webmail/cgi-bin/inbox.pl

#!/usr/local/bin/perl

BEGIN { $APP_PATH="/home/httpd/html/webmail/cgi-bin/"; }

# @ ----------------------------------------------------------------------------------------------------------
# @ This code is (c) 1999 Alexandre Aufrere and NikoSoft.
# @ Published under NPL rights, meaning you have the right
# @ to use and modify this code freely, provided it 
# @ remains available and free. Any modified code should be
# @ submitted to Nikopol Software Corp. or Alexandre Aufrere.
# @ This code is protected by the French laws on Copyright.
# @ Please note that there it comes with NO WARRANTY of any kind,
# @ and especially for any damagbe it could cause to your computer
# @ or network.
# @ Using this code means you agree to this license agreement.
# @ Further information at http://aufrere.citeweb.net/nsc/
# @ ----------------------------------------------------------------------------------------------------------
# @ 
# @ Project             NS WebMail
# @ 
# @ Filename            inbox.pl
# @ 
# @ Description inbox manager for NS WebMail
# @ 
# @ Version             1.0
# @ 
# @ ----------------------------------------------------------------------------------------------------------

use Mail::POP3Client;
require $APP_PATH."config.pl";

#use the $cgi object method param() to
#acquire the FORM variables passed by
#the client browser.
&ReadParse;
$loginname = $in{'loginname'};
$password  = $in{'password'};
$POPserver = $in{'POPserver'};
$lastMsg   = $in{'lastMsg'};
$deleteMsg = $in{'deleteMsg'};
$cache     = $in{'cache'};
$status    = $in{'status'};

#if deleteMsg is not null, then this script has been called by the
#Delete Message button.  We will open a POP client object, delete
#the indicated message, then close the POP object to actually force
#the POP server to make the deletion.  The rest of the script will
#then play out and re-open the POP object.  By closing and reopening
#we will obtain an updated count that correctly does not include the
#recently deleted message.

if ($deleteMsg) {
        $pop = new Mail::POP3Client($loginname, $password, $POPserver);
        $pop->Delete($deleteMsg);
        $pop->Close();
        $deleteMsg = "";
        $pop = "";
        sleep(1);       # Gives the POP time to close and be ready for another
                                # open attempt.
        }


#Begin production of HTML code.
print "Content-type: text/html\n\n";
print "<HTML><HEAD><TITLE>NS WM Message Retrieval</TITLE>";

print "<SCRIPT LANGUAGE='JavaScript'>\n";
print "function closeThisWindow() { \n";
print "window.close()\n";
print "}\n";
print "</SCRIPT>\n";

$onloadcode="";
if ($status eq "firstlogin") { $onloadcode="parent.menu.location='$PATH_NSWM/menu.htm';"; }
if ($cache eq "No") { print "<META HTTP-EQUIV='Pragma' CONTENT='no-cache'>"; 
                        print "</HEAD>\n<BODY BGCOLOR='#FFFFFF' OnLoad=\"$onloadcode\">";
                                        }
else                { print "</HEAD>\n<BODY BGCOLOR='FF8F8F'>";
                                        }

#print "<b><font size='+2'>NikoSoft WebMail</font></b><hr>";
print "<center>\n";


#Create a (possibly new) POP connection with the POP3Client object.
$pop = new Mail::POP3Client($loginname, $password, $POPserver);

#How many messages are there in the inbox provided by the $pop object?
$MessageCount = $pop->Count;


print "<table><tr><td>";
#if $pop->count is -1, then the POP connection failed.
if ($MessageCount == -1) {
        print "</table><font size=+1>$POPserver: $loginname, $incorrectlogin";
        print "</body></html>";
        exit;
        }
#if $pop->count is 0, there are no messages in the POP account          
elsif ($MessageCount == 0) {
        print "<b> $nomailon <i>$POPserver</i></b>";
        }
#if $pop->count is >0, then that is the number of messages in the
#POP account inbox.
else {  print "<img src=$MAIL_IMG valign=middle>&nbsp;&nbsp;";
        print "<b>$MessageCount $messagesininbox.</b>\n";
                }

