source: subversion/trunk/roundcubemail/index.php @ 223

Last change on this file since 223 was 223, checked in by roundcube, 7 years ago

Check for zlib.output_compression before using ob_gzhandler
  • Property svn:eol-style set to native
  • Property svn:keywords set to Author Date Id Revision
File size: 10.8 KB
Line 
1<?php
2/*
3 +-----------------------------------------------------------------------+
4 | RoundCube Webmail IMAP Client                                         |
5 | Version 0.1-20060505                                                  |
6 |                                                                       |
7 | Copyright (C) 2005, RoundCube Dev. - Switzerland                      |
8 | Licensed under the GNU GPL                                            |
9 |                                                                       |
10 | Redistribution and use in source and binary forms, with or without    |
11 | modification, are permitted provided that the following conditions    |
12 | are met:                                                              |
13 |                                                                       |
14 | o Redistributions of source code must retain the above copyright      |
15 |   notice, this list of conditions and the following disclaimer.       |
16 | o Redistributions in binary form must reproduce the above copyright   |
17 |   notice, this list of conditions and the following disclaimer in the |
18 |   documentation and/or other materials provided with the distribution.|
19 | o The names of the authors may not be used to endorse or promote      |
20 |   products derived from this software without specific prior written  |
21 |   permission.                                                         |
22 |                                                                       |
23 | THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS   |
24 | "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT     |
25 | LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR |
26 | A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT  |
27 | OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, |
28 | SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT      |
29 | LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, |
30 | DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY |
31 | THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT   |
32 | (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE |
33 | OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.  |
34 |                                                                       |
35 +-----------------------------------------------------------------------+
36 | Author: Thomas Bruederli <roundcube@gmail.com>                        |
37 +-----------------------------------------------------------------------+
38
39 $Id$
40
41*/
42
43define('RCMAIL_VERSION', '0.1-20060505');
44
45// define global vars
46$CHARSET = 'UTF-8';
47$OUTPUT_TYPE = 'html';
48$JS_OBJECT_NAME = 'rcmail';
49$INSTALL_PATH = dirname($_SERVER['SCRIPT_FILENAME']);
50$MAIN_TASKS = array('mail','settings','addressbook','logout');
51
52if (empty($INSTALL_PATH))
53  $INSTALL_PATH = './';
54else
55  $INSTALL_PATH .= '/';
56       
57// RC include folders MUST be included FIRST to avoid other
58// possible not compatible libraries (i.e PEAR) to be included
59// instead the ones provided by RC
60ini_set('include_path', $INSTALL_PATH.PATH_SEPARATOR.$INSTALL_PATH.'program'.PATH_SEPARATOR.$INSTALL_PATH.'program/lib'.PATH_SEPARATOR.ini_get('include_path'));
61
62ini_set('session.name', 'sessid');
63ini_set('session.use_cookies', 1);
64ini_set('session.gc_maxlifetime', 21600);
65ini_set('session.gc_divisor', 500);
66ini_set('error_reporting', E_ALL&~E_NOTICE); 
67
68// increase maximum execution time for php scripts
69// (does not work in safe mode)
70@set_time_limit(120);
71
72// include base files
73require_once('include/rcube_shared.inc');
74require_once('include/rcube_imap.inc');
75require_once('include/bugs.inc');
76require_once('include/main.inc');
