* removed check.php (security issue)

* added check.php-dist * new in check(.php-dist): smtp check, prettyfied errors
author: till <till@php.net> 2008-02-11 23:21:15 +0000
committer: till <till@php.net> 2008-02-11 23:21:15 +0000
commit: 19881691bdef7beba3b9ed41049dab9b6f856f93 (patch)
tree: 08b2dbe6e808cc50275ef04a4a030f0a243ed113
parent: ddbdb8516b470a1451ea0d72647e3be44b50b330 (diff)
1 files changed, 134 insertions, 16 deletions
diff --git a/check.php b/check.php-dist
index 4378f17a7..d1f3e295e 100644
--- a/check.php
+++ b/check.php-dist
@@ -37,6 +37,20 @@
  * @todo     Check SMTP settings.
  * @todo     HTML/CSS to make it pretty.
  * @todo     In devel-next, use bootstrap.
+ * @todo     Refactor to use RoundCube classes.
+ */
+
+$rctest_config         = array();
+$rctest_config['from'] = '_yourfrom_';
+
+/*
+ ********************************************
+ ********************************************
+ ** Don't edit anything else in this file. **
+ ** Unless (of course) you know what you   **
+ ** are doing.                             **
+ ********************************************
+ ********************************************
  */
 
 $include_path  = dirname(__FILE__) . '/program/lib/';
@@ -52,15 +66,34 @@ $create_files  = array('config/db.inc.php', 'config/main.inc.php');
 
 $path = dirname(__FILE__) . '/';
 ?>
-<html>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/2002/REC-xhtml1-20020801/DTD/xhtml1-transitional.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
 <head>
     <link rel="shortcut icon" href="skins/default/images/favicon.ico"/>
     <link rel="stylesheet" type="text/css" href="skins/default/common.css" />
+    <style type="text/css">
+    /* <![CDATA[ */
+    label { display:block; }
+    .success { color:#006400;font-weight:bold !important; }
+    .fail { color:#ff0000 !important;font-weight:bold !important; }
+    /* ]]> */
+    </style>
     <title>RoundCube :: check</title>
 </head>
 <body>
 <img src="skins/default/images/roundcube_logo.png" width="165" height="55" border="0" alt="RoundCube Webmail" hspace="12" vspace="2"/>
 
+<h3>Check <?php echo basename(__FILE__); ?> Configuration</h3>
+From correctly set:
+<?php
+if ($rctest_config['from'] == '_yourfrom_') {
+    echo '<span class="fail">NOT OK</span></span>';
+} else {
+    echo $rctest_config['from'] . '<br /><br />';
+    echo '<i>We do not check if this is a <b>valid</b> email address. Since this serves as from &amp; to, make sure it is correct!</i>';
+}
+?>
+<br />
 <?php
 echo '<h3>Check if directories are writable</h3>';
 echo '<p>RoundCube may need to write/save files into these directories.</p>';
@@ -68,9 +101,9 @@ echo '<p>RoundCube may need to write/save files into these directories.</p>';
 foreach ($writable_dirs AS $dir) {
     echo "Directory $dir: ";
     if (!is_writable($path . $dir)) {
-        echo 'NOT OK';
+        echo '<span class="fail">NOT OK</span></span>';
     } else {
-        echo 'OK';
+        echo '<span class="success">OK</span>';
     }
     echo "<br />";
 }
@@ -81,9 +114,9 @@ echo '<p>Checks if the files exist and if they are readable.</p>';
 foreach ($create_files AS $file) {
     echo "File $file: ";
     if (file_exists($path . $file) && is_readable($path . $file)) {
-        echo 'OK';
+        echo '<span class="success">OK</span>';
     } else {
-        echo 'NOT OK';
+        echo '<span class="fail">NOT OK</span></span>';
     }
     echo '<br />';
 }
@@ -97,11 +130,11 @@ if (isset($rcmail_config)) {
     include_once 'MDB2.php';
     $db = MDB2::connect($rcmail_config['db_dsnw']);
     if (!MDB2::IsError($db)) {
-        echo 'OK';
+        echo '<span class="success">OK</span>';
         $db->disconnect();
         $db_working = true;
     } else {
-        echo 'NOT OK';
+        echo '<span class="fail">NOT OK</span></span>';
     }
     echo '<br />';
 } else {
@@ -124,9 +157,9 @@ if ($db_working === true) {
     $tz_diff  = $tz_local - $tz_db;
 
     if ($tz_db != $tz_local) {
-        echo 'NOT OK';
+        echo '<span class="fail">NOT OK</span></span>';
     } else {
-        echo 'OK';
+        echo '<span class="success">OK</span>';
     }
 } else {
     echo 'Could not test (fix DB first).';
@@ -141,18 +174,18 @@ $file_uploads = ini_get('file_uploads');
 echo '<h4>session.auto_start = 0</h4>';
 echo 'status: ';
 if ($auto_start == 1) {
-    echo 'NOT OK';
+    echo '<span class="fail">NOT OK</span></span>';
 } else {
-    echo 'OK';
+    echo '<span class="success">OK</span>';
 }
 echo '<br />';
 
 echo '<h4>file_uploads = On</h4>';
 echo 'status: ';
 if ($file_uploads == 1) {
-    echo 'OK';
+    echo '<span class="success">OK</span>';
 } else {
-    echo 'NOT OK';
+    echo '<span class="fail">NOT OK</span></span>';
 }
 
