XoopsModules25x /
xhelp
This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include, or for example
via PHP's auto-loading mechanism.
| 1 | <?php |
||
| 2 | // +-----------------------------------------------------------------------+ |
||
| 3 | // | Copyright (c) 2002 Richard Heyes | |
||
| 4 | // | All rights reserved. | |
||
| 5 | // | | |
||
| 6 | // | Redistribution and use in source and binary forms, with or without | |
||
| 7 | // | modification, are permitted provided that the following conditions | |
||
| 8 | // | are met: | |
||
| 9 | // | | |
||
| 10 | // | o Redistributions of source code must retain the above copyright | |
||
| 11 | // | notice, this list of conditions and the following disclaimer. | |
||
| 12 | // | o Redistributions in binary form must reproduce the above copyright | |
||
| 13 | // | notice, this list of conditions and the following disclaimer in the | |
||
| 14 | // | documentation and/or other materials provided with the distribution.| |
||
| 15 | // | o The names of the authors may not be used to endorse or promote | |
||
| 16 | // | products derived from this software without specific prior written | |
||
| 17 | // | permission. | |
||
| 18 | // | | |
||
| 19 | // | THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS | |
||
| 20 | // | "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT | |
||
| 21 | // | LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR | |
||
| 22 | // | A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT | |
||
| 23 | // | OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, | |
||
| 24 | // | SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT | |
||
| 25 | // | LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, | |
||
| 26 | // | DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY | |
||
| 27 | // | THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT | |
||
| 28 | // | (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE | |
||
| 29 | // | OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. | |
||
| 30 | // | | |
||
| 31 | // +-----------------------------------------------------------------------+ |
||
| 32 | // | Author: Richard Heyes <[email protected]> | |
||
| 33 | // +-----------------------------------------------------------------------+ |
||
| 34 | |||
| 35 | /** |
||
| 36 | * Raw mime encoding class |
||
| 37 | * |
||
| 38 | * What is it? |
||
| 39 | * This class enables you to manipulate and build |
||
| 40 | * a mime email from the ground up. |
||
| 41 | * |
||
| 42 | * Why use this instead of mime.php? |
||
| 43 | * mime.php is a userfriendly api to this class for |
||
| 44 | * people who aren't interested in the internals of |
||
| 45 | * mime mail. This class however allows full control |
||
| 46 | * over the email. |
||
| 47 | * |
||
| 48 | * Eg. |
||
| 49 | * |
||
| 50 | * // Since multipart/mixed has no real body, (the body is |
||
| 51 | * // the subpart), we set the body argument to blank. |
||
| 52 | * |
||
| 53 | * $params['content_type'] = 'multipart/mixed'; |
||
| 54 | * $email = new Mail_mimePart('', $params); |
||
| 55 | * |
||
| 56 | * // Here we add a text part to the multipart we have |
||
| 57 | * // already. Assume $body contains plain text. |
||
| 58 | * |
||
| 59 | * $params['content_type'] = 'text/plain'; |
||
| 60 | * $params['encoding'] = '7bit'; |
||
| 61 | * $text = $email->addSubPart($body, $params); |
||
| 62 | * |
||
| 63 | * // Now add an attachment. Assume $attach is |
||
| 64 | * the contents of the attachment |
||
| 65 | * |
||
| 66 | * $params['content_type'] = 'application/zip'; |
||
| 67 | * $params['encoding'] = 'base64'; |
||
