| | |
| | | // check client |
| | | $BROWSER = rcube_browser(); |
| | | |
| | | // load config file |
| | | include_once('config/main.inc.php'); |
| | | $CONFIG = is_array($rcmail_config) ? $rcmail_config : array(); |
| | | |
| | | // load host-specific configuration |
| | | rcmail_load_host_config($CONFIG); |
| | | |
| | | $CONFIG['skin_path'] = $CONFIG['skin_path'] ? unslashify($CONFIG['skin_path']) : 'skins/default'; |
| | | |
| | | // load db conf |
| | | include_once('config/db.inc.php'); |
| | | $CONFIG = array_merge($CONFIG, $rcmail_config); |
| | | |
| | | if (empty($CONFIG['log_dir'])) |
| | | $CONFIG['log_dir'] = $INSTALL_PATH.'logs'; |
| | | else |
| | | $CONFIG['log_dir'] = unslashify($CONFIG['log_dir']); |
| | | |
| | | // set PHP error logging according to config |
| | | if ($CONFIG['debug_level'] & 1) |
| | | { |
| | | ini_set('log_errors', 1); |
| | | ini_set('error_log', $CONFIG['log_dir'].'/errors'); |
| | | } |
| | | if ($CONFIG['debug_level'] & 4) |
| | | ini_set('display_errors', 1); |
| | | else |
| | | ini_set('display_errors', 0); |
| | | |
| | | // load configuration |
| | | $CONFIG = rcmail_load_config(); |
| | | |
| | | // set session garbage collecting time according to session_lifetime |
| | | if (!empty($CONFIG['session_lifetime'])) |
| | | ini_set('session.gc_maxlifetime', ($CONFIG['session_lifetime']+2)*60); |
| | | |
| | | ini_set('session.gc_maxlifetime', ($CONFIG['session_lifetime']) * 120); |
| | | |
| | | // prepare DB connection |
| | | require_once('include/rcube_'.(empty($CONFIG['db_backend']) ? 'db' : $CONFIG['db_backend']).'.inc'); |
| | |
| | | $DB = new rcube_db($CONFIG['db_dsnw'], $CONFIG['db_dsnr'], $CONFIG['db_persistent']); |
| | | $DB->sqlite_initials = $INSTALL_PATH.'SQL/sqlite.initial.sql'; |
| | | $DB->db_connect('w'); |
| | | |
| | | |
| | | // we can use the database for storing session data |
| | | if (!$DB->is_error()) |
| | | include_once('include/session.inc'); |
| | |
| | | } |
| | | |
| | | |
| | | // load roundcube configuration into global var |
| | | function rcmail_load_config() |
| | | { |
| | | global $INSTALL_PATH; |
| | | |
| | | // load config file |
| | | include_once('config/main.inc.php'); |
| | | $conf = is_array($rcmail_config) ? $rcmail_config : array(); |
| | | |
| | | // load host-specific configuration |
| | | rcmail_load_host_config($conf); |
| | | |
| | | $conf['skin_path'] = $conf['skin_path'] ? unslashify($conf['skin_path']) : 'skins/default'; |
| | | |
| | | // load db conf |
| | | include_once('config/db.inc.php'); |
| | | $conf = array_merge($conf, $rcmail_config); |
| | | |
| | | if (empty($conf['log_dir'])) |
| | | $conf['log_dir'] = $INSTALL_PATH.'logs'; |
| | | else |
| | | $conf['log_dir'] = unslashify($conf['log_dir']); |
| | | |
| | | // set PHP error logging according to config |
| | | if ($conf['debug_level'] & 1) |
| | | { |
| | | ini_set('log_errors', 1); |
| | | ini_set('error_log', $conf['log_dir'].'/errors'); |
| | | } |
| | | if ($conf['debug_level'] & 4) |
| | | ini_set('display_errors', 1); |
| | | else |
| | | ini_set('display_errors', 0); |
| | | |
| | | return $conf; |
| | | } |
| | | |