#print "</td><td width=300 align=center>\n";

if ($MessageCount != -1) {      #equivalent to knowing a valid POP account was used...
        #place a button that will allow the user to create a new mail message
        #without having to "reply" to a previously received one.  This also
        #permits people to don't get much mail to be able to send something.
        print "<FORM METHOD='POST' ACTION='".$CGI_PATH_NSWM."sendform.pl' name=newMailForm>\n";
        print "<INPUT TYPE='hidden'  NAME='loginname'     VALUE=$loginname>\n";
        print "<INPUT TYPE='hidden'  NAME='password'      VALUE=$password>\n";
        print "<INPUT TYPE='hidden'  NAME='POPserver'     VALUE=$POPserver>\n";
        print "<INPUT TYPE='hidden'  NAME='cache'         VALUE=$cache>\n";
        print "<INPUT TYPE='hidden'  NAME='to'            VALUE=''>\n";
        print "<INPUT TYPE='hidden'  NAME='subject'       VALUE=''>\n";
        print "</FORM>";
        print "<FORM METHOD='POST' ACTION='".$CGI_PATH_NSWM."sentmail.pl' name=sentForm>\n";
        print "<INPUT TYPE='hidden'  NAME='loginname'     VALUE=$loginname>\n";
        print "<INPUT TYPE='hidden'  NAME='password'      VALUE=$password>\n";
        print "<INPUT TYPE='hidden'  NAME='POPserver'     VALUE=$POPserver>\n";
        print "<INPUT TYPE='hidden'  NAME='cache'         VALUE=$cache>\n";
        print "</FORM>";
        }
print "</td></tr></table><br>\n"; 

    
        #Parse the message headers to output a list of message
        #header info including SUBJECT,FROM,DATE,and TO.
        #each message will have a read & delete button as well
        #and these three elements will be organized in a table
                
        if ($MessageCount > 0) {
                print "<table border=0 cellpadding=2 cellspacing=0 width=90% align=center>";
                print "<tr bgcolor=darkblue><td><b><font color=white>$fromtext</b></td><td><b><font color=white>$subjecttext</b></td><td><b><font color=white>$datetext</b></td><td>&nbsp;</td>";
        &ParseHeaders();
                print "</table>";
                }
        
                # At the end of the form, we will place a button which can obtain 
                # more 'n' more mail messages.  Note that the button makes a "recursive"
                # call.   (In other words, it represents a perl script calling itself,
                # but with different variable values.)
                # 
                # The only value that is different is the 'lastMsg' variable
                # which is Null in the posting from the "Check Your Mail" button, but is
                # set to a non-null value on posting from this ("Get More Messages") button.
                print "<FORM METHOD='POST'  ACTION='".$CGI_PATH_NSWM."inbox.pl'     name=inboxForm>\n";
                print "<INPUT TYPE='hidden' NAME='loginname'  VALUE=$loginname   >\n";
                print "<INPUT TYPE='hidden' NAME='POPserver'  VALUE=$POPserver   >\n";
                print "<INPUT TYPE='hidden' NAME='password'   VALUE=$password    >\n";
                print "<INPUT TYPE='hidden'  NAME='cache'     VALUE=$cache    >\n";
                print "</FORM></center>";


                # Lastly, provide a button which will let the user 'Logout'.  This 
                # actually closes the window in use in order to destroy the history log
                # which contains the all previously viewed email, plus the clear text
                # login/password/host information that would allow an intruder access
                # to the account in the future.
                #print "<FORM METHOD='Post'>";
                #print "<INPUT TYPE='button' VALUE='Quitter' onClick='closeThisWindow()'>";
                #print "</FORM>\n";


#close the POP connection smoothly.
$pop->Close;

#send the ending html code (/body and /head tags)
print "</BODY></HTML>";
exit;

#----------------------------------SUBROUTINES-------------------------


#-----------------------------Sub ParseHeaders-----------------------------
#Subroutine to parse the headers on each message to exctract the TO:, FROM:,
# DATE:, and SUBJECT: information.
#--------------------------------------------------------------------------
sub ParseHeaders {
#loop through the messages in the POP account space

