| | |
| | | /* |
| | | +-----------------------------------------------------------------------+ |
| | | | RoundCube Webmail IMAP Client | |
| | | | Version 0.1-20060104 | |
| | | | Version 0.1-20060718 | |
| | | | | |
| | | | Copyright (C) 2005, RoundCube Dev. - Switzerland | |
| | | | Licensed under the GNU GPL | |
| | |
| | | |
| | | */ |
| | | |
| | | define('RCMAIL_VERSION', '0.1-20060104'); |
| | | |
| | | define('RCMAIL_VERSION', '0.1-20060718'); |
| | | |
| | | // define global vars |
| | | $INSTALL_PATH = dirname($_SERVER['SCRIPT_FILENAME']); |
| | | $CHARSET = 'UTF-8'; |
| | | $OUTPUT_TYPE = 'html'; |
| | | $JS_OBJECT_NAME = 'rcmail'; |
| | | $CHARSET = 'UTF-8'; |
| | | $INSTALL_PATH = dirname(__FILE__); |
| | | $MAIN_TASKS = array('mail','settings','addressbook','logout'); |
| | | |
| | | if (empty($INSTALL_PATH)) |
| | | $INSTALL_PATH = './'; |
| | | else |
| | | $INSTALL_PATH .= '/'; |
| | | |
| | | |
| | | |
| | | // make sure path_separator is defined |
| | | if (!defined('PATH_SEPARATOR')) |
| | | define('PATH_SEPARATOR', (eregi('win', PHP_OS) ? ';' : ':')); |
| | | |
| | | |
| | | // RC include folders MUST be included FIRST to avoid other |
| | | // possible not compatible libraries (i.e PEAR) to be included |
| | | // instead the ones provided by RC |
| | |
| | | // set PEAR error handling |
| | | // PEAR::setErrorHandling(PEAR_ERROR_TRIGGER, E_USER_NOTICE); |
| | | |
| | | // use gzip compression if supported |
| | | if (function_exists('ob_gzhandler') && !ini_get('zlib.output_compression')) |
| | | ob_start('ob_gzhandler'); |
| | | else |
| | | ob_start(); |
| | | |
| | | |
| | | // catch some url/post parameters |
| | | $_auth = !empty($_POST['_auth']) ? $_POST['_auth'] : $_GET['_auth']; |
| | | $_task = !empty($_POST['_task']) ? $_POST['_task'] : (!empty($_GET['_task']) ? $_GET['_task'] : 'mail'); |
| | | $_action = !empty($_POST['_action']) ? $_POST['_action'] : (!empty($_GET['_action']) ? $_GET['_action'] : ''); |
| | | //$_auth = get_input_value('_auth', RCUBE_INPUT_GPC); |
| | | $_task = get_input_value('_task', RCUBE_INPUT_GPC); |
| | | $_action = get_input_value('_action', RCUBE_INPUT_GPC); |
| | | $_framed = (!empty($_GET['_framed']) || !empty($_POST['_framed'])); |
| | | |
| | | if (empty($_task)) |
| | | $_task = 'mail'; |
| | | |
| | | if (!empty($_GET['_remote'])) |
| | | $REMOTE_REQUEST = TRUE; |
| | |
| | | rcmail_startup($_task); |
| | | |
| | | // set session related variables |
| | | $COMM_PATH = sprintf('./?_auth=%s&_task=%s', $sess_auth, $_task); |
| | | $SESS_HIDDEN_FIELD = sprintf('<input type="hidden" name="_auth" value="%s" />', $sess_auth); |
| | | $COMM_PATH = sprintf('./?_task=%s', $_task); |
| | | $SESS_HIDDEN_FIELD = ''; |
| | | |
| | | |
| | | // add framed parameter |
| | |
| | | |
| | | // init necessary objects for GUI |
| | | load_gui(); |
| | | |
| | | |
| | | // check DB connections and exit on failure |
| | | if ($err_str = $DB->is_error()) |
| | | { |
| | | raise_error(array('code' => 500, 'type' => 'db', 'line' => __LINE__, 'file' => __FILE__, |
| | | 'message' => $err_str), FALSE, TRUE); |
| | | } |
| | | |
| | | |
| | | // error steps |
| | | if ($_action=='error' && !empty($_GET['_code'])) |
| | |
| | | { |
| | | show_message("cookiesdisabled", 'warning'); |
| | | } |
