webinterface.git

modules/imap/include/mailaccounts.php    1) <?php

modules/email/include/mailaccounts.php   2) /*
modules/email/include/mailaccounts.php   3) This file belongs to the Webinterface of schokokeks.org Hosting
modules/email/include/mailaccounts.php   4) 

modules/email/include/mailaccounts.php   5) Written by schokokeks.org Hosting, namely

modules/email/include/mailaccounts.php   6)   Bernd Wurst <bernd@schokokeks.org>
modules/email/include/mailaccounts.php   7)   Hanno Böck <hanno@schokokeks.org>
modules/email/include/mailaccounts.php   8) 

modules/email/include/mailaccounts.php   9) This code is published under a 0BSD license.

modules/email/include/mailaccounts.php  10) 
modules/email/include/mailaccounts.php  11) Nevertheless, in case you use a significant part of this code, we ask (but not require, see the license) that you keep the authors' names in place and return your changes to the public. We would be especially happy if you tell us what you're going to do with this code.
modules/email/include/mailaccounts.php  12) */

modules/imap/include/mailaccounts.php   13) 
modules/imap/include/mailaccounts.php   14) require_once('inc/debug.php');

modules/imap/include/mailaccounts.php   15) require_once('inc/base.php');

modules/imap/include/mailaccounts.php   16) require_once('inc/security.php');

modules/imap/include/mailaccounts.php   17) 

modules/imap/include/mailaccounts.php   18) require_once('class/domain.php');
modules/imap/include/mailaccounts.php   19) 

modules/email/include/mailaccounts.php  20) require_once('common.php');
modules/email/include/mailaccounts.php  21) 

modules/imap/include/mailaccounts.php   22) function mailaccounts($uid)
modules/imap/include/mailaccounts.php   23) {

modules/email/include/mailaccounts.php  24)     $uid = (int) $uid;

modules/email/include/mailaccounts.php  25)     $result = db_query("SELECT m.id,concat_ws('@',`m`.`local`,if(isnull(`m`.`domain`),:masterdomain,`d`.`domainname`)) AS `account`, `m`.`password` AS `cryptpass`,`m`.`maildir` AS `maildir`,aktiv from (`mail`.`mailaccounts` `m` left join `mail`.`v_domains` `d` on((`d`.`id` = `m`.`domain`))) WHERE m.uid=:uid ORDER BY if(isnull(`m`.`domain`),:masterdomain,`d`.`domainname`), local", [":masterdomain" => config("masterdomain"), ":uid" => $uid]);

modules/email/include/mailaccounts.php  26)     DEBUG("Found ".@$result->rowCount()." rows!");

modules/email/include/mailaccounts.php  27)     $accounts = [];

modules/email/include/mailaccounts.php  28)     if (@$result->rowCount() > 0) {
modules/email/include/mailaccounts.php  29)         while ($acc = @$result->fetch(PDO::FETCH_OBJ)) {

modules/email/include/mailaccounts.php  30)             array_push($accounts, ['id' => $acc->id, 'account' => $acc->account, 'mailbox' => $acc->maildir, 'cryptpass' => $acc->cryptpass, 'enabled' => ($acc->aktiv == 1)]);

modules/email/include/mailaccounts.php  31)         }
modules/email/include/mailaccounts.php  32)     }
modules/email/include/mailaccounts.php  33)     return $accounts;

modules/imap/include/mailaccounts.php   34) }
modules/imap/include/mailaccounts.php   35) 
modules/imap/include/mailaccounts.php   36) function get_mailaccount($id)
modules/imap/include/mailaccounts.php   37) {

modules/email/include/mailaccounts.php  38)     $id = (int) $id;
modules/email/include/mailaccounts.php  39)     $uid = (int) $_SESSION['userinfo']['uid'];

modules/email/include/mailaccounts.php  40)     $result = db_query("SELECT concat_ws('@',`m`.`local`,if(isnull(`m`.`domain`),:masterdomain,`d`.`domainname`)) AS `account`, `m`.`password` AS `cryptpass`,`m`.`maildir` AS `maildir`,aktiv from (`mail`.`mailaccounts` `m` left join `mail`.`v_domains` `d` on((`d`.`id` = `m`.`domain`))) WHERE m.id=:mid AND m.uid=:uid", [":masterdomain" => config("masterdomain"), ":uid" => $uid, ":mid" => $id]);