| 68 | * $params['disposition'] = 'attachment'; |
||
| 69 | * $params['dfilename'] = 'example.zip'; |
||
| 70 | * $attach =& $email->addSubPart($body, $params); |
||
| 71 | * |
||
| 72 | * // Now build the email. Note that the encode |
||
| 73 | * // function returns an associative array containing two |
||
| 74 | * // elements, body and headers. You will need to add extra |
||
| 75 | * // headers, (eg. Mime-Version) before sending. |
||
| 76 | * |
||
| 77 | * $email = $message->encode(); |
||
| 78 | * $email['headers'][] = 'Mime-Version: 1.0'; |
||
| 79 | * |
||
| 80 | * |
||
| 81 | * Further examples are available at https://www.phpguru.org |
||
| 82 | * |
||
| 83 | * TODO: |
||
| 84 | * - Set encode() to return the $obj->encoded if encode() |
||
| 85 | * has already been run. Unless a flag is passed to specifically |
||
| 86 | * re-build the message. |
||
| 87 | * |
||
| 88 | * @author Richard Heyes <[email protected]> |
||
| 89 | * @version $Revision: 1.1 $ |
||
| 90 | */ |
||
| 91 | class Mail_mimePart |
||
| 92 | { |
||
| 93 | /** |
||
| 94 | * The encoding type of this part |
||
| 95 | * @var string |
||
| 96 | */ |
||
| 97 | public $_encoding; |
||
| 98 | /** |
||
| 99 | * An array of subparts |
||
| 100 | * @var array |
||
| 101 | */ |
||
| 102 | public $_subparts; |
||
| 103 | /** |
||
| 104 | * The output of this part after being built |
||
| 105 | * @var string |
||
| 106 | */ |
||
| 107 | public $_encoded; |
||
| 108 | /** |
||
| 109 | * Headers for this part |
||
| 110 | * @var array |
||
| 111 | */ |
||
| 112 | public $_headers; |
||
| 113 | /** |
||
| 114 | * The body of this part (not encoded) |
||
| 115 | * @var string |
||
| 116 | */ |
||
| 117 | public $_body; |
||
| 118 | |||
| 119 | /** |
||
| 120 | * Constructor. |
||
| 121 | * |
||
| 122 | * Sets up the object. |
||
| 123 | * |
||
| 124 | * @param string $body - The body of the mime part if any. |
||
| 125 | * @param array $params - An associative array of parameters: |
||
| 126 | * content_type - The content type for this part eg multipart/mixed |
||
| 127 | * encoding - The encoding to use, 7bit, 8bit, base64, or quoted-printable |
||
| 128 | * cid - Content ID to apply |
||
| 129 | * disposition - Content disposition, inline or attachment |
||
| 130 | * dfilename - Optional filename parameter for content disposition |
||
| 131 | * description - Content description |
||
| 132 | * charset - Character set to use |
||
| 133 | */ |
||
| 134 | public function __construct(string $body = '', array $params = []) |
||
| 135 | { |
||
| 136 | if (!defined('MAIL_MIMEPART_CRLF')) { |
||
| 137 | define('MAIL_MIMEPART_CRLF', defined('MAIL_MIME_CRLF') ? MAIL_MIME_CRLF : "\r\n", true); |
||
| 138 | } |
||
| 139 | |||
| 140 | foreach ($params as $key => $value) { |
||
| 141 | switch ($key) { |
||
| 142 | case 'content_type': |
||
| 143 | $headers['Content-Type'] = $value . (isset($charset) ? '; charset="' . $charset . '"' : ''); |
||
| 144 | break; |
||
| 145 | case 'encoding': |
||
| 146 | $this->_encoding = $value; |
||
| 147 | $headers['Content-Transfer-Encoding'] = $value; |
||
| 148 | break; |
||
| 149 | case 'cid': |
||
| 150 | $headers['Content-ID'] = '<' . $value . '>'; |
||
| 151 | break; |
||
| 152 | case 'disposition': |
||
| 153 | $headers['Content-Disposition'] = $value . (isset($dfilename) ? '; filename="' . $dfilename . '"' : ''); |
||
| 154 | break; |
||
| 155 | case 'dfilename': |
||
| 156 | if (isset($headers['Content-Disposition'])) { |
||
| 157 | $headers['Content-Disposition'] .= '; filename="' . $value . '"'; |
||
|
0 ignored issues
–
show
Comprehensibility
Best Practice
introduced
by
Loading history...
