quarantine.php

   1 <?php
   2 /* vim: set ts=4 tw=0 sw=4 noet: */
   3         require_once 'config.php';
   4         require_once $CFG->root . 'lib/db_factory.php';
   5         require_once $CFG->root . 'lib/utils.inc.php';
   6
   7         function error($error) {
   8                 $util = Utils::getInstance();
   9                 $util->setHeading("Error");
  10                 echo $util->getHeader();
  11                 echo $util->getHeading();
  12                 echo "<p style=\"color: red;\">$error</p>";
  13                 echo '<a href="index.php">Return</a>';
  14                 echo $util->getFooter();
  15         }
  16
  17         $util = Utils::getInstance();
  18         $loggedIn = $util->isLoggedIn();
  19         $request = isset($_GET['op']) ? $_GET['op'] : '';
  20         if ($loggedIn && isset($_GET['id'])) {
  21         $mail_id = urldecode($_GET['id']);
  22                 $mail = unserialize($_SESSION['mailInfo']["$mail_id"]);
  23                 $secret_id = $mail->secret_id;
  24                 $recipient = $mail->recipient;
  25
  26                 $query = array();
  27                 if ($request == 'release') {
  28                         $amavisserver = $CFG->amavisd_db_host;
  29                         $policy_port = $CFG->amavis_policy_port;
  30
  31                         $fp = fsockopen($amavisserver, $policy_port, $errno, $errstr, 30);
  32                         if (!$fp) {
  33                                 error("$errstr ($errno)");
  34                                 exit;
  35                         }
  36                         $out = "request=" . $request . "\r\n";
  37                         $out .= "mail_id=" . $mail_id . "\r\n";
  38                         $out .= "recipient=" . $recipient . "\r\n";
  39                         $out .= "secret_id=" . $secret_id . "\r\n\r\n";
  40                         fwrite($fp, $out);
  41                         $response = fread($fp, 8192);
  42                         fclose($fp);
  43                         $response = urldecode($response);
  44                         if (! preg_match("/^setreply=250\s+([\d\.]+)\s+(.*)/", $response, $matches)) {
  45                                 error("Request to release failed [$out][$response]");
  46                                 exit;
  47                         }
  48                         if ($matches[1] != '2.0.0') {
  49                                 error($matches[2]);
  50                                 exit;
  51                         }
  52
  53                         $query[] = "UPDATE msgrcpt SET rs = 'R' WHERE mail_id = '$mail_id'";
  54                 } else if ($request == 'delete') {
  55                         $query[] = "UPDATE msgrcpt SET rs = 'D' WHERE mail_id = '$mail_id'";
  56                 } else {
  57                         error("Unknown operation [$request]");
  58                         exit;
  59                 }
  60                 $success = $DB->update($query);
  61                 if (! $success) {
  62                         error("Message not released, contact administrator [$query]");
  63                         exit;
  64                 }
  65                 header('Location: index.php');
  66     } else if ($loggedIn && $request == 'purge') {
  67                 $marked = unserialize($_SESSION['marked']);
  68                 unset($_SESSION['marked']);
  69                 $query = array();
  70                 $error = array();
  71                 foreach ($marked as $mail_id) {
  72             $query[] = "delete from msgs where mail_id = '$mail_id'";
  73             $query[] = "delete from msgrcpt where mail_id = '$mail_id'";
  74             $query[] = "delete from quarantine where mail_id = '$mail_id'";
  75                 $success = $DB->update($query);
  76                 if (! $success) {
  77                 $error[] = $mail_id;
  78                         }
  79                 }
  80                 if (count($error) > 0) {
  81                         $str = implode(', ', $error);
  82                 error("The following messages was not purged [$str], contact administrator");
  83                 exit;
  84                 }
  85                 header('Location: index.php');
  86         } else if ($loggedIn) {
  87         header('Location: index.php');
  88     } else {
  89         header('Location: auth.php');
  90     }
  91
  92 ?>
  93