modules/email/include/mailaccounts.php  41)     DEBUG("Found ".$result->rowCount()." rows!");
modules/email/include/mailaccounts.php  42)     if ($result->rowCount() != 1) {
modules/email/include/mailaccounts.php  43)         system_failure('Dieser Mailaccount existiert nicht oder gehört Ihnen nicht');
modules/email/include/mailaccounts.php  44)     }
modules/email/include/mailaccounts.php  45)     $acc = $result->fetch(PDO::FETCH_OBJ);

modules/email/include/mailaccounts.php  46)     $ret = ['account' => $acc->account, 'mailbox' => $acc->maildir,  'enabled' => ($acc->aktiv == 1)];

modules/email/include/mailaccounts.php  47)     DEBUG(print_r($ret, true));
modules/email/include/mailaccounts.php  48)     return $ret;

modules/imap/include/mailaccounts.php   49) }
modules/imap/include/mailaccounts.php   50) 
modules/imap/include/mailaccounts.php   51) function change_mailaccount($id, $arr)
modules/imap/include/mailaccounts.php   52) {

modules/email/include/mailaccounts.php  53)     $id = (int) $id;
modules/email/include/mailaccounts.php  54)     $uid = (int) $_SESSION['userinfo']['uid'];

modules/email/include/mailaccounts.php  55)     $conditions = [];
modules/email/include/mailaccounts.php  56)     $values = [":id" => $id, ":uid" => $uid];

modules/email/include/mailaccounts.php  57) 
modules/email/include/mailaccounts.php  58)     if (isset($arr['account'])) {

modules/email/include/mailaccounts.php  59)         [$local, $domain] = explode('@', $arr['account'], 2);

modules/email/include/mailaccounts.php  60)         if ($domain == config('masterdomain')) {
modules/email/include/mailaccounts.php  61)             $values[':domain'] = null;
modules/email/include/mailaccounts.php  62)         } else {
modules/email/include/mailaccounts.php  63)             $domain = new Domain((string) $domain);
modules/email/include/mailaccounts.php  64)             if ($domain->id == null) {
modules/email/include/mailaccounts.php  65)                 $values[":domain"] = null;
modules/email/include/mailaccounts.php  66)             } else {
modules/email/include/mailaccounts.php  67)                 $domain->ensure_userdomain();
modules/email/include/mailaccounts.php  68)                 $values[":domain"] = $domain->id;
modules/email/include/mailaccounts.php  69)             }
modules/email/include/mailaccounts.php  70)         }
modules/email/include/mailaccounts.php  71)         $values[":local"] = $local;
modules/email/include/mailaccounts.php  72)         $conditions[] = "local=:local";
modules/email/include/mailaccounts.php  73)         $conditions[] = "domain=:domain";
modules/email/include/mailaccounts.php  74)     }
modules/email/include/mailaccounts.php  75)     if (isset($arr['mailbox'])) {
modules/email/include/mailaccounts.php  76)         array_push($conditions, "`maildir`=:maildir");
modules/email/include/mailaccounts.php  77)         if ($arr['mailbox'] == '') {
modules/email/include/mailaccounts.php  78)             $values[":maildir"] = null;
modules/email/include/mailaccounts.php  79)         } else {
modules/email/include/mailaccounts.php  80)             $values[":maildir"] = $arr['mailbox'];
modules/email/include/mailaccounts.php  81)         }
modules/email/include/mailaccounts.php  82)     }
modules/email/include/mailaccounts.php  83) 
modules/email/include/mailaccounts.php  84)     if (isset($arr['password'])) {

modules/email/include/mailaccounts.php  85)         $result = strong_password($arr['password']);
modules/email/include/mailaccounts.php  86)         if ($result !== true) {
modules/email/include/mailaccounts.php  87)             system_failure("Unsicheres Passwort: ".$result);
modules/email/include/mailaccounts.php  88)         }

modules/email/include/mailaccounts.php  89)         $encpw = encrypt_mail_password($arr['password']);
modules/email/include/mailaccounts.php  90)         array_push($conditions, "`password`=:password");
modules/email/include/mailaccounts.php  91)         $values[":password"] = $encpw;
modules/email/include/mailaccounts.php  92)     }
modules/email/include/mailaccounts.php  93) 
modules/email/include/mailaccounts.php  94)     if (isset($arr['enabled'])) {
modules/email/include/mailaccounts.php  95)         array_push($conditions, "`aktiv`=:aktiv");
modules/email/include/mailaccounts.php  96)         $values[":aktiv"] = ($arr['enabled'] == 'Y' ? 1 : 0);
modules/email/include/mailaccounts.php  97)     }