|
|||
| 158 | } else { |
||
| 159 | $dfilename = $value; |
||
| 160 | } |
||
| 161 | break; |
||
| 162 | case 'description': |
||
| 163 | $headers['Content-Description'] = $value; |
||
| 164 | break; |
||
| 165 | case 'charset': |
||
| 166 | if (isset($headers['Content-Type'])) { |
||
| 167 | $headers['Content-Type'] .= '; charset="' . $value . '"'; |
||
| 168 | } else { |
||
| 169 | $charset = $value; |
||
| 170 | } |
||
| 171 | break; |
||
| 172 | } |
||
| 173 | } |
||
| 174 | |||
| 175 | // Default content-type |
||
| 176 | if (!isset($headers['Content-Type'])) { |
||
| 177 | $headers['Content-Type'] = 'text/plain'; |
||
| 178 | } |
||
| 179 | |||
| 180 | //Default encoding |
||
| 181 | if (!isset($this->_encoding)) { |
||
| 182 | $this->_encoding = '7bit'; |
||
| 183 | } |
||
| 184 | |||
| 185 | // Assign stuff to member variables |
||
| 186 | $this->_encoded = []; |
||
|
0 ignored issues
–
show
It seems like
array() of type array is incompatible with the declared type string of property $_encoded.
Our type inference engine has found an assignment to a property that is incompatible with the declared type of that property. Either this assignment is in error or the assigned type should be added to the documentation/type hint for that property.. Loading history...
|
|||
| 187 | $this->_headers = $headers; |
||
| 188 | $this->_body = $body; |
||
| 189 | } |
||
| 190 | |||
| 191 | /** |
||
| 192 | * encode() |
||
| 193 | * |
||
| 194 | * Encodes and returns the email. Also stores |
||
| 195 | * it in the encoded member variable |
||
| 196 | * |
||
| 197 | * @return array|string An associative array containing two elements, |
||
| 198 | * body and headers. The headers element is itself |
||
| 199 | * an indexed array. |
||
| 200 | */ |
||
| 201 | public function encode() |
||
| 202 | { |
||
| 203 | $encoded = &$this->_encoded; |
||
| 204 | |||
| 205 | if (!empty($this->_subparts)) { |
||
| 206 | $boundary = '=_' . md5(uniqid((string)mt_rand(), true) . microtime()); |
||
| 207 | $this->_headers['Content-Type'] .= ';' . MAIL_MIMEPART_CRLF . "\t" . 'boundary="' . $boundary . '"'; |
||
| 208 | |||
| 209 | // Add body parts to $subparts |
||
| 210 | foreach ($this->_subparts as $iValue) { |
||
| 211 | $headers = []; |
||
| 212 | $tmp = $iValue->encode(); |
||
| 213 | foreach ($tmp['headers'] as $key => $value) { |
||
| 214 | $headers[] = $key . ': ' . $value; |
||
| 215 | } |
||
| 216 | $subparts[] = implode(MAIL_MIMEPART_CRLF, $headers) . MAIL_MIMEPART_CRLF . MAIL_MIMEPART_CRLF . $tmp['body']; |
||
| 217 | } |
||
| 218 | |||
| 219 | $encoded['body'] = '--' . $boundary . MAIL_MIMEPART_CRLF . implode('--' . $boundary . MAIL_MIMEPART_CRLF, $subparts) . '--' . $boundary . '--' . MAIL_MIMEPART_CRLF; |
||
|
0 ignored issues
–
show
Comprehensibility
Best Practice
introduced
by
|
|||
| 220 | } else { |
||
| 221 | $encoded['body'] = $this->_getEncodedData($this->_body, $this->_encoding) . MAIL_MIMEPART_CRLF; |
||
| 222 | } |
||
| 223 | |||
| 224 | // Add headers to $encoded |
||
| 225 | $encoded['headers'] = &$this->_headers; |
||
| 226 | |||
| 227 | return $encoded; |
||
| 228 | } |
||
| 229 | |||
| 230 | /** |
||
| 231 | * &addSubPart() |
||
| 232 | * |
||
| 233 | * Adds a subpart to current mime part and returns |
||
| 234 | * a reference to it |
||
| 235 | * |
||
| 236 | * @param string $body body of the subpart, if any. |
||