| | | else if (isset($_POST['_user']) && isset($_POST['_pass']) && rcmail_login($_POST['_user'], $_POST['_pass'], $host)) |
| | | else if (isset($_POST['_user']) && isset($_POST['_pass']) && |
| | | rcmail_login(get_input_value('_user', RCUBE_INPUT_POST), $_POST['_pass'], $host)) |
| | | { |
| | | // send redirect |
| | | header("Location: $COMM_PATH"); |
| | |
| | | rcmail_kill_session(); |
| | | } |
| | | |
| | | // check session cookie and auth string |
| | | else if ($_action!='login' && $sess_auth && $_SESSION['user_id']) |
| | | // check session and auth cookie |
| | | else if ($_action!='login' && $_SESSION['user_id']) |
| | | { |
| | | if ($_auth !== $sess_auth || $_auth != rcmail_auth_hash($_SESSION['client_id'], $_SESSION['auth_time']) || |
| | | if (!rcmail_authenticate_session() || |
| | | ($CONFIG['session_lifetime'] && isset($SESS_CHANGED) && $SESS_CHANGED + $CONFIG['session_lifetime']*60 < mktime())) |
| | | { |
| | | $message = show_message('sessionerror', 'error'); |
| | |
| | | if ($_task=='mail') |
| | | { |
| | | include_once('program/steps/mail/func.inc'); |
| | | |
| | | |
| | | if ($_action=='show' || $_action=='print') |
| | | include('program/steps/mail/show.inc'); |
| | | |
| | |
| | | if ($_action=='upload') |
| | | include('program/steps/mail/upload.inc'); |
| | | |
| | | if ($_action=='compose') |
| | | if ($_action=='compose' || $_action=='remove-attachment') |
| | | include('program/steps/mail/compose.inc'); |
| | | |
| | | if ($_action=='addcontact') |
| | | include('program/steps/mail/addcontact.inc'); |
| | | |
| | | if ($_action=='expunge') |
| | | if ($_action=='expunge' || $_action=='purge') |
| | | include('program/steps/mail/folders.inc'); |
| | | |
| | | if ($_action=='check-recent') |
| | |
| | | if ($_action=='getunread') |
| | | include('program/steps/mail/getunread.inc'); |
| | | |
| | | if ($_action=='list' && $_GET['_remote']) |
| | | if ($_action=='list' && isset($_GET['_remote'])) |
| | | include('program/steps/mail/list.inc'); |
| | | |
| | | if ($_action=='search') |
| | | include('program/steps/mail/search.inc'); |
| | | |
| | | if ($_action=='spell') |
| | | include('program/steps/mail/spell.inc'); |
| | | |
| | | if ($_action=='rss') |
| | | include('program/steps/mail/rss.inc'); |
| | | |
| | | // kill compose entry from session |
| | | if (isset($_SESSION['compose'])) |
| | | rcmail_compose_cleanup(); |
| | | |
| | | // make sure the message count is refreshed |
| | | $IMAP->messagecount($_SESSION['mbox'], 'ALL', TRUE); |
| | | } |
| | | |
| | | |
| | |
| | | if ($_action=='save-prefs') |
| | | include('program/steps/settings/save_prefs.inc'); |
| | | |
| | | if ($_action=='folders' || $_action=='subscribe' || $_action=='unsubscribe' || $_action=='create-folder' || $_action=='delete-folder') |
| | | if ($_action=='folders' || $_action=='subscribe' || $_action=='unsubscribe' || $_action=='create-folder' || $_action=='rename-folder' || $_action=='delete-folder') |
| | | include('program/steps/settings/manage_folders.inc'); |
| | | |
| | | } |
| | | |
| | | |
| | | // only allow these templates to be included |
| | | $valid_tasks = array('mail','settings','addressbook'); |
| | | |
| | | // parse main template |
| | | if (in_array($_task, $valid_tasks)) |
| | | // only allow these templates to be included |
| | | if (in_array($_task, $MAIN_TASKS)) |
| | | parse_template($_task); |
| | | |
| | | |