$_framed = (!empty($_GET['_framed']) \|\| !empty($_POST['_framed']));
42b113	96
e34ae1	97	// use main task if empty or invalid value
T	98	if (empty($_task) \|\| !in_array($_task, $MAIN_TASKS))
03f855	99	$_task = 'mail';
T	100
2f2f15	101
T	102	// set output buffering
	103	if ($_action != 'get' && $_action != 'viewsource')
f11541	104	{
2f2f15	105	// use gzip compression if supported
8d3e2a	106	if (function_exists('ob_gzhandler') && !ini_get('zlib.output_compression'))
2f2f15	107	ob_start('ob_gzhandler');
T	108	else
	109	ob_start();
f11541	110	}
2f2f15	111
42b113	112
4e17e6	113	// start session with requested task
T	114	rcmail_startup($_task);
	115
	116	// set session related variables
bac7d1	117	$COMM_PATH = sprintf('./?_task=%s', $_task);
T	118	$SESS_HIDDEN_FIELD = '';
4e17e6	119
T	120
	121	// add framed parameter
597170	122	if ($_framed)
f11541	123	{
T	124	$COMM_PATH .= '&_framed=1';
ccfda8	125	$SESS_HIDDEN_FIELD .= "\n".'<input type="hidden" name="_framed" value="1" />';
f11541	126	}
4e17e6	127
T	128
	129	// init necessary objects for GUI
f11541	130	rcmail_load_gui();
4e17e6	131
8affba	132
T	133	// check DB connections and exit on failure
	134	if ($err_str = $DB->is_error())
f11541	135	{
T	136	raise_error(array(
	137	'code' => 603,
	138	'type' => 'db',
	139	'message' => $err_str), FALSE, TRUE);
	140	}
8affba	141
T	142
4e17e6	143	// error steps
597170	144	if ($_action=='error' && !empty($_GET['_code']))
4e17e6	145	raise_error(array('code' => hexdec($_GET['_code'])), FALSE, TRUE);
570f0b	146
S	147
4e17e6	148	// try to log in
T	149	if ($_action=='login' && $_task=='mail')
f11541	150	{
0a020c	151	$host = rcmail_autoselect_host();
4e17e6	152
T	153	// check if client supports cookies
597170	154	if (empty($_COOKIE))
f11541	155	{
T	156	$OUTPUT->show_message("cookiesdisabled", 'warning');
	157	}
f15c26	158	else if ($_SESSION['temp'] && !empty($_POST['_user']) && isset($_POST['_pass']) &&
0a020c	159	rcmail_login(get_input_value('_user', RCUBE_INPUT_POST),
T	160	get_input_value('_pass', RCUBE_INPUT_POST, true, 'ISO-8859-1'), $host))
f11541	161	{
aad6e2	162	// create new session ID
T	163	unset($_SESSION['temp']);
	164	sess_regenerate_id();
	165
	166	// send auth cookie if necessary
	167	rcmail_authenticate_session();
	168
4e17e6	169	// send redirect
T	170	header("Location: $COMM_PATH");
	171	exit;
	172	}
f11541	173	else
T	174	{
fc6725	175	$OUTPUT->show_message($IMAP->error_code == -1 ? 'imaperror' : 'loginfailed', 'warning');
b9183e	176	rcmail_kill_session();
f11541	177	}
T	178	}
4e17e6	179
T	180	// end session
f11541	181	else if (($_task=='logout' \|\| $_action=='logout') && isset($_SESSION['user_id']))
T	182	{
	183	$OUTPUT->show_message('loggedout');
4e17e6	184	rcmail_kill_session();
f11541	185	}
4e17e6	186
bac7d1	187	// check session and auth cookie
86958f	188	else if ($_action != 'login' && $_SESSION['user_id'] && $_action != 'send')
f11541	189	{
aad6e2	190	if (!rcmail_authenticate_session())
f11541	191	{
T	192	$OUTPUT->show_message('sessionerror', 'error');
4e17e6	193	rcmail_kill_session();
T	194	}
f11541	195	}
4e17e6	196
T	197
	198	// log in to imap server
fba1f5	199	if (!empty($USER->ID) && $_task=='mail')
f11541	200	{
7902df	201	$conn = $IMAP->connect($_SESSION['imap_host'], $_SESSION['username'], decrypt_passwd($_SESSION['password']), $_SESSION['imap_port'], $_SESSION['imap_ssl']);