| 237 | * @param array $params parameters for the subpart, same |
||
| 238 | * as the $params argument for constructor. |
||
| 239 | * @return object A reference to the part you just added. It is |
||
| 240 | * crucial if using multipart/* in your subparts that |
||
| 241 | * you use =& in your script when calling this function, |
||
| 242 | * otherwise you will not be able to add further subparts. |
||
| 243 | */ |
||
| 244 | public function &addSubPart(string $body, array $params) |
||
| 245 | { |
||
| 246 | $this->_subparts[] = new self($body, $params); |
||
| 247 | |||
| 248 | return $this->_subparts[count($this->_subparts) - 1]; |
||
| 249 | } |
||
| 250 | |||
| 251 | /** |
||
| 252 | * _getEncodedData() |
||
| 253 | * |
||
| 254 | * Returns encoded data based upon encoding passed to it |
||
| 255 | * |
||
| 256 | * @param string $data data to encode. |
||
| 257 | * @param string $encoding encoding type to use, 7bit, base64, |
||
| 258 | * or quoted-printable. |
||
| 259 | * @return bool|string| |
||
| 260 | */ |
||
| 261 | public function _getEncodedData(string $data, string $encoding) |
||
| 262 | { |
||
| 263 | switch ($encoding) { |
||
| 264 | case '8bit': |
||
| 265 | case '7bit': |
||
| 266 | return $data; |
||
| 267 | case 'quoted-printable': |
||
| 268 | return $this->_quotedPrintableEncode($data); |
||
| 269 | case 'base64': |
||
| 270 | return rtrim(chunk_split(base64_encode($data), 76, MAIL_MIMEPART_CRLF)); |
||
| 271 | default: |
||
| 272 | return $data; |
||
| 273 | } |
||
| 274 | } |
||
| 275 | |||
| 276 | /** |
||
| 277 | * quoteadPrintableEncode() |
||
| 278 | * |
||
| 279 | * Encodes data to quoted-printable standard. |
||
| 280 | * |
||
| 281 | * @param string $input data to encode |
||
| 282 | * @param int $line_max Optional max line length. Should |
||
| 283 | * not be more than 76 chars |
||
| 284 | * |
||
| 285 | * @return bool|string |
||
| 286 | */ |
||
| 287 | public function _quotedPrintableEncode(string $input, int $line_max = 76) |
||
| 288 | { |
||
| 289 | $lines = preg_split("/\r?\n/", $input); |
||
| 290 | $eol = MAIL_MIMEPART_CRLF; |
||
| 291 | $escape = '='; |
||
| 292 | $output = ''; |
||
| 293 | |||
| 294 | while ([, $line] = each($lines)) { |
||
| 295 | $linlen = mb_strlen($line); |
||
| 296 | $newline = ''; |
||
| 297 | |||
| 298 | for ($i = 0; $i < $linlen; ++$i) { |
||
| 299 | $char = mb_substr($line, $i, 1); |
||
| 300 | $dec = ord($char); |
||
| 301 | |||
| 302 | if ((32 == $dec) && ($i == ($linlen - 1))) { // convert space at eol only |
||
| 303 | $char = '=20'; |
||
| 304 | } elseif (9 == $dec) { |
||
| 305 | // Do nothing if a tab. |
||
| 306 | } elseif ((61 == $dec) || ($dec < 32) || ($dec > 126)) { |
||
| 307 | $char = $escape . \mb_strtoupper(sprintf('%02s', dechex($dec))); |
||
| 308 | } |
||
| 309 | |||
| 310 | if ((mb_strlen($newline) + mb_strlen($char)) >= $line_max) { // MAIL_MIMEPART_CRLF is not counted |
||
| 311 | $output .= $newline |
||
| 312 | . $escape |
||
| 313 | . $eol; // soft line break; " =\r\n" is okay |
||
| 314 | $newline = ''; |
||
| 315 | } |
||
| 316 | $newline .= $char; |
||
| 317 | } // end of for |
||
| 318 | $output .= $newline . $eol; |
||
| 319 | } |
||
| 320 | $output = mb_substr($output, 0, -1 * mb_strlen($eol)); // Don't want last crlf |
||
| 321 | |||
| 322 | return $output; |
||
| 323 | } |
||
| 324 | } // End of class |
||
| 325 |