modules/imap/include/mailaccounts.php   98) 
modules/imap/include/mailaccounts.php   99) 

modules/email/include/mailaccounts.php 100)     db_query("UPDATE mail.mailaccounts SET ".implode(",", $conditions)." WHERE id=:id AND uid=:uid", $values);
modules/email/include/mailaccounts.php 101)     logger(LOG_INFO, "modules/imap/include/mailaccounts", "imap", "updated account »{$id}«");

modules/imap/include/mailaccounts.php  102) }
modules/imap/include/mailaccounts.php  103) 
modules/imap/include/mailaccounts.php  104) function create_mailaccount($arr)
modules/imap/include/mailaccounts.php  105) {

modules/email/include/mailaccounts.php 106)     $values = [];

modules/imap/include/mailaccounts.php  107) 

modules/email/include/mailaccounts.php 108)     if (($arr['account']) == '') {
modules/email/include/mailaccounts.php 109)         system_failure('empty account name!');
modules/email/include/mailaccounts.php 110)     }

modules/imap/include/mailaccounts.php  111) 

modules/email/include/mailaccounts.php 112)     $values[':uid'] = (int) $_SESSION['userinfo']['uid'];

modules/imap/include/mailaccounts.php  113) 

modules/email/include/mailaccounts.php 114)     [$local, $domain] = explode('@', $arr['account'], 2);

modules/email/include/mailaccounts.php 115)     if ($domain == config('masterdomain')) {
modules/email/include/mailaccounts.php 116)         $values[':domain'] = null;
modules/email/include/mailaccounts.php 117)     } else {
modules/email/include/mailaccounts.php 118)         $domain = new Domain((string) $domain);
modules/email/include/mailaccounts.php 119)         if ($domain->id == null) {
modules/email/include/mailaccounts.php 120)             $values[':domain'] = null;
modules/email/include/mailaccounts.php 121)         } else {
modules/email/include/mailaccounts.php 122)             $domain->ensure_userdomain();
modules/email/include/mailaccounts.php 123)             $values[':domain'] = $domain->id;
modules/email/include/mailaccounts.php 124)         }

modules/email/include/mailaccounts.php 125)     }

modules/imap/include/mailaccounts.php  126) 

modules/email/include/mailaccounts.php 127)     $values[':local'] = $local;

modules/imap/include/mailaccounts.php  128) 

modules/email/include/mailaccounts.php 129)     if (isset($arr['mailbox'])) {
modules/email/include/mailaccounts.php 130)         if ($arr['mailbox'] == '') {
modules/email/include/mailaccounts.php 131)             $values[':maildir'] = null;
modules/email/include/mailaccounts.php 132)         } else {
modules/email/include/mailaccounts.php 133)             $values[':maildir'] = $arr['mailbox'];
modules/email/include/mailaccounts.php 134)         }
modules/email/include/mailaccounts.php 135)     }

modules/imap/include/mailaccounts.php  136) 
modules/imap/include/mailaccounts.php  137) 

modules/email/include/mailaccounts.php 138)     if (isset($arr['password'])) {

modules/email/include/mailaccounts.php 139)         $result = strong_password($arr['password']);
modules/email/include/mailaccounts.php 140)         if ($result !== true) {
modules/email/include/mailaccounts.php 141)             system_failure("Unsicheres Passwort: ".$result);
modules/email/include/mailaccounts.php 142)         }

modules/email/include/mailaccounts.php 143)         $values[':password'] = encrypt_mail_password($arr['password']);
modules/email/include/mailaccounts.php 144)     }

modules/imap/include/mailaccounts.php  145) 

modules/email/include/mailaccounts.php 146)     if (isset($arr['enabled'])) {
modules/email/include/mailaccounts.php 147)         $values[':aktiv'] = ($arr['enabled'] == 'Y' ? 1 : 0);
modules/email/include/mailaccounts.php 148)     }

modules/imap/include/mailaccounts.php  149) 
modules/imap/include/mailaccounts.php  150) 

modules/email/include/mailaccounts.php 151)     $fields = array_map(function ($k) {
modules/email/include/mailaccounts.php 152)         return substr($k, 1);
modules/email/include/mailaccounts.php 153)     }, array_keys($values));
modules/email/include/mailaccounts.php 154)     db_query("INSERT INTO mail.mailaccounts (".implode(',', $fields).") VALUES (".implode(",", array_keys($values)).")", $values);
modules/email/include/mailaccounts.php 155)     logger(LOG_INFO, "modules/imap/include/mailaccounts", "imap", "created account »{$arr['account']}«");