 /*
@@ -161,9 +194,9 @@ echo '<h4>session.save_path <i>is set</i></h4>';
 echo 'status: ';
 $save_path = ini_get('session.save_path');
 if (empty($save_path)) {
-    echo 'NOT OK';
+    echo '<span class="fail">NOT OK</span></span>';
 } else {
-    echo "OK: $save_path";
+    echo "<span class="success">OK</span>: $save_path";
     if (!file_exists($save_path)) {
         echo ', but it does not exist';
     } else {
@@ -174,6 +207,91 @@ if (empty($save_path)) {
 }
 echo '<br />';
  */
+
+@include_once $path . '/config/main.inc.php';
+?>
+<h3>Check email settings</h3>
+<h4>SMTP Settings</h4>
+<?php
+echo 'Fetch config from config/main.inc.php: ';
+if (is_array($rcmail_config) && count($rcmail_config)) {
+    echo '<span class="success">OK</span><br />';
+    echo 'server: ' . $rcmail_config['smtp_server'] . '<br />';
+    echo 'port: ' . $rcmail_config['smtp_port'] . '<br />';
+    echo 'user: ' . (($rcmail_config['smtp_user'] == '%u')?'<i>use current session</i>':$rcmail_config['smtp_user']) . '<br />';
+    echo 'pass: ' . (($rcmail_config['smtp_pass'] == '%p')?'<i>use current session</i>':$rcmail_config['smtp_pass']) . '<br />';
+    //var_dump($rcmail_config);
+?>
+<h3>Test SMTP settings - send an email</h3>
+<p>Don't abuse this!</p>
+<form action="check.php" method="post">
+<?php
+if ($rcmail_config['smtp_server'] != ''):
+    if ($rcmail_config['smtp_user'] == '%u'):
+?>
+<label>Username:</label><input type="text" name="smtp_test[user]" />
+<label>Passwort:</label><input type="text" name="smtp_test[pass]" /><br />
+<?php
+    endif;
+endif;
+?>
+Recipient:<br />
+<?php echo $rctest_config['from']; ?><br /><br />
+<input type="submit" value="send an email" />
+</form>
+<?php
+    if ($_SERVER['REQUEST_METHOD'] == 'POST') {
+
+        echo 'Trying to send email: ';
+        if ($rctest_config['from'] == '_yourfrom_') {
+            echo '<span class="fail">NOT OK</span></span><br />';
+            echo '<i>Please edit $rctest_config in ' . basename(__FILE__) . '</i><br />';
+        } else {
+
+            $data = $_POST['smtp_test'];
+
+            require_once 'Mail.php';
+
+            $recipients = $rctest_config['from'];
+
+            $headers['From']    = $rctest_config['from'];
+            $headers['To']      = $recipients;
+            $headers['Subject'] = 'Test message from RoundCube';
+
+            $body = 'This is a test to confirm that RoundCube can send email.';
+
+            $params      = array();
+            $mail_driver = '';
+
+            if ($rcmail_config['smtp_server'] != '') {
+                $mail_driver = 'smtp';
+
+                if (isset($data['user'])) {
+                    $params['username'] = $data['user'];
+                    $params['password'] = $data['pass'];
+                    $params['auth']     = true;
+                }
+
+                $params['host'] = $rcmail_config['smtp_server'];
+                $params['port'] = $rcmail_config['smtp_port'];
+
+            } else {
+                $mail_driver = 'mail';
+            }
+
+            $mail_object =& Mail::factory($mail_driver, $params);
+            $status = $mail_object->send($recipients, $headers, $body);
+            if (!PEAR::isError($status)) {
+                echo '<span class="success">OK</span><br />';
+            } else {
+                echo '<span class="fail">NOT OK</span></span>';
+                echo '<br />' . $status->getMessage();
+            }
+        }
+    }
+} else {
+    echo '<span class="fail">NOT OK</span></span>';
+}
 ?>
 </body>
-</html>
+</html>
+\ No newline at end of file
author	till <till@php.net>	2008-02-11 23:21:15 +0000
committer	till <till@php.net>	2008-02-11 23:21:15 +0000
commit	19881691bdef7beba3b9ed41049dab9b6f856f93 (patch)
tree	08b2dbe6e808cc50275ef04a4a030f0a243ed113
parent	ddbdb8516b470a1451ea0d72647e3be44b50b330 (diff)