77require_once('include/cache.inc');
78require_once('PEAR.php');
79
80
81// set PEAR error handling
82// PEAR::setErrorHandling(PEAR_ERROR_TRIGGER, E_USER_NOTICE);
83
84// use gzip compression if supported
85if (function_exists('ob_gzhandler') && !ini_get('zlib.output_compression'))
86  ob_start('ob_gzhandler');
87
88
89// catch some url/post parameters
90$_auth = get_input_value('_auth', RCUBE_INPUT_GPC);
91$_task = get_input_value('_task', RCUBE_INPUT_GPC);
92$_action = get_input_value('_action', RCUBE_INPUT_GPC);
93$_framed = (!empty($_GET['_framed']) || !empty($_POST['_framed']));
94
95if (empty($_task))
96  $_task = 'mail';
97
98if (!empty($_GET['_remote']))
99  $REMOTE_REQUEST = TRUE;
100
101// start session with requested task
102rcmail_startup($_task);
103
104// set session related variables
105$COMM_PATH = sprintf('./?_auth=%s&_task=%s', $sess_auth, $_task);
106$SESS_HIDDEN_FIELD = sprintf('<input type="hidden" name="_auth" value="%s" />', $sess_auth);
107
108
109// add framed parameter
110if ($_framed)
111  {
112  $COMM_PATH .= '&_framed=1';
113  $SESS_HIDDEN_FIELD .= "\n".'<input type="hidden" name="_framed" value="1" />';
114  }
115
116
117// init necessary objects for GUI
118load_gui();
119
120
121// check DB connections and exit on failure
122if ($err_str = $DB->is_error())
123  {
124  raise_error(array('code' => 500, 'type' => 'db', 'line' => __LINE__, 'file' => __FILE__,
125                    'message' => $err_str), FALSE, TRUE);
126  }
127
128
129// error steps
130if ($_action=='error' && !empty($_GET['_code']))
131  {
132  raise_error(array('code' => hexdec($_GET['_code'])), FALSE, TRUE);
133  }
134
135
136// try to log in
137if ($_action=='login' && $_task=='mail')
138  {
139  $host = $_POST['_host'] ? $_POST['_host'] : $CONFIG['default_host'];
140 
141  // check if client supports cookies
142  if (empty($_COOKIE))
143    {
144    show_message("cookiesdisabled", 'warning');
145    }
146  else if (isset($_POST['_user']) && isset($_POST['_pass']) &&
147           rcmail_login(get_input_value('_user', RCUBE_INPUT_POST),
148                        get_input_value('_pass', RCUBE_INPUT_POST),
149                        $host))
150    {
151    // send redirect
152    header("Location: $COMM_PATH");
153    exit;
154    }
155  else
156    {
157    show_message("loginfailed", 'warning');
158    $_SESSION['user_id'] = '';
159    }
160  }
161
162// end session
163else if ($_action=='logout' && isset($_SESSION['user_id']))
164  {
165  show_message('loggedout');
166  rcmail_kill_session();
167  }
168
169// check session cookie and auth string
170else if ($_action!='login' && $sess_auth && $_SESSION['user_id'])
171  {
172  if ($_auth !== $sess_auth || $_auth != rcmail_auth_hash($_SESSION['client_id'], $_SESSION['auth_time']) ||
173      ($CONFIG['session_lifetime'] && isset($SESS_CHANGED) && $SESS_CHANGED + $CONFIG['session_lifetime']*60 < mktime()))
174    {
175    $message = show_message('sessionerror', 'error');
176    rcmail_kill_session();
177    }
178  }
179
180
181// log in to imap server
182if (!empty($_SESSION['user_id']) && $_task=='mail')
183  {
184  $conn = $IMAP->connect($_SESSION['imap_host'], $_SESSION['username'], decrypt_passwd($_SESSION['password']), $_SESSION['imap_port'], $_SESSION['imap_ssl']);
185  if (!$conn)
186    {
187    show_message('imaperror', 'error');
188    $_SESSION['user_id'] = '';
189    }
190  else
191    rcmail_set_imap_prop();
192  }
193
194
195// not logged in -> set task to 'login
196if (empty($_SESSION['user_id']))
197  {
198  if ($REMOTE_REQUEST)
199    {
200    $message .= "setTimeout(\"location.href='\"+this.env.comm_path+\"'\", 2000);";
201    rcube_remote_response($message);
202    }
203 
204  $_task = 'login';
205  }
206
207
208
209// set task and action to client
210$script = sprintf("%s.set_env('task', '%s');", $JS_OBJECT_NAME, $_task);
211if (!empty($_action))
212  $script .= sprintf("\n%s.set_env('action', '%s');", $JS_OBJECT_NAME, $_action);
213
214$OUTPUT->add_script($script);
215
216
217
218// not logged in -> show login page
219if (!$_SESSION['user_id'])
