attachments.inc
No OneTemporary
Actions

Size

10 KB

Referenced Files

None

Subscribers

None

attachments.inc
View Options

	<?php

	/**
	+-----------------------------------------------------------------------+
	\| program/steps/mail/attachments.inc \|
	\| \|
	\| This file is part of the Roundcube Webmail client \|
	\| Copyright (C) 2005-2013, The Roundcube Dev Team \|
	\| \|
	\| Licensed under the GNU General Public License version 3 or \|
	\| any later version with exceptions for skins & plugins. \|
	\| See the README file for a full license statement. \|
	\| \|
	\| PURPOSE: \|
	\| Upload, remove, display attachments in compose form \|
	\| \|
	+-----------------------------------------------------------------------+
	\| Author: Thomas Bruederli <roundcube@gmail.com> \|
	+-----------------------------------------------------------------------+
	*/

	// Upload progress update
	if (!empty($_GET['_progress'])) {
	$RCMAIL->upload_progress();
	}

	$COMPOSE_ID = rcube_utils::get_input_value('_id', rcube_utils::INPUT_GPC);
	$COMPOSE = null;

	if ($COMPOSE_ID && $_SESSION['compose_data_' . $COMPOSE_ID]) {
	$SESSION_KEY = 'compose_data_' . $COMPOSE_ID;
	$COMPOSE =& $_SESSION[$SESSION_KEY];
	}

	if (!$COMPOSE) {
	die("Invalid session var!");
	}

	$file_id = rcube_utils::get_input_value('_file', rcube_utils::INPUT_GPC);
	$file_id = preg_replace('/^rcmfile/', '', $file_id) ?: 'unknown';

	// remove an attachment
	if ($RCMAIL->action == 'remove-attachment') {
	if ($attachment = $COMPOSE['attachments'][$file_id]) {
	$attachment = $RCMAIL->plugins->exec_hook('attachment_delete', $attachment);
	}

	if ($attachment['status']) {
	if (is_array($COMPOSE['attachments'][$file_id])) {
	$RCMAIL->session->remove($SESSION_KEY . '.attachments.' . $file_id);
	$OUTPUT->command('remove_from_attachment_list', "rcmfile$file_id");
	}
	}

	$OUTPUT->send();
	exit;
	}

	// rename an attachment
	if ($RCMAIL->action == 'rename-attachment') {
	$filename = rcube_utils::get_input_value('_name', rcube_utils::INPUT_POST);
	$filename = trim($filename);

	if (strlen($filename)
	&& ($attachment = $COMPOSE['attachments'][$file_id])
	&& is_array($attachment)
	) {
	$attachment['name'] = $filename;
	$RCMAIL->session->remove($SESSION_KEY . '.attachments. ' . $file_id);
	$RCMAIL->session->append($SESSION_KEY . '.attachments', $attachment['id'], $attachment);
	$OUTPUT->command('rename_attachment_handler', "rcmfile$file_id", $filename);
	}

	$OUTPUT->send();
	exit;
	}

	if ($RCMAIL->action == 'display-attachment') {
	$RCMAIL->display_uploaded_file($COMPOSE['attachments'][$file_id]);
	exit;
	}

	/*** attachment upload action ***/

	// clear all stored output properties (like scripts and env vars)
	$OUTPUT->reset();

	$uploadid = rcube_utils::get_input_value('_uploadid', rcube_utils::INPUT_GPC);
	$uri = rcube_utils::get_input_value('_uri', rcube_utils::INPUT_POST);

	// handle dropping a reference to an attachment part of some message
	if ($uri) {
	$url = parse_url($uri);
	parse_str($url['query'], $params);

	if (strlen($params['_mbox']) && $params['_uid'] && $params['_part']) {
	// @TODO: at some point we might support drag-n-drop between
	// two different accounts on the same server, for now make sure
	// this is the same server and the same user
	list($host, $port) = explode(':', $_SERVER['HTTP_HOST']);
	if ($host == $url['host'] && $port == $url['port']
	&& $RCMAIL->get_user_name() == rawurldecode($url['user'])
	) {
	$message = new rcube_message($params['_uid'], $params['_mbox']);

	if ($message && !empty($message->headers)) {
	$attachment = rcmail_save_attachment($message, $params['_part'], $COMPOSE_ID);
	}
	}
	}

	$plugin = $RCMAIL->plugins->exec_hook('attachment_from_uri', array(
	'attachment' => $attachment, 'uri' => $uri, 'compose_id' => $COMPOSE_ID));

	if ($plugin['attachment']) {
	rcmail_attachment_success($plugin['attachment'], $uploadid);
	}
	else {
	$OUTPUT->command('display_message', $RCMAIL->gettext('filelinkerror'), 'error');
	$OUTPUT->command('remove_from_attachment_list', $uploadid);
	}

	$OUTPUT->send();
	return;
	}

	// handle file(s) upload
	if (is_array($_FILES['_attachments']['tmp_name'])) {
	$multiple = count($_FILES['_attachments']['tmp_name']) > 1;
	$errors = array();

	foreach ($_FILES['_attachments']['tmp_name'] as $i => $filepath) {
	// Process uploaded attachment if there is no error
	$err = $_FILES['_attachments']['error'][$i];

	if (!$err) {
	$filename = $_FILES['_attachments']['name'][$i];
	$filesize = $_FILES['_attachments']['size'][$i];
	$filetype = rcube_mime::file_content_type($filepath, $filename, $_FILES['_attachments']['type'][$i]);

	if ($err = rcmail_check_message_size($filesize, $filetype)) {
	if (!in_array($err, $errors)) {
	$OUTPUT->command('display_message', $err, 'error');
	$OUTPUT->command('remove_from_attachment_list', $uploadid);
	$errors[] = $err;
	}
	continue;
	}