modules/imap/include/mailaccounts.php  156) }
modules/imap/include/mailaccounts.php  157) 

modules/email/include/mailaccounts.php 158) 

modules/imap/include/mailaccounts.php  159) function get_mailaccount_id($accountname)
modules/imap/include/mailaccounts.php  160) {

modules/email/include/mailaccounts.php 161)     [$local, $domain] = explode('@', $accountname, 2);

modules/imap/include/mailaccounts.php  162) 

modules/email/include/mailaccounts.php 163)     $args = [":local" => $local,
modules/email/include/mailaccounts.php 164)                 ":domain" => $domain, ];

modules/imap/include/mailaccounts.php  165) 

modules/email/include/mailaccounts.php 166)     $result = db_query("SELECT acc.id FROM mail.mailaccounts AS acc LEFT JOIN mail.v_domains AS dom ON (dom.id=acc.domain) WHERE local=:local AND dom.domainname=:domain", $args);
modules/email/include/mailaccounts.php 167)     if (($result->rowCount() == 0) && ($domain == config('masterdomain'))) {
modules/email/include/mailaccounts.php 168)         unset($args[':domain']);
modules/email/include/mailaccounts.php 169)         $result = db_query("SELECT acc.id FROM mail.mailaccounts AS acc WHERE local=:local AND acc.domain IS NULL", $args);
modules/email/include/mailaccounts.php 170)     }
modules/email/include/mailaccounts.php 171)     if ($result->rowCount() != 1) {
modules/email/include/mailaccounts.php 172)         system_failure('account nicht eindeutig');
modules/email/include/mailaccounts.php 173)     }
modules/email/include/mailaccounts.php 174)     $acc = $result->fetch();
modules/email/include/mailaccounts.php 175)     return $acc['id'];

modules/imap/include/mailaccounts.php  176) }

modules/email/include/mailaccounts.php 177) 

modules/imap/include/mailaccounts.php  178) 
modules/imap/include/mailaccounts.php  179) function delete_mailaccount($id)
modules/imap/include/mailaccounts.php  180) {

modules/email/include/mailaccounts.php 181)     $id = (int) $id;

modules/email/include/mailaccounts.php 182)     db_query("DELETE FROM mail.mailaccounts WHERE id=?", [$id]);

modules/email/include/mailaccounts.php 183)     logger(LOG_INFO, "modules/imap/include/mailaccounts", "imap", "deleted account »{$id}«");

modules/imap/include/mailaccounts.php  184) }
modules/imap/include/mailaccounts.php  185) 
modules/imap/include/mailaccounts.php  186) 
modules/imap/include/mailaccounts.php  187) function check_valid($acc)
modules/imap/include/mailaccounts.php  188) {

modules/email/include/mailaccounts.php 189)     $user = $_SESSION['userinfo'];
modules/email/include/mailaccounts.php 190)     DEBUG("Account-data: ".print_r($acc, true));
modules/email/include/mailaccounts.php 191)     DEBUG("User-data: ".print_r($user, true));
modules/email/include/mailaccounts.php 192)     if ($acc['mailbox'] != '') {

modules/email/include/mailaccounts.php 193)         if (substr($acc['mailbox'], 0, strlen($user['homedir']) + 1) != $user['homedir'].'/') {

modules/email/include/mailaccounts.php 194)             return "Die Mailbox muss innerhalb des Home-Verzeichnisses liegen. Sie haben »".$acc['mailbox']."« als Mailbox angegeben, Ihr Home-Verzeichnis ist »".$user['homedir']."/«.";
modules/email/include/mailaccounts.php 195)         }
modules/email/include/mailaccounts.php 196)         if (! check_path($acc['mailbox'])) {
modules/email/include/mailaccounts.php 197)             return "Sie verwenden ungültige Zeichen in Ihrem Mailbox-Pfad.";
modules/email/include/mailaccounts.php 198)         }
modules/email/include/mailaccounts.php 199)     }
modules/email/include/mailaccounts.php 200) 
modules/email/include/mailaccounts.php 201)     if ($acc['account'] == '' || strpos($acc['account'], '@') == 0) {
modules/email/include/mailaccounts.php 202)         return "Es wurde kein Benutzername angegeben!";
modules/email/include/mailaccounts.php 203)     }
modules/email/include/mailaccounts.php 204)     if (strpos($acc['account'], '@') === false) {
modules/email/include/mailaccounts.php 205)         return "Es wurde kein Domain-Teil im Account-Name angegeben. Account-Namen müssen einen Domain-Teil enthalten. Im Zweifel versuchen Sie »@".config('masterdomain')."«.";
modules/email/include/mailaccounts.php 206)     }
modules/email/include/mailaccounts.php 207) 

