| | |
| | | /* |
| | | +-------------------------------------------------------------------------+ |
| | | | RoundCube Webmail IMAP Client | |
| | | | Version 0.2-20080620 | |
| | | | Version 0.3-20090419 | |
| | | | | |
| | | | Copyright (C) 2005-2008, RoundCube Dev. - Switzerland | |
| | | | Copyright (C) 2005-2009, RoundCube Dev. - Switzerland | |
| | | | | |
| | | | This program is free software; you can redistribute it and/or modify | |
| | | | it under the terms of the GNU General Public License version 2 | |
| | |
| | | // include environment |
| | | require_once 'program/include/iniset.php'; |
| | | |
| | | // define global vars |
| | | $OUTPUT_TYPE = 'html'; |
| | | |
| | | // init application and start session with requested task |
| | | $RCMAIL = rcmail::get_instance(); |
| | | |
| | | // init output class |
| | | $OUTPUT = !empty($_REQUEST['_remote']) ? $RCMAIL->init_json() : $RCMAIL->load_gui(!empty($_REQUEST['_framed'])); |
| | | |
| | | // init plugin API |
| | | $RCMAIL->plugins->init(); |
| | | |
| | | // set output buffering |
| | | if ($RCMAIL->action != 'get' && $RCMAIL->action != 'viewsource') { |
| | |
| | | ob_start(); |
| | | } |
| | | } |
| | | |
| | | |
| | | // check if config files had errors |
| | | if ($err_str = $RCMAIL->config->get_error()) { |
| | |
| | | 'message' => $err_str), FALSE, TRUE); |
| | | } |
| | | |
| | | |
| | | // error steps |
| | | if ($RCMAIL->action=='error' && !empty($_GET['_code'])) { |
| | | raise_error(array('code' => hexdec($_GET['_code'])), FALSE, TRUE); |
| | | } |
| | | |
| | | |
| | | // trigger startup plugin hook |
| | | $startup = $RCMAIL->plugins->exec_hook('startup', array('task' => $RCMAIL->task, 'action' => $RCMAIL->action)); |
| | | $RCMAIL->set_task($startup['task']); |
| | | $RCMAIL->action = $startup['action']; |
| | | |
| | | |
| | | // try to log in |
| | | if ($RCMAIL->action=='login' && $RCMAIL->task=='mail') { |
| | | $host = $RCMAIL->autoselect_host(); |
| | | // purge the session in case of new login when a session already exists |
| | | $RCMAIL->kill_session(); |
| | | |
| | | $auth = $RCMAIL->plugins->exec_hook('authenticate', array( |
| | | 'host' => $RCMAIL->autoselect_host(), |
| | | 'user' => trim(get_input_value('_user', RCUBE_INPUT_POST)), |
| | | )) + array('pass' => get_input_value('_pass', RCUBE_INPUT_POST, true, 'ISO-8859-1')); |
| | | |
| | | // check if client supports cookies |
| | | if (empty($_COOKIE)) { |
| | | $OUTPUT->show_message("cookiesdisabled", 'warning'); |
| | | } |
| | | else if ($_SESSION['temp'] && !empty($_POST['_user']) && isset($_POST['_pass']) && |
| | | $RCMAIL->login(trim(get_input_value('_user', RCUBE_INPUT_POST), ' '), |
| | | get_input_value('_pass', RCUBE_INPUT_POST, true, 'ISO-8859-1'), $host)) { |
| | | else if ($_SESSION['temp'] && !empty($auth['user']) && !empty($auth['host']) && isset($auth['pass']) && |
| | | $RCMAIL->login($auth['user'], $auth['pass'], $auth['host'])) { |
| | | // create new session ID |
| | | unset($_SESSION['temp']); |
| | | rcube_sess_unset('temp'); |
| | | rcube_sess_regenerate_id(); |
| | | |
| | | // send auth cookie if necessary |
| | | $RCMAIL->authenticate_session(); |
| | | |
| | | // log successful login |
| | | if ($RCMAIL->config->get('log_logins') && $RCMAIL->config->get('debug_level') & 1) |
| | | console(sprintf('Successful login for %s (id %d) from %s', |
| | | trim(get_input_value('_user', RCUBE_INPUT_POST), ' '), |
| | | $_SESSION['user_id'], |
| | | $_SERVER['REMOTE_ADDR'])); |
| | | if ($RCMAIL->config->get('log_logins')) { |