| | | |
| | | // load a host-specific config file if configured |
| | | function rcmail_load_host_config(&$config) |
| | | { |
| | |
| | | function rcmail_authenticate_session() |
| | | { |
| | | $now = mktime(); |
| | | $valid = ($_COOKIE['sessauth'] == rcmail_auth_hash(session_id(), $_SESSION['auth_time'])); |
| | | $valid = ($_COOKIE['sessauth'] == rcmail_auth_hash(session_id(), $_SESSION['auth_time']) || |
| | | $_COOKIE['sessauth'] == rcmail_auth_hash(session_id(), $_SESSION['last_auth'])); |
| | | |
| | | // renew auth cookie every 5 minutes (only for GET requests) |
| | | if (!$valid || ($_SERVER['REQUEST_METHOD']!='POST' && $now-$_SESSION['auth_time'] > 300)) |
| | | { |
| | | $_SESSION['last_auth'] = $_SESSION['auth_time']; |
| | | $_SESSION['auth_time'] = $now; |
| | | setcookie('sessauth', rcmail_auth_hash(session_id(), $now)); |
| | | } |
| | | |
| | | |
| | | if (!$valid) |
| | | write_log('timeouts', |
| | | "REQUEST: " . var_export($_REQUEST, true) . |
| | | "\nEXPECTED: " . rcmail_auth_hash(session_id(), $_SESSION['auth_time']) . |
| | | "\nOR LAST: " . rcmail_auth_hash(session_id(), $_SESSION['last_auth']) . |
| | | "\nSESSION: " . var_export($_SESSION, true)); |
| | | |
| | | return $valid; |
| | | } |
| | | |
| | |
| | | |
| | | // add common javascripts |
| | | $javascript = "var $JS_OBJECT_NAME = new rcube_webmail();\n"; |
| | | $javascript .= "$JS_OBJECT_NAME.set_env('comm_path', '$COMM_PATH');\n"; |
| | | $javascript .= sprintf("%s.set_env('comm_path', '%s');\n", $JS_OBJECT_NAME, str_replace('&', '&', $COMM_PATH)); |
| | | |
| | | if (isset($CONFIG['javascript_config'] )){ |
| | | foreach ($CONFIG['javascript_config'] as $js_config_var){ |
| | | $javascript .= "$JS_OBJECT_NAME.set_env('$js_config_var', '" . $CONFIG[$js_config_var] . "');\n"; |
| | | } |
| | | } |
| | | |
| | | |
| | | // don't wait for page onload. Call init at the bottom of the page (delayed) |
| | | $javascript_foot = "if (window.call_init)\n call_init('$JS_OBJECT_NAME');"; |
| | | |
| | | if (!empty($GLOBALS['_framed'])) |
| | | $javascript .= "$JS_OBJECT_NAME.set_env('framed', true);\n"; |
| | | |
| | | $OUTPUT->add_script($javascript); |
| | | $OUTPUT->add_script($javascript, 'head'); |
| | | $OUTPUT->add_script($javascript_foot, 'foot'); |
| | | $OUTPUT->include_script('common.js'); |
| | | $OUTPUT->include_script('app.js'); |
| | | $OUTPUT->scripts_path = 'program/js/'; |
| | |
| | | |
| | | if ($user_id = $DB->insert_id(get_sequence_name('users'))) |
| | | { |
| | | $mail_domain = $host; |
| | | if (is_array($CONFIG['mail_domain'])) |
| | | { |
| | | if (isset($CONFIG['mail_domain'][$host])) |
| | | $mail_domain = $CONFIG['mail_domain'][$host]; |
| | | } |
| | | else if (!empty($CONFIG['mail_domain'])) |
| | | $mail_domain = $CONFIG['mail_domain']; |
| | | $mail_domain = rcmail_mail_domain($host); |
| | | |
| | | if ($user_email=='') |
| | | $user_email = strstr($user, '@') ? $user : sprintf('%s@%s', $user, $mail_domain); |
| | |
| | | $user_name = $user!=$user_email ? $user : ''; |
| | | |
| | | // try to resolve the e-mail address from the virtuser table |
| | | if (!empty($CONFIG['virtuser_query'])) |