	$attachment = $RCMAIL->plugins->exec_hook('attachment_upload', array(
	'path' => $filepath,
	'name' => $filename,
	'size' => $filesize,
	'mimetype' => $filetype,
	'group' => $COMPOSE_ID,
	));
	}

	if (!$err && $attachment['status'] && !$attachment['abort']) {
	// store new attachment in session
	unset($attachment['status'], $attachment['abort']);
	$RCMAIL->session->append($SESSION_KEY . '.attachments', $attachment['id'], $attachment);

	rcmail_attachment_success($attachment, $uploadid);
	}
	else { // upload failed
	if ($err == UPLOAD_ERR_INI_SIZE \|\| $err == UPLOAD_ERR_FORM_SIZE) {
	$size = $RCMAIL->show_bytes(rcube_utils::max_upload_size());
	$msg = $RCMAIL->gettext(array('name' => 'filesizeerror', 'vars' => array('size' => $size)));
	}
	else if ($attachment['error']) {
	$msg = $attachment['error'];
	}
	else {
	$msg = $RCMAIL->gettext('fileuploaderror');
	}

	if ($attachment['error'] \|\| $err != UPLOAD_ERR_NO_FILE) {
	if (!in_array($msg, $errors)) {
	$OUTPUT->command('display_message', $msg, 'error');
	$OUTPUT->command('remove_from_attachment_list', $uploadid);
	$errors[] = $msg;
	}
	}
	}
	}
	}
	else if ($_SERVER['REQUEST_METHOD'] == 'POST') {
	// if filesize exceeds post_max_size then $_FILES array is empty,
	// show filesizeerror instead of fileuploaderror
	if ($maxsize = ini_get('post_max_size')) {
	$msg = $RCMAIL->gettext(array(
	'name' => 'filesizeerror',
	'vars' => array('size' => $RCMAIL->show_bytes(parse_bytes($maxsize)))
	));
	}
	else {
	$msg = $RCMAIL->gettext('fileuploaderror');
	}

	$OUTPUT->command('display_message', $msg, 'error');
	$OUTPUT->command('remove_from_attachment_list', $uploadid);
	}

	// send html page with JS calls as response
	$OUTPUT->command('auto_save_start', false);
	$OUTPUT->send('iframe');


	function rcmail_attachment_success($attachment, $uploadid)
	{
	global $RCMAIL, $COMPOSE;

	$id = $attachment['id'];

	if (($icon = $COMPOSE['deleteicon']) && is_file($icon)) {
	$button = html::img(array(
	'src' => $icon,
	'alt' => $RCMAIL->gettext('delete')
	));
	}
	else if ($COMPOSE['textbuttons']) {
	$button = rcube::Q($RCMAIL->gettext('delete'));
	}
	else {
	$button = '';
	}

	$link_content = sprintf('<span class="attachment-name">%s</span><span class="attachment-size">(%s)</span>',
	rcube::Q($attachment['name']), $RCMAIL->show_bytes($attachment['size']));

	$content_link = html::a(array(
	'href' => "#load",
	'class' => 'filename',
	'onclick' => sprintf("return %s.command('load-attachment','rcmfile%s', this, event)", rcmail_output::JS_OBJECT_NAME, $id),
	), $link_content);

	$delete_link = html::a(array(
	'href' => "#delete",
	'onclick' => sprintf("return %s.command('remove-attachment','rcmfile%s', this, event)", rcmail_output::JS_OBJECT_NAME, $id),
	'title' => $RCMAIL->gettext('delete'),
	'class' => 'delete',
	'aria-label' => $RCMAIL->gettext('delete') . ' ' . $attachment['name'],
	), $button);

	$content = $COMPOSE['icon_pos'] == 'left' ? $delete_link.$content_link : $content_link.$delete_link;

	$RCMAIL->output->command('add2attachment_list', "rcmfile$id", array(
	'html' => $content,
	'name' => $attachment['name'],
	'mimetype' => $attachment['mimetype'],
	'classname' => rcube_utils::file2class($attachment['mimetype'], $attachment['name']),
	'complete' => true), $uploadid);
	}

	/**
	* Checks if the attached file will fit in message size limit.
	* Calculates size of all attachments and compares with the limit.
	*
	* @param int $filesize File size
	* @param string $filetype File mimetype
	*
	* @return string Error message if the limit is exceeded
	*/
	function rcmail_check_message_size($filesize, $filetype)
	{
	global $RCMAIL, $COMPOSE;

	$limit = parse_bytes($RCMAIL->config->get('max_message_size'));
	$size = 10 * 1024; // size of message body

	if (!$limit) {
	return;
	}

	// add size of already attached files
	foreach ((array) $COMPOSE['attachments'] as $att) {
	// All attachments are base64-encoded except message/rfc822 (see sendmail.inc)
	$multip = $att['mimetype'] == 'message/rfc822' ? 1 : 1.33;
	$size += $att['size'] * $multip;
	}

	// add size of the new attachment
	$multip = $filetype == 'message/rfc822' ? 1 : 1.33;
	$size += $filesize * $multip;

	if ($size > $limit) {
	$limit = $RCMAIL->show_bytes($limit);
	return $RCMAIL->gettext(array('name' => 'msgsizeerror', 'vars' => array('size' => $limit)));
	}
	}

File Metadata

Mime Type: text/x-php
Expires: Fri, May 22, 4:26 AM (1 d, 21 h)
Storage Engine: blob
Storage Format: Raw Data
Storage Handle: 783027
Default Alt Text: attachments.inc (10 KB)

attachments.incNo OneTemporaryActions

attachments.incView Options

File Metadata

Event Timeline

attachments.inc
No OneTemporary
Actions

attachments.inc
View Options