modules/email/include/mailaccounts.php 208)     [$local, $domain] = explode('@', $acc['account'], 2);

modules/email/include/mailaccounts.php 209)     verify_input_username($local);
modules/email/include/mailaccounts.php 210)     $tmpdomains = get_domain_list($user['customerno'], $user['uid']);

modules/email/include/mailaccounts.php 211)     $domains = [];

modules/email/include/mailaccounts.php 212)     foreach ($tmpdomains as $dom) {
modules/email/include/mailaccounts.php 213)         $domains[] = $dom->fqdn;
modules/email/include/mailaccounts.php 214)     }
modules/email/include/mailaccounts.php 215) 
modules/email/include/mailaccounts.php 216)     if (array_search($domain, $domains) === false) {
modules/email/include/mailaccounts.php 217)         if ($domain == config('masterdomain')) {
modules/email/include/mailaccounts.php 218)             if (substr($local, 0, strlen($user['username'])) != $user['username'] || ($acc['account'][strlen($user['username'])] != '-' && $acc['account'][strlen($user['username'])] != '@')) {
modules/email/include/mailaccounts.php 219)                 return "Sie haben »@".config('masterdomain')."« als Domain-Teil angegeben, aber der Benutzer-Teil beginnt nicht mit Ihrem Benutzername!";
modules/email/include/mailaccounts.php 220)             }
modules/email/include/mailaccounts.php 221)         } else {
modules/email/include/mailaccounts.php 222)             return "Der angegebene Domain-Teil (»".htmlentities($domain, ENT_QUOTES, "UTF-8")."«) ist nicht für Ihren Account eingetragen. Sollte dies ein Fehler sein, wenden sie sich bitte an einen Administrator!";
modules/email/include/mailaccounts.php 223)         }
modules/email/include/mailaccounts.php 224)     }
modules/email/include/mailaccounts.php 225) 
modules/email/include/mailaccounts.php 226)     return '';

modules/imap/include/mailaccounts.php  227) }
modules/imap/include/mailaccounts.php  228) 
modules/imap/include/mailaccounts.php  229) 

modules/email/include/mailaccounts.php 230) function imap_on_vmail_domain()
modules/email/include/mailaccounts.php 231) {

modules/email/include/mailaccounts.php 232)     $uid = (int) $_SESSION['userinfo']['uid'];

modules/email/include/mailaccounts.php 233)     $result = db_query("SELECT m.id FROM mail.mailaccounts AS m INNER JOIN mail.virtual_mail_domains AS vd USING (domain) WHERE vd.hostname IS NULL AND m.uid=?", [$uid]);

modules/email/include/mailaccounts.php 234)     if ($result->rowCount() > 0) {
modules/email/include/mailaccounts.php 235)         return true;
modules/email/include/mailaccounts.php 236)     }
modules/email/include/mailaccounts.php 237)     return false;

modules/email/include/mailaccounts.php 238) }
modules/email/include/mailaccounts.php 239) 
modules/email/include/mailaccounts.php 240) function user_has_only_vmail_domains()
modules/email/include/mailaccounts.php 241) {

modules/email/include/mailaccounts.php 242)     $uid = (int) $_SESSION['userinfo']['uid'];

modules/email/include/mailaccounts.php 243)     $result = db_query("SELECT id FROM mail.v_vmail_domains WHERE useraccount=?", [$uid]);

modules/email/include/mailaccounts.php 244)     // User hat keine VMail-Domains
modules/email/include/mailaccounts.php 245)     if ($result->rowCount() == 0) {
modules/email/include/mailaccounts.php 246)         return false;
modules/email/include/mailaccounts.php 247)     }

modules/email/include/mailaccounts.php 248)     $result = db_query("SELECT d.id FROM mail.v_domains AS d LEFT JOIN mail.v_vmail_domains AS vd USING (domainname) WHERE vd.id IS NULL AND d.user=?", [$uid]);

modules/email/include/mailaccounts.php 249)     // User hat keine Domains die nicht vmail-Domains sind
modules/email/include/mailaccounts.php 250)     if ($result->rowCount() == 0) {
modules/email/include/mailaccounts.php 251)         return true;
modules/email/include/mailaccounts.php 252)     }

modules/email/include/mailaccounts.php 253)     return false;