| | | { |
| | | $sql_result = $DB->query(preg_replace('/%u/', $user, $CONFIG['virtuser_query'])); |
| | | if ($sql_arr = $DB->fetch_array($sql_result)) |
| | | $user_email = $sql_arr[0]; |
| | | if (!empty($CONFIG['virtuser_query']) && |
| | | ($sql_result = $DB->query(preg_replace('/%u/', $user, $CONFIG['virtuser_query']))) && |
| | | ($DB->num_rows()>0)) |
| | | while ($sql_arr = $DB->fetch_array($sql_result)) |
| | | { |
| | | $DB->query("INSERT INTO ".get_table_name('identities')." |
| | | (user_id, del, standard, name, email) |
| | | VALUES (?, 0, 1, ?, ?)", |
| | | $user_id, |
| | | $user_name, |
| | | preg_replace('/^@/', $user . '@', $sql_arr[0])); |
| | | } |
| | | else |
| | | { |
| | | // also create new identity records |
| | | $DB->query("INSERT INTO ".get_table_name('identities')." |
| | | (user_id, del, standard, name, email) |
| | | VALUES (?, 0, 1, ?, ?)", |
| | | $user_id, |
| | | $user_name, |
| | | $user_email); |
| | | } |
| | | |
| | | // also create new identity records |
| | | $DB->query("INSERT INTO ".get_table_name('identities')." |
| | | (user_id, del, standard, name, email) |
| | | VALUES (?, 0, 1, ?, ?)", |
| | | $user_id, |
| | | $user_name, |
| | | $user_email); |
| | | |
| | | |
| | | // get existing mailboxes |
| | | $a_mailboxes = $IMAP->list_mailboxes(); |
| | |
| | | } |
| | | |
| | | |
| | | // remove temp files of a session |
| | | function rcmail_clear_session_temp($sess_id) |
| | | // remove temp files older than two day |
| | | function rcmail_temp_gc() |
| | | { |
| | | global $CONFIG; |
| | | $tmp = unslashify($CONFIG['temp_dir']); |
| | | $expire = mktime() - 172800; // expire in 48 hours |
| | | |
| | | $temp_dir = slashify($CONFIG['temp_dir']); |
| | | $cache_dir = $temp_dir.$sess_id; |
| | | |
| | | if (is_dir($cache_dir)) |
| | | if ($dir = opendir($tmp)) |
| | | { |
| | | clear_directory($cache_dir); |
| | | rmdir($cache_dir); |
| | | } |
| | | while (($fname = readdir($dir)) !== false) |
| | | { |
| | | if ($fname{0} == '.') |
| | | continue; |
| | | |
| | | if (filemtime($tmp.'/'.$fname) < $expire) |
| | | @unlink($tmp.'/'.$fname); |
| | | } |
| | | |
| | | closedir($dir); |
| | | } |
| | | } |
| | | |
| | | |
| | |
| | | $from = strtoupper($from); |
| | | $to = $to==NULL ? strtoupper($GLOBALS['CHARSET']) : strtoupper($to); |
| | | |
| | | if ($from==$to || $str=='') |
| | | if ($from==$to || $str=='' || empty($from)) |
| | | return $str; |
| | | |
| | | // convert charset using mbstring module |
| | |
| | | |
| | | // convert string to UTF-8 |
| | | if ($from=='UTF-7') |
| | | $str = rcube_charset_convert(UTF7DecodeString($str), 'ISO-8859-1'); |
| | | $str = utf7_to_utf8($str); |
| | | else if (($from=='ISO-8859-1') && function_exists('utf8_encode')) |
| | | $str = utf8_encode($str); |
| | | else if ($from!='UTF-8') |
| | |
| | | |
| | | // encode string for output |
| | | if ($to=='UTF-7') |
| | | return UTF7EncodeString(rcube_charset_convert($str, 'UTF-8', 'ISO-8859-1')); |
| | | return utf8_to_utf7($str); |
| | | else if ($to=='ISO-8859-1' && function_exists('utf8_decode')) |
| | | return utf8_decode($str); |
| | | else if ($to!='UTF-8') |
