| +-----------------------------------------------------------------------+ $Id$ */ // define global vars $INSTALL_PATH = './'; $OUTPUT_TYPE = 'html'; $JS_OBJECT_NAME = 'rcmail'; // set environment first ini_set('include_path', ini_get('include_path').PATH_SEPARATOR.$INSTALL_PATH.PATH_SEPARATOR.'program'.PATH_SEPARATOR.'program/lib'); ini_set('session.name', 'sessid'); ini_set('session.use_cookies', 1); ini_set('error_reporting', E_ALL&~E_NOTICE); //ini_set('session.save_path', $INSTALL_PATH.'session'); // increase maximum execution time for php scripts set_time_limit('120'); // include base files require_once('include/rcube_shared.inc'); require_once('include/rcube_imap.inc'); require_once('include/rcube_db.inc'); require_once('include/bugs.inc'); require_once('include/main.inc'); require_once('include/cache.inc'); // catch some url/post parameters $_auth = !empty($_POST['_auth']) ? $_POST['_auth'] : $_GET['_auth']; $_task = !empty($_POST['_task']) ? $_POST['_task'] : (!empty($_GET['_task']) ? $_GET['_task'] : 'mail'); $_action = !empty($_POST['_action']) ? $_POST['_action'] : (!empty($_GET['_action']) ? $_GET['_action'] : ''); $_framed = (!empty($_GET['_framed']) || !empty($_POST['_framed'])); if (!empty($_GET['_remote'])) $REMOTE_REQUEST = TRUE; // start session with requested task rcmail_startup($_task); // set session related variables $COMM_PATH = sprintf('./?_auth=%s&_task=%s', $sess_auth, $_task); $SESS_HIDDEN_FIELD = sprintf('', $sess_auth); // add framed parameter if ($_framed) { $COMM_PATH .= '&_framed=1'; $SESS_HIDDEN_FIELD = "\n".''; } // init necessary objects for GUI load_gui(); // error steps if ($_action=='error' && !empty($_GET['_code'])) { raise_error(array('code' => hexdec($_GET['_code'])), FALSE, TRUE); } // try to log in if ($_action=='login' && $_task=='mail') { $host = $_POST['_host'] ? $_POST['_host'] : $CONFIG['default_host']; // check if client supports cookies if (empty($_COOKIE)) { show_message("cookiesdisabled", 'warning'); } else if (isset($_POST['_user']) && isset($_POST['_pass']) && rcmail_login($_POST['_user'], $_POST['_pass'], $host)) { // send redirect header("Location: $COMM_PATH"); exit; } else { show_message("loginfailed", 'warning'); $_SESSION['user_id'] = ''; } } // end session else if ($_action=='logout' && $_SESSION['user_id']) { show_message('loggedout'); rcmail_kill_session(); } // check session cookie and auth string else if ($_action!='login' && $_auth && $sess_auth) { if ($_auth !== $sess_auth || $_auth != rcmail_auth_hash($_SESSION['client_id'], $_SESSION['auth_time'])) { $message = show_message('sessionerror', 'error'); rcmail_kill_session(); } } // log in to imap server if (!empty($_SESSION['user_id']) && $_task=='mail') { $conn = $IMAP->connect($_SESSION['imap_host'], $_SESSION['username'], decrypt_passwd($_SESSION['password'])); if (!$conn) { show_message('imaperror', 'error'); $_SESSION['user_id'] = ''; } } // not logged in -> set task to 'login if (empty($_SESSION['user_id'])) { if ($REMOTE_REQUEST) { $message .= "setTimeout(\"location.href='\"+this.env.comm_path+\"'\", 2000);"; rcube_remote_response($message); } $_task = 'login'; } // set task and action to client $script = sprintf("%s.set_env('task', '%s');", $JS_OBJECT_NAME, $_task); if (!empty($_action)) $script .= sprintf("\n%s.set_env('action', '%s');", $JS_OBJECT_NAME, $_action); $OUTPUT->add_script($script); // not logged in -> show login page if (!$_SESSION['user_id']) { parse_template('login'); exit; } // include task specific files if ($_task=='mail') { include_once('program/steps/mail/func.inc'); if ($_action=='show' || $_action=='print') include('program/steps/mail/show.inc'); if ($_action=='get') include('program/steps/mail/get.inc'); if ($_action=='moveto' || $_action=='delete') include('program/steps/mail/move_del.inc'); if ($_action=='mark') include('program/steps/mail/mark.inc'); if ($_action=='viewsource') include('program/steps/mail/viewsource.inc'); if ($_action=='send') include('program/steps/mail/sendmail.inc'); if ($_action=='upload') include('program/steps/mail/upload.inc'); if ($_action=='compose') include('program/steps/mail/compose.inc'); if ($_action=='addcontact') include('program/steps/mail/addcontact.inc'); if ($_action=='list' && $_GET['_remote']) include('program/steps/mail/list.inc'); // kill compose entry from session if (isset($_SESSION['compose'])) rcmail_compose_cleanup(); } // include task specific files if ($_task=='addressbook') { include_once('program/steps/addressbook/func.inc'); if ($_action=='save') include('program/steps/addressbook/save.inc'); if ($_action=='edit' || $_action=='add') include('program/steps/addressbook/edit.inc'); if ($_action=='delete') include('program/steps/addressbook/delete.inc'); if ($_action=='show') include('program/steps/addressbook/show.inc'); if ($_action=='list' && $_GET['_remote']) include('program/steps/addressbook/list.inc'); } // include task specific files if ($_task=='settings') { include_once('program/steps/settings/func.inc'); if ($_action=='save-identity') include('program/steps/settings/save_identity.inc'); if ($_action=='add-identity' || $_action=='edit-identity') include('program/steps/settings/edit_identity.inc'); if ($_action=='delete-identity') include('program/steps/settings/delete_identity.inc'); if ($_action=='identities') include('program/steps/settings/identities.inc'); if ($_action=='save-prefs') include('program/steps/settings/save_prefs.inc'); if ($_action=='folders' || $_action=='subscribe' || $_action=='unsubscribe' || $_action=='create-folder' || $_action=='delete-folder') include('program/steps/settings/manage_folders.inc'); } // only allow these templates to be included $valid_tasks = array('mail','settings','addressbook'); // parse main template if (in_array($_task, $valid_tasks)) parse_template($_task); // if we arrive here, something went wrong raise_error(array('code' => 404, 'type' => 'php', 'line' => __LINE__, 'file' => __FILE__, 'message' => "Invalid request"), TRUE, TRUE); ?>