220  {
221  parse_template('login');
222  exit;
223  }
224
225
226// handle keep-alive signal
227if ($_action=='keep-alive')
228  {
229  rcube_remote_response('');
230  exit;
231  }
232
233
234// include task specific files
235if ($_task=='mail')
236  {
237  include_once('program/steps/mail/func.inc');
238 
239  if ($_action=='show' || $_action=='print')
240    include('program/steps/mail/show.inc');
241
242  if ($_action=='get')
243    include('program/steps/mail/get.inc');
244
245  if ($_action=='moveto' || $_action=='delete')
246    include('program/steps/mail/move_del.inc');
247
248  if ($_action=='mark')
249    include('program/steps/mail/mark.inc');
250
251  if ($_action=='viewsource')
252    include('program/steps/mail/viewsource.inc');
253
254  if ($_action=='send')
255    include('program/steps/mail/sendmail.inc');
256
257  if ($_action=='upload')
258    include('program/steps/mail/upload.inc');
259
260  if ($_action=='compose')
261    include('program/steps/mail/compose.inc');
262
263  if ($_action=='addcontact')
264    include('program/steps/mail/addcontact.inc');
265
266  if ($_action=='expunge' || $_action=='purge')
267    include('program/steps/mail/folders.inc');
268
269  if ($_action=='check-recent')
270    include('program/steps/mail/check_recent.inc');
271
272  if ($_action=='getunread')
273    include('program/steps/mail/getunread.inc');
274   
275  if ($_action=='list' && isset($_GET['_remote']))
276    include('program/steps/mail/list.inc');
277
278   if ($_action=='search')
279     include('program/steps/mail/search.inc');
280     
281  if ($_action=='spell')
282    include('program/steps/mail/spell.inc');
283
284  if ($_action=='rss')
285    include('program/steps/mail/rss.inc');
286
287  // kill compose entry from session
288  if (isset($_SESSION['compose']))
289    rcmail_compose_cleanup();
290   
291  // make sure the message count is refreshed
292  $IMAP->messagecount($_SESSION['mbox'], 'ALL', TRUE);
293  }
294
295
296// include task specific files
297if ($_task=='addressbook')
298  {
299  include_once('program/steps/addressbook/func.inc');
300
301  if ($_action=='save')
302    include('program/steps/addressbook/save.inc');
303 
304  if ($_action=='edit' || $_action=='add')
305    include('program/steps/addressbook/edit.inc');
306 
307  if ($_action=='delete')
308    include('program/steps/addressbook/delete.inc');
309
310  if ($_action=='show')
311    include('program/steps/addressbook/show.inc'); 
312
313  if ($_action=='list' && $_GET['_remote'])
314    include('program/steps/addressbook/list.inc');
315
316  if ($_action=='ldappublicsearch')
317    include('program/steps/addressbook/ldapsearchform.inc');
318  }
319
320
321// include task specific files
322if ($_task=='settings')
323  {
324  include_once('program/steps/settings/func.inc');
325
326  if ($_action=='save-identity')
327    include('program/steps/settings/save_identity.inc');
328
329  if ($_action=='add-identity' || $_action=='edit-identity')
330    include('program/steps/settings/edit_identity.inc');
331
332  if ($_action=='delete-identity')
333    include('program/steps/settings/delete_identity.inc');
334 
335  if ($_action=='identities')
336    include('program/steps/settings/identities.inc'); 
337
338  if ($_action=='save-prefs')
339    include('program/steps/settings/save_prefs.inc'); 
340
341  if ($_action=='folders' || $_action=='subscribe' || $_action=='unsubscribe' || $_action=='create-folder' || $_action=='delete-folder')
342    include('program/steps/settings/manage_folders.inc');
343
344  }
345
346
347// parse main template
348// only allow these templates to be included
349if (in_array($_task, $MAIN_TASKS))
350  parse_template($_task);
351
352
353// if we arrive here, something went wrong
354raise_error(array('code' => 404,
355                  'type' => 'php',
356                  'line' => __LINE__,
357                  'file' => __FILE__,
358                  'message' => "Invalid request"), TRUE, TRUE);
359                     
360?>
Note: See TracBrowser for help on using the repository browser.