| | |
| | | /* |
| | | +-------------------------------------------------------------------------+ |
| | | | RoundCube Webmail IMAP Client | |
| | | | Version 0.2-20080829 | |
| | | | Version 0.3-20090419 | |
| | | | | |
| | | | Copyright (C) 2005-2008, RoundCube Dev. - Switzerland | |
| | | | Copyright (C) 2005-2009, RoundCube Dev. - Switzerland | |
| | | | | |
| | | | This program is free software; you can redistribute it and/or modify | |
| | | | it under the terms of the GNU General Public License version 2 | |
| | |
| | | // init output class |
| | | $OUTPUT = !empty($_REQUEST['_remote']) ? $RCMAIL->init_json() : $RCMAIL->load_gui(!empty($_REQUEST['_framed'])); |
| | | |
| | | // init plugin API |
| | | $RCMAIL->plugins->init(); |
| | | |
| | | // set output buffering |
| | | if ($RCMAIL->action != 'get' && $RCMAIL->action != 'viewsource') { |
| | | // use gzip compression if supported |
| | |
| | | ob_start(); |
| | | } |
| | | } |
| | | |
| | | |
| | | // check if config files had errors |
| | | if ($err_str = $RCMAIL->config->get_error()) { |
| | |
| | | 'message' => $err_str), FALSE, TRUE); |
| | | } |
| | | |
| | | |
| | | // error steps |
| | | if ($RCMAIL->action=='error' && !empty($_GET['_code'])) { |
| | | raise_error(array('code' => hexdec($_GET['_code'])), FALSE, TRUE); |
| | | } |
| | | |
| | | |
| | | // trigger startup plugin hook |
| | | $startup = $RCMAIL->plugins->exec_hook('startup', array('task' => $RCMAIL->task, 'action' => $RCMAIL->action)); |
| | | $RCMAIL->set_task($startup['task']); |
| | | $RCMAIL->action = $startup['action']; |
| | | |
| | | |
| | | // try to log in |
| | | if ($RCMAIL->action=='login' && $RCMAIL->task=='mail') { |
| | | $host = $RCMAIL->autoselect_host(); |
| | | // purge the session in case of new login when a session already exists |
| | | $RCMAIL->kill_session(); |
| | | |
| | | $auth = $RCMAIL->plugins->exec_hook('authenticate', array( |
| | | 'host' => $RCMAIL->autoselect_host(), |
| | | 'user' => trim(get_input_value('_user', RCUBE_INPUT_POST)), |
| | | )) + array('pass' => get_input_value('_pass', RCUBE_INPUT_POST, true, 'ISO-8859-1')); |
| | | |
| | | // check if client supports cookies |
| | | if (empty($_COOKIE)) { |
| | | $OUTPUT->show_message("cookiesdisabled", 'warning'); |
| | | } |
| | | else if ($_SESSION['temp'] && !empty($_POST['_user']) && isset($_POST['_pass']) && |
| | | $RCMAIL->login(trim(get_input_value('_user', RCUBE_INPUT_POST), ' '), |
| | | get_input_value('_pass', RCUBE_INPUT_POST, true, 'ISO-8859-1'), $host)) { |
| | | else if ($_SESSION['temp'] && !empty($auth['user']) && !empty($auth['host']) && isset($auth['pass']) && |
| | | $RCMAIL->login($auth['user'], $auth['pass'], $auth['host'])) { |
| | | // create new session ID |
| | | unset($_SESSION['temp']); |
| | | rcube_sess_unset('temp'); |
| | | rcube_sess_regenerate_id(); |
| | | |
| | | // send auth cookie if necessary |
| | |
| | | $RCMAIL->user->ID, |
| | | $_SERVER['REMOTE_ADDR'])); |
| | | } |
| | | |
| | | // restore original request parameters |
| | | $query = array(); |
| | | if ($url = get_input_value('_url', RCUBE_INPUT_POST)) |
| | | parse_str($url, $query); |
| | | |
| | | // allow plugins to control the redirect url after login success |
| | | $redir = $RCMAIL->plugins->exec_hook('login_after', $query + array('task' => $RCMAIL->task)); |
| | | unset($redir['abort']); |
| | | |
| | | // send redirect |
| | | $OUTPUT->redirect(); |
| | | $OUTPUT->redirect($redir); |
| | | } |
| | | else { |
| | | $OUTPUT->show_message($IMAP->error_code == -1 ? 'imaperror' : 'loginfailed', 'warning'); |
| | | $OUTPUT->show_message($IMAP->error_code < -1 ? 'imaperror' : 'loginfailed', 'warning'); |
| | | $RCMAIL->plugins->exec_hook('login_failed', array('code' => $IMAP->error_code, 'host' => $auth['host'], 'user' => $auth['user'])); |
| | | $RCMAIL->kill_session(); |
| | | } |
| | | } |
| | |
| | | else if ($RCMAIL->action != 'login' && $_SESSION['user_id'] && $RCMAIL->action != 'send') { |
| | | if (!$RCMAIL->authenticate_session()) { |
| | | $OUTPUT->show_message('sessionerror', 'error'); |
| | | $RCMAIL->kill_session(); |
| | | } |
| | | } |
| | | |
| | | |
| | | // log in to imap server |
| | | if (!empty($RCMAIL->user->ID) && $RCMAIL->task == 'mail') { |
| | | if (!$RCMAIL->imap_connect()) { |
| | | $RCMAIL->kill_session(); |
| | | } |
| | | } |
| | |
| | | 'send' => 'sendmail.inc', |
| | | 'expunge' => 'folders.inc', |
| | | 'purge' => 'folders.inc', |
| | | 'remove-attachment' => 'compose.inc', |
| | | 'display-attachment' => 'compose.inc', |
| | | 'remove-attachment' => 'attachments.inc', |
| | | 'display-attachment' => 'attachments.inc', |
| | | 'upload' => 'attachments.inc', |
| | | ), |
| | | |
| | | 'addressbook' => array( |
| | |
| | | while ($redirects < 5) { |
| | | $stepfile = !empty($action_map[$RCMAIL->task][$RCMAIL->action]) ? |
| | | $action_map[$RCMAIL->task][$RCMAIL->action] : strtr($RCMAIL->action, '-', '_') . '.inc'; |
| | | |
| | | |
| | | // execute a plugin action |
| | | if (eregi('^plugin.', $RCMAIL->action)) { |
| | | $RCMAIL->plugins->exec_action($RCMAIL->action); |
| | | break; |
| | | } |
| | | // try to include the step file |
| | | if (is_file(($incfile = 'program/steps/'.$RCMAIL->task.'/'.$stepfile))) { |
| | | else if (is_file(($incfile = 'program/steps/'.$RCMAIL->task.'/'.$stepfile))) { |
| | | include($incfile); |
| | | $redirects++; |
| | | } |
| | |
| | | } |
| | | } |
| | | |
| | | |
| | | // make sure the message count is refreshed (for default view) |
| | | if ($RCMAIL->task == 'mail') { |
| | | $IMAP->messagecount($_SESSION['mbox'], 'ALL', true); |
| | | } |
| | | |
| | | // parse main template (default) |
| | | $OUTPUT->send($RCMAIL->task); |