#loop backwards, displaying most recent messages first
#Also note that only the most recent 100 messages will be displayed from
#

if ($lastMsg == "") { $lastMsg = $MessageCount };

for ($i=$lastMsg; $i >= 1 && $i> $lastMsg-100; $i--) {
        

        #for each message header, provide a FORM button to
        #invoke getmessage.pl and hand that routine the message
        #number. Pass the login,pass,server info again since
        #the web protocol does not provide for continued connections.
        if ( (($i)/2) == int(($i)/2) ) {
                print "<tr>\n";
        } else {
                print "<tr bgcolor=lightblue>\n";
        }
        print "<FORM METHOD='POST'  ACTION='".$CGI_PATH_NSWM."getmsg.pl' NAME='lire$i'>\n";
        print "<INPUT TYPE='hidden' NAME='id'         VALUE=$i           >\n";
        print "<INPUT TYPE='hidden' NAME='loginname'  VALUE=$loginname   >\n";
        print "<INPUT TYPE='hidden' NAME='password'   VALUE=$password    >\n";
        print "<INPUT TYPE='hidden' NAME='POPserver'  VALUE=$POPserver   >\n";
        print "<INPUT TYPE='hidden' NAME='cache'      VALUE=$cache    >\n";
        print "</FORM>\n";


                $sub = '';
                $from = '';
                $to = '';
                $date = '';
                $replyto = '';
        
        #obtain each header with the head() method in POP3Client.
                        
        foreach ($pop->Head($i)){
                #for each line within the message header retrieved, parse
                #the From,To,Date,Subject fields by finding
                #the appropriate strings at the beginning
                #of each line
        if (/^From:/ ){
                $from = $';                     #Get string following the succesful match.
            $from =~ s/</&lt\;/;                #Strip out angled brackets to prevent browsers
            $from =~ s/>/&gt\;/;                #from interpreting them as unknown HTML codes.
            }
        elsif (/^To:/) {
                        $to = $';
            }
        elsif (/^Subject:/) {
                $sub = $';
            }
        elsif (/^Date:/) {
                $date = $';
                        }
        }
        $date=~ s/.*\,(.*)\+.*/$1/;
        print "<td><a href='.' OnClick='document.lire$i.submit();return false;'>$from&nbsp;</a></td><td><b>$sub&nbsp;</b></td><td>$date&nbsp;</td>";

        #for each message header, also provide a FORM button to
        #delete using inbox.pl As above, pass in the needed vars
        #using hidden types.
        print "<td><FORM METHOD='POST' ACTION='".$CGI_PATH_NSWM."inbox.pl'     >\n";
        print     "<INPUT TYPE='hidden' NAME='loginname'  VALUE=$loginname >\n";
        print     "<INPUT TYPE='hidden' NAME='password'   VALUE=$password >\n";
        print     "<INPUT TYPE='hidden' NAME='POPserver'  VALUE=$POPserver >\n";
        print     "<INPUT TYPE='hidden' NAME='deleteMsg'  VALUE=$i  >\n";
        print     "<INPUT TYPE='hidden' NAME='cache'      VALUE=$cache >\n";
        print     "<INPUT TYPE='submit'                   VALUE='$deletetext'  OnClick=\"return confirm('$deleteconfirmtext');\">\n";
        print     "</td></FORM></tr>\n";
    }
}

###############################################################################
sub ReadParse {
  local(*in)=@_ if @_;
  local ($i,$key,$val);

  if ($ENV{'REQUEST_METHOD'} eq "GET") {
    $in=$ENV{'QUERY_STRING'};
  }
  elsif ($ENV{'REQUEST_METHOD'} eq "POST") {
    read(STDIN,$in,$ENV{'CONTENT_LENGTH'});
  }
  
  @in=split(/&/,$in);
  