4e17e6	202	if (!$conn)
f11541	203	{
fc6725	204	$OUTPUT->show_message($IMAP->error_code == -1 ? 'imaperror' : 'sessionerror', 'error');
b9183e	205	rcmail_kill_session();
f11541	206	}
7902df	207	else
T	208	rcmail_set_imap_prop();
f11541	209	}
4e17e6	210
T	211
	212	// not logged in -> set task to 'login
fba1f5	213	if (empty($USER->ID))
f11541	214	{
T	215	if ($OUTPUT->ajax_call)
	216	$OUTPUT->remote_response("setTimeout(\"location.href='\"+this.env.comm_path+\"'\", 2000);");
42b113	217
4e17e6	218	$_task = 'login';
f11541	219	}
4e17e6	220
T	221
719a25	222	// check client X-header to verify request origin
T	223	if ($OUTPUT->ajax_call)
	224	{
88f66e	225	if (empty($CONFIG['devel_mode']) && !rc_request_header('X-RoundCube-Referer'))
719a25	226	{
T	227	header('HTTP/1.1 404 Not Found');
	228	die("Invalid Request");
	229	}
	230	}
	231
4e17e6	232
597170	233	// set task and action to client
f11541	234	$OUTPUT->set_env('task', $_task);
4e17e6	235	if (!empty($_action))
f11541	236	$OUTPUT->set_env('action', $_action);
4e17e6	237
T	238
	239
	240	// not logged in -> show login page
fba1f5	241	if (empty($USER->ID))
f11541	242	{
330127	243	// check if installer is still active
0714b7	244	if (!$CONFIG['installer_disable_warning'] && is_readable('./installer/index.php'))
330127	245	$OUTPUT->add_footer('
T	246	<div style="background:#ef9398; border:2px solid #dc5757; padding:0.5em; margin:2em auto; width:50em">
	247	<h2 style="margin-top:0.2em">Installer script is still accessible</h2>
	248	<p>The install script of your RoundCube installation is still stored in its default location!</p>
	249	<p>Please <b>remove</b> the whole <tt>installer</tt> folder from the RoundCube directory because
	250	these files may expose sensitive configuration data like server passwords and encryption keys
	251	to the public. Make sure you cannot access the <a href="./installer/">installer script</a> from your browser.</p>
	252	</div>');
	253
f11541	254	$OUTPUT->task = 'login';
T	255	$OUTPUT->send('login');
4e17e6	256	exit;
f11541	257	}
4e17e6	258
T	259
1cded8	260	// handle keep-alive signal
T	261	if ($_action=='keep-alive')
f11541	262	{
T	263	$OUTPUT->reset();
	264	$OUTPUT->send('');
1cded8	265	exit;
f11541	266	}
4e17e6	267
T	268	// include task specific files
	269	if ($_task=='mail')
f11541	270	{
4e17e6	271	include_once('program/steps/mail/func.inc');
88375f	272
b19097	273	if ($_action=='show' \|\| $_action=='preview' \|\| $_action=='print')
4e17e6	274	include('program/steps/mail/show.inc');
T	275
	276	if ($_action=='get')
	277	include('program/steps/mail/get.inc');
	278
	279	if ($_action=='moveto' \|\| $_action=='delete')
	280	include('program/steps/mail/move_del.inc');
	281
	282	if ($_action=='mark')
	283	include('program/steps/mail/mark.inc');
	284
	285	if ($_action=='viewsource')
	286	include('program/steps/mail/viewsource.inc');
	287
fba1f5	288	if ($_action=='sendmdn')
T	289	include('program/steps/mail/sendmdn.inc');
	290
4e17e6	291	if ($_action=='send')
T	292	include('program/steps/mail/sendmail.inc');
	293
	294	if ($_action=='upload')
	295	include('program/steps/mail/upload.inc');
	296
4315b0	297	if ($_action=='compose' \|\| $_action=='remove-attachment' \|\| $_action=='display-attachment')