| | | write_log('userlogins', sprintf('Successful login for %s (id %d) from %s', |
| | | $RCMAIL->user->get_username(), |
| | | $RCMAIL->user->ID, |
| | | $_SERVER['REMOTE_ADDR'])); |
| | | } |
| | | |
| | | // restore original request parameters |
| | | $query = array(); |
| | | if ($url = get_input_value('_url', RCUBE_INPUT_POST)) |
| | | parse_str($url, $query); |
| | | |
| | | // allow plugins to control the redirect url after login success |
| | | $redir = $RCMAIL->plugins->exec_hook('login_after', $query + array('task' => $RCMAIL->task)); |
| | | unset($redir['abort']); |
| | | |
| | | // send redirect |
| | | $OUTPUT->redirect(); |
| | | $OUTPUT->redirect($redir); |
| | | } |
| | | else { |
| | | $OUTPUT->show_message($IMAP->error_code == -1 ? 'imaperror' : 'loginfailed', 'warning'); |
| | | $OUTPUT->show_message($IMAP->error_code < -1 ? 'imaperror' : 'loginfailed', 'warning'); |
| | | $RCMAIL->plugins->exec_hook('login_failed', array('code' => $IMAP->error_code, 'host' => $auth['host'], 'user' => $auth['user'])); |
| | | $RCMAIL->kill_session(); |
| | | } |
| | | } |
| | |
| | | } |
| | | |
| | | |
| | | // log in to imap server |
| | | if (!empty($RCMAIL->user->ID) && $RCMAIL->task == 'mail') { |
| | | if (!$RCMAIL->imap_connect()) { |
| | | $RCMAIL->kill_session(); |
| | | } |
| | | } |
| | | |
| | | |
| | | // check client X-header to verify request origin |
| | | if ($OUTPUT->ajax_call) { |
| | | if ($RCMAIL->config->get('devel_mode') && !rc_request_header('X-RoundCube-Referer')) { |
| | | if (!$RCMAIL->config->get('devel_mode') && !rc_request_header('X-RoundCube-Referer')) { |
| | | header('HTTP/1.1 404 Not Found'); |
| | | die("Invalid Request"); |
| | | } |
| | |
| | | |
| | | |
| | | // handle keep-alive signal |
| | | if ($RCMAIL->action=='keep-alive') { |
| | | if ($RCMAIL->action == 'keep-alive') { |
| | | $OUTPUT->reset(); |
| | | $OUTPUT->send(); |
| | | } |
| | | // save preference value |
| | | else if ($RCMAIL->action == 'save-pref') { |
| | | $RCMAIL->user->save_prefs(array(get_input_value('_name', RCUBE_INPUT_POST) => get_input_value('_value', RCUBE_INPUT_POST))); |
| | | $OUTPUT->reset(); |
| | | $OUTPUT->send(); |
| | | } |
| | |
| | | 'send' => 'sendmail.inc', |
| | | 'expunge' => 'folders.inc', |
| | | 'purge' => 'folders.inc', |
| | | 'remove-attachment' => 'compose.inc', |
| | | 'display-attachment' => 'compose.inc', |
| | | 'remove-attachment' => 'attachments.inc', |
| | | 'display-attachment' => 'attachments.inc', |
| | | 'upload' => 'attachments.inc', |
| | | ), |
| | | |
| | | 'addressbook' => array( |
| | |
| | | while ($redirects < 5) { |
| | | $stepfile = !empty($action_map[$RCMAIL->task][$RCMAIL->action]) ? |
| | | $action_map[$RCMAIL->task][$RCMAIL->action] : strtr($RCMAIL->action, '-', '_') . '.inc'; |
| | | |
| | | |
| | | // execute a plugin action |
| | | if (eregi('^plugin.', $RCMAIL->action)) { |
| | | $RCMAIL->plugins->exec_action($RCMAIL->action); |
| | | break; |
| | | } |
| | | // try to include the step file |
| | | if (is_file(($incfile = 'program/steps/'.$RCMAIL->task.'/'.$stepfile))) { |
| | | else if (is_file(($incfile = 'program/steps/'.$RCMAIL->task.'/'.$stepfile))) { |
| | | include($incfile); |
| | | $redirects++; |
| | | } |
| | |
| | | } |
| | | } |
| | | |
| | | |
| | | // make sure the message count is refreshed (for default view) |
| | | if ($RCMAIL->task == 'mail') { |
| | | $IMAP->messagecount($_SESSION['mbox'], 'ALL', true); |
| | | } |
| | | |
| | | // parse main template (default) |
| | | $OUTPUT->send($RCMAIL->task); |