  foreach $i (0 .. $#in) {
    $in[$i] =~ s/\+/ /g;
    ($key,$val)=split(/=/,$in[$i],2);
    $key =~ s/%(..)/pack("c",hex($1))/ge;
    $val =~ s/%(..)/pack("c",hex($1))/ge;
    $in{$key} .= "\0" if (defined($in{$key}));
    $in{$key} .=$val;
  }
  return length($in);
}
1	#!/usr/local/bin/perl
2
3	BEGIN { $APP_PATH="/home/httpd/html/webmail/cgi-bin/"; }
4
5	# @ ----------------------------------------------------------------------------------------------------------
6	# @ This code is (c) 1999 Alexandre Aufrere and NikoSoft.
7	# @ Published under NPL rights, meaning you have the right
8	# @ to use and modify this code freely, provided it
9	# @ remains available and free. Any modified code should be
10	# @ submitted to Nikopol Software Corp. or Alexandre Aufrere.
11	# @ This code is protected by the French laws on Copyright.
12	# @ Please note that there it comes with NO WARRANTY of any kind,
13	# @ and especially for any damagbe it could cause to your computer
14	# @ or network.
15	# @ Using this code means you agree to this license agreement.
16	# @ Further information at http://aufrere.citeweb.net/nsc/
17	# @ ----------------------------------------------------------------------------------------------------------
18	# @
19	# @ Project NS WebMail
20	# @
21	# @ Filename inbox.pl
22	# @
23	# @ Description inbox manager for NS WebMail
24	# @
25	# @ Version 1.0
26	# @
27	# @ ----------------------------------------------------------------------------------------------------------
28
29	use Mail::POP3Client;
30	require $APP_PATH."config.pl";
31
32	#use the $cgi object method param() to
33	#acquire the FORM variables passed by
34	#the client browser.
35	&ReadParse;
36	$loginname = $in{'loginname'};
37	$password = $in{'password'};
38	$POPserver = $in{'POPserver'};
39	$lastMsg = $in{'lastMsg'};
40	$deleteMsg = $in{'deleteMsg'};
41	$cache = $in{'cache'};
42	$status = $in{'status'};
43
44	#if deleteMsg is not null, then this script has been called by the
45	#Delete Message button. We will open a POP client object, delete
46	#the indicated message, then close the POP object to actually force
47	#the POP server to make the deletion. The rest of the script will
48	#then play out and re-open the POP object. By closing and reopening
49	#we will obtain an updated count that correctly does not include the
50	#recently deleted message.
51
52	if ($deleteMsg) {
53	$pop = new Mail::POP3Client($loginname, $password, $POPserver);
54	$pop->Delete($deleteMsg);
55	$pop->Close();
56	$deleteMsg = "";
57	$pop = "";
58	sleep(1); # Gives the POP time to close and be ready for another
59	# open attempt.
60	}
61
62
63
64	#Begin production of HTML code.
65	print "Content-type: text/html\n\n";
66	print "<HTML><HEAD><TITLE>NS WM Message Retrieval</TITLE>";
67
68	print "<SCRIPT LANGUAGE='JavaScript'>\n";
69	print "function closeThisWindow() { \n";
70	print "window.close()\n";
71	print "}\n";
72	print "</SCRIPT>\n";
73
74	$onloadcode="";
75	if ($status eq "firstlogin") { $onloadcode="parent.menu.location='$PATH_NSWM/menu.htm';"; }
76	if ($cache eq "No") { print "<META HTTP-EQUIV='Pragma' CONTENT='no-cache'>";
77	print "</HEAD>\n<BODY BGCOLOR='#FFFFFF' OnLoad=\"$onloadcode\">";
78	}
79	else { print "</HEAD>\n<BODY BGCOLOR='FF8F8F'>";
80	}
81
82	#print "<b><font size='+2'>NikoSoft WebMail</font></b><hr>";
83	print "<center>\n";
84
85
86	#Create a (possibly new) POP connection with the POP3Client object.
87	$pop = new Mail::POP3Client($loginname, $password, $POPserver);
88
89	#How many messages are there in the inbox provided by the $pop object?
90	$MessageCount = $pop->Count;
91
92
93	print "<table><tr><td>";
94	#if $pop->count is -1, then the POP connection failed.
95	if ($MessageCount == -1) {
96	print "</table><font size=+1>$POPserver: $loginname, $incorrectlogin";