4e17e6	298	include('program/steps/mail/compose.inc');
T	299
	300	if ($_action=='addcontact')
	301	include('program/steps/mail/addcontact.inc');
15a9d1	302
5e3512	303	if ($_action=='expunge' \|\| $_action=='purge')
15a9d1	304	include('program/steps/mail/folders.inc');
T	305
	306	if ($_action=='check-recent')
	307	include('program/steps/mail/check_recent.inc');
	308
	309	if ($_action=='getunread')
	310	include('program/steps/mail/getunread.inc');
4e17e6	311
8d0758	312	if ($_action=='list' && isset($_REQUEST['_remote']))
4e17e6	313	include('program/steps/mail/list.inc');
T	314
4647e1	315	if ($_action=='search')
dd53e2	316	include('program/steps/mail/search.inc');
T	317
	318	if ($_action=='spell')
	319	include('program/steps/mail/spell.inc');
4647e1	320
88375f	321	if ($_action=='rss')
T	322	include('program/steps/mail/rss.inc');
3ea0e3	323
23796e	324	if ($_action=='quotadisplay')
S	325	include('program/steps/mail/quotadisplay.inc');
	326
aade7b	327
01c86f	328	// make sure the message count is refreshed
T	329	$IMAP->messagecount($_SESSION['mbox'], 'ALL', TRUE);
f11541	330	}
4e17e6	331
T	332
	333	// include task specific files
	334	if ($_task=='addressbook')
f11541	335	{
4e17e6	336	include_once('program/steps/addressbook/func.inc');
T	337
	338	if ($_action=='save')
	339	include('program/steps/addressbook/save.inc');
	340
	341	if ($_action=='edit' \|\| $_action=='add')
	342	include('program/steps/addressbook/edit.inc');
	343
	344	if ($_action=='delete')
	345	include('program/steps/addressbook/delete.inc');
	346
	347	if ($_action=='show')
	348	include('program/steps/addressbook/show.inc');
	349
8d0758	350	if ($_action=='list' && $_REQUEST['_remote'])
4e17e6	351	include('program/steps/addressbook/list.inc');
d1d2c4	352
f11541	353	if ($_action=='search')
T	354	include('program/steps/addressbook/search.inc');
	355
	356	if ($_action=='copy')
	357	include('program/steps/addressbook/copy.inc');
	358
	359	if ($_action=='mailto')
	360	include('program/steps/addressbook/mailto.inc');
	361	}
4e17e6	362
T	363
	364	// include task specific files
	365	if ($_task=='settings')
f11541	366	{
4e17e6	367	include_once('program/steps/settings/func.inc');
T	368
	369	if ($_action=='save-identity')
	370	include('program/steps/settings/save_identity.inc');
	371
	372	if ($_action=='add-identity' \|\| $_action=='edit-identity')
	373	include('program/steps/settings/edit_identity.inc');
	374
	375	if ($_action=='delete-identity')
	376	include('program/steps/settings/delete_identity.inc');
	377
	378	if ($_action=='identities')
	379	include('program/steps/settings/identities.inc');
	380
	381	if ($_action=='save-prefs')
	382	include('program/steps/settings/save_prefs.inc');
	383
aade7b	384	if ($_action=='folders' \|\| $_action=='subscribe' \|\| $_action=='unsubscribe' \|\|
T	385	$_action=='create-folder' \|\| $_action=='rename-folder' \|\| $_action=='delete-folder')
4e17e6	386	include('program/steps/settings/manage_folders.inc');
T	387
f11541	388	}
ecf759	389
T	390
539cd4	391	// parse main template
f11541	392	$OUTPUT->send($_task);
539cd4	393
T	394
	395	// if we arrive here, something went wrong
f11541	396	raise_error(array(
T	397	'code' => 404,
	398	'type' => 'php',
	399	'line' => __LINE__,
	400	'file' => __FILE__,
	401	'message' => "Invalid request"), TRUE, TRUE);
539cd4	402
d1d2c4	403	?>