| | |
| | | } |
| | | else if ($mode=='remove') |
| | | $str = strip_tags($str); |
| | | |
| | | $out = strtr($str, $encode_arr); |
| | | |
| | | // avoid douple quotation of & |
| | | $out = preg_replace('/&([a-z]{2,5});/', '&\\1;', strtr($str, $encode_arr)); |
| | | |
| | | return $newlines ? nl2br($out) : $out; |
| | | } |
| | |
| | | return $value; |
| | | } |
| | | |
| | | |
| | | /** |
| | | * Remove single and double quotes from given string |
| | | */ |
| | | function strip_quotes($str) |
| | | { |
| | | return preg_replace('/[\'"]/', '', $str); |
| | | } |
| | | |
| | | |
| | | // ************** template parsing and gui functions ************** |
| | |
| | | 'composeattachment' => 'rcmail_compose_attachment_field', |
| | | 'priorityselector' => 'rcmail_priority_selector', |
| | | 'charsetselector' => 'rcmail_charset_selector', |
| | | 'editorselector' => 'rcmail_editor_selector', |
| | | 'searchform' => 'rcmail_search_form', |
| | | 'receiptcheckbox' => 'rcmail_receipt_checkbox', |
| | | |
| | |
| | | if ($attrib['type']) |
| | | $attrib['type'] = strtolower($attrib['type']); |
| | | else |
| | | $attrib['type'] = ($attrib['image'] || $attrib['imagepas'] || $arg['imageact']) ? 'image' : 'link'; |
| | | |
| | | $attrib['type'] = ($attrib['image'] || $attrib['imagepas'] || $attrib['imageact']) ? 'image' : 'link'; |
| | | |
| | | $command = $attrib['command']; |
| | | |
| | |
| | | $attrib = $sa_buttons[$attrib['name']]; |
| | | |
| | | // add button to button stack |
| | | else if($attrib['image'] || $arg['imageact'] || $attrib['imagepas'] || $attrib['class']) |
| | | else if($attrib['image'] || $attrib['imageact'] || $attrib['imagepas'] || $attrib['class']) |
| | | { |
| | | if(!$attrib['name']) |
| | | $attrib['name'] = $command; |
| | |
| | | } |
| | | |
| | | |
| | | |
| | | /** |
| | | * Create an edit field for inclusion on a form |
| | | * |
| | | * @param string col field name |
| | | * @param string value field value |
| | | * @param array attrib HTML element attributes for field |
| | | * @param string type HTML element type (default 'text') |
| | | * @return string HTML field definition |
| | | */ |
| | | function rcmail_get_edit_field($col, $value, $attrib, $type='text') |
| | | { |
| | | $fname = '_'.$col; |
| | |
| | | } |
| | | |
| | | |
| | | // return the mail domain configured for the given host |
| | | function rcmail_mail_domain($host) |
| | | { |
| | | global $CONFIG; |
| | | |
| | | $domain = $host; |
| | | if (is_array($CONFIG['mail_domain'])) |
| | | { |
| | | if (isset($CONFIG['mail_domain'][$host])) |
| | | $domain = $CONFIG['mail_domain'][$host]; |
| | | } |
| | | else if (!empty($CONFIG['mail_domain'])) |
| | | $domain = $CONFIG['mail_domain']; |
| | | |
| | | return $domain; |
| | | } |
| | | |
| | | |
| | | // return code for the webmail login form |
| | | function rcmail_login_form($attrib) |
| | | { |
| | |
| | | function write_log($name, $line) |
| | | { |
| | | global $CONFIG; |
| | | |
| | | if (!is_string($line)) |
| | | $line = var_export($line, true); |
| | | |
| | | $log_entry = sprintf("[%s]: %s\n", |
| | | date("d-M-Y H:i:s O", mktime()), |