97	print "</body></html>";
98	exit;
99	}
100	#if $pop->count is 0, there are no messages in the POP account
101	elsif ($MessageCount == 0) {
102	print "<b> $nomailon <i>$POPserver</i></b>";
103	}
104	#if $pop->count is >0, then that is the number of messages in the
105	#POP account inbox.
106	else { print "<img src=$MAIL_IMG valign=middle>  ";
107	print "<b>$MessageCount $messagesininbox.</b>\n";
108	}
109
110	#print "</td><td width=300 align=center>\n";
111
112	if ($MessageCount != -1) { #equivalent to knowing a valid POP account was used...
113	#place a button that will allow the user to create a new mail message
114	#without having to "reply" to a previously received one. This also
115	#permits people to don't get much mail to be able to send something.
116	print "<FORM METHOD='POST' ACTION='".$CGI_PATH_NSWM."sendform.pl' name=newMailForm>\n";
117	print "<INPUT TYPE='hidden' NAME='loginname' VALUE=$loginname>\n";
118	print "<INPUT TYPE='hidden' NAME='password' VALUE=$password>\n";
119	print "<INPUT TYPE='hidden' NAME='POPserver' VALUE=$POPserver>\n";
120	print "<INPUT TYPE='hidden' NAME='cache' VALUE=$cache>\n";
121	print "<INPUT TYPE='hidden' NAME='to' VALUE=''>\n";
122	print "<INPUT TYPE='hidden' NAME='subject' VALUE=''>\n";
123	print "</FORM>";
124	print "<FORM METHOD='POST' ACTION='".$CGI_PATH_NSWM."sentmail.pl' name=sentForm>\n";
125	print "<INPUT TYPE='hidden' NAME='loginname' VALUE=$loginname>\n";
126	print "<INPUT TYPE='hidden' NAME='password' VALUE=$password>\n";
127	print "<INPUT TYPE='hidden' NAME='POPserver' VALUE=$POPserver>\n";
128	print "<INPUT TYPE='hidden' NAME='cache' VALUE=$cache>\n";
129	print "</FORM>";
130	}
131	print "</td></tr></table><br>\n";
132
133
134	#Parse the message headers to output a list of message
135	#header info including SUBJECT,FROM,DATE,and TO.
136	#each message will have a read & delete button as well
137	#and these three elements will be organized in a table
138
139	if ($MessageCount > 0) {
140	print "<table border=0 cellpadding=2 cellspacing=0 width=90% align=center>";
141	print "<tr bgcolor=darkblue><td><b><font color=white>$fromtext</b></td><td><b><font color=white>$subjecttext</b></td><td><b><font color=white>$datetext</b></td><td> </td>";
142	&ParseHeaders();
143	print "</table>";
144	}
145
146	# At the end of the form, we will place a button which can obtain
147	# more 'n' more mail messages. Note that the button makes a "recursive"
148	# call. (In other words, it represents a perl script calling itself,
149	# but with different variable values.)
150	#
151	# The only value that is different is the 'lastMsg' variable
152	# which is Null in the posting from the "Check Your Mail" button, but is
153	# set to a non-null value on posting from this ("Get More Messages") button.
154	print "<FORM METHOD='POST' ACTION='".$CGI_PATH_NSWM."inbox.pl' name=inboxForm>\n";
155	print "<INPUT TYPE='hidden' NAME='loginname' VALUE=$loginname >\n";
156	print "<INPUT TYPE='hidden' NAME='POPserver' VALUE=$POPserver >\n";
157	print "<INPUT TYPE='hidden' NAME='password' VALUE=$password >\n";
158	print "<INPUT TYPE='hidden' NAME='cache' VALUE=$cache >\n";
159	print "</FORM></center>";
160
161
162	# Lastly, provide a button which will let the user 'Logout'. This
163	# actually closes the window in use in order to destroy the history log
164	# which contains the all previously viewed email, plus the clear text
165	# login/password/host information that would allow an intruder access
166	# to the account in the future.
167	#print "<FORM METHOD='Post'>";
168	#print "<INPUT TYPE='button' VALUE='Quitter' onClick='closeThisWindow()'>";
169	#print "</FORM>\n";
170
171
172	#close the POP connection smoothly.
173	$pop->Close;
174
175	#send the ending html code (/body and /head tags)
176	print "</BODY></HTML>";
177	exit;
178
179	#----------------------------------SUBROUTINES-------------------------
180
181
182	#-----------------------------Sub ParseHeaders-----------------------------
183	#Subroutine to parse the headers on each message to exctract the TO:, FROM:,
184	# DATE:, and SUBJECT: information.
185	#--------------------------------------------------------------------------
186	sub ParseHeaders {
187	#loop through the messages in the POP account space
188
189	#loop backwards, displaying most recent messages first
190	#Also note that only the most recent 100 messages will be displayed from
191	#
192
193	if ($lastMsg == "") { $lastMsg = $MessageCount };
194
195	for ($i=$lastMsg; $i >= 1 && $i> $lastMsg-100; $i--) {
196
197
198	#for each message header, provide a FORM button to
199	#invoke getmessage.pl and hand that routine the message
200	#number. Pass the login,pass,server info again since
201	#the web protocol does not provide for continued connections.
202	if ( (($i)/2) == int(($i)/2) ) {
203	print "<tr>\n";
204	} else {
205	print "<tr bgcolor=lightblue>\n";
206	}
207	print "<FORM METHOD='POST' ACTION='".$CGI_PATH_NSWM."getmsg.pl' NAME='lire$i'>\n";
208	print "<INPUT TYPE='hidden' NAME='id' VALUE=$i >\n";
209	print "<INPUT TYPE='hidden' NAME='loginname' VALUE=$loginname >\n";
210	print "<INPUT TYPE='hidden' NAME='password' VALUE=$password >\n";
211	print "<INPUT TYPE='hidden' NAME='POPserver' VALUE=$POPserver >\n";
212	print "<INPUT TYPE='hidden' NAME='cache' VALUE=$cache >\n";
213	print "</FORM>\n";
214
215
216	$sub = '';
217	$from = '';
218	$to = '';
219	$date = '';
220	$replyto = '';
221
222	#obtain each header with the head() method in POP3Client.
223
224	foreach ($pop->Head($i)){
225	#for each line within the message header retrieved, parse
226	#the From,To,Date,Subject fields by finding
227	#the appropriate strings at the beginning
228	#of each line
229	if (/^From:/ ){
230	$from = $'; #Get string following the succesful match.
231	$from =~ s/</&lt\;/; #Strip out angled brackets to prevent browsers
232	$from =~ s/>/&gt\;/; #from interpreting them as unknown HTML codes.
233	}
234	elsif (/^To:/) {
235	$to = $';
236	}
237	elsif (/^Subject:/) {
238	$sub = $';
239	}
240	elsif (/^Date:/) {
241	$date = $';
242	}
243	}
244	$date=~ s/.\,(.)\+.*/$1/;
245	print "<td><a href='.' OnClick='document.lire$i.submit();return false;'>$from </a></td><td><b>$sub </b></td><td>$date </td>";
246
247	#for each message header, also provide a FORM button to
248	#delete using inbox.pl As above, pass in the needed vars
249	#using hidden types.
250	print "<td><FORM METHOD='POST' ACTION='".$CGI_PATH_NSWM."inbox.pl' >\n";
251	print "<INPUT TYPE='hidden' NAME='loginname' VALUE=$loginname >\n";
252	print "<INPUT TYPE='hidden' NAME='password' VALUE=$password >\n";
253	print "<INPUT TYPE='hidden' NAME='POPserver' VALUE=$POPserver >\n";
254	print "<INPUT TYPE='hidden' NAME='deleteMsg' VALUE=$i >\n";
255	print "<INPUT TYPE='hidden' NAME='cache' VALUE=$cache >\n";
256	print "<INPUT TYPE='submit' VALUE='$deletetext' OnClick=\"return confirm('$deleteconfirmtext');\">\n";
257	print "</td></FORM></tr>\n";
258	}
259	}
260
261	###############################################################################
262	sub ReadParse {
263	local(*in)=@_ if @_;
264	local ($i,$key,$val);
265
266	if ($ENV{'REQUEST_METHOD'} eq "GET") {
267	$in=$ENV{'QUERY_STRING'};
268	}
269	elsif ($ENV{'REQUEST_METHOD'} eq "POST") {
270	read(STDIN,$in,$ENV{'CONTENT_LENGTH'});
271	}
272
273	@in=split(/&/,$in);
274
275	foreach $i (0 .. $#in) {
276	$in[$i] =~ s/\+/ /g;
277	($key,$val)=split(/=/,$in[$i],2);
278	$key =~ s/%(..)/pack("c",hex($1))/ge;
279	$val =~ s/%(..)/pack("c",hex($1))/ge;
280	$in{$key} .= "\0" if (defined($in{$key}));
281	$in{$key} .=$val;
282	}
283	return length($in);
284	}