1
|
|
|
<?php |
2
|
|
|
if(!defined('sugarEntry') || !sugarEntry) die('Not A Valid Entry Point'); |
3
|
|
|
/********************************************************************************* |
4
|
|
|
* SugarCRM Community Edition is a customer relationship management program developed by |
5
|
|
|
* SugarCRM, Inc. Copyright (C) 2004-2013 SugarCRM Inc. |
6
|
|
|
|
7
|
|
|
* SuiteCRM is an extension to SugarCRM Community Edition developed by Salesagility Ltd. |
8
|
|
|
* Copyright (C) 2011 - 2014 Salesagility Ltd. |
9
|
|
|
* |
10
|
|
|
* This program is free software; you can redistribute it and/or modify it under |
11
|
|
|
* the terms of the GNU Affero General Public License version 3 as published by the |
12
|
|
|
* Free Software Foundation with the addition of the following permission added |
13
|
|
|
* to Section 15 as permitted in Section 7(a): FOR ANY PART OF THE COVERED WORK |
14
|
|
|
* IN WHICH THE COPYRIGHT IS OWNED BY SUGARCRM, SUGARCRM DISCLAIMS THE WARRANTY |
15
|
|
|
* OF NON INFRINGEMENT OF THIRD PARTY RIGHTS. |
16
|
|
|
* |
17
|
|
|
* This program is distributed in the hope that it will be useful, but WITHOUT |
18
|
|
|
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS |
19
|
|
|
* FOR A PARTICULAR PURPOSE. See the GNU Affero General Public License for more |
20
|
|
|
* details. |
21
|
|
|
* |
22
|
|
|
* You should have received a copy of the GNU Affero General Public License along with |
23
|
|
|
* this program; if not, see http://www.gnu.org/licenses or write to the Free |
24
|
|
|
* Software Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA |
25
|
|
|
* 02110-1301 USA. |
26
|
|
|
* |
27
|
|
|
* You can contact SugarCRM, Inc. headquarters at 10050 North Wolfe Road, |
28
|
|
|
* SW2-130, Cupertino, CA 95014, USA. or at email address [email protected]. |
29
|
|
|
* |
30
|
|
|
* The interactive user interfaces in modified source and object code versions |
31
|
|
|
* of this program must display Appropriate Legal Notices, as required under |
32
|
|
|
* Section 5 of the GNU Affero General Public License version 3. |
33
|
|
|
* |
34
|
|
|
* In accordance with Section 7(b) of the GNU Affero General Public License version 3, |
35
|
|
|
* these Appropriate Legal Notices must retain the display of the "Powered by |
36
|
|
|
* SugarCRM" logo and "Supercharged by SuiteCRM" logo. If the display of the logos is not |
37
|
|
|
* reasonably feasible for technical reasons, the Appropriate Legal Notices must |
38
|
|
|
* display the words "Powered by SugarCRM" and "Supercharged by SuiteCRM". |
39
|
|
|
********************************************************************************/ |
40
|
|
|
|
41
|
|
|
|
42
|
|
|
|
43
|
|
|
|
44
|
|
|
|
45
|
|
|
|
46
|
|
|
require_once 'modules/Calendar/Calendar.php'; |
47
|
|
|
|
48
|
|
|
require_once 'include/HTTP_WebDAV_Server/Server.php'; |
49
|
|
|
|
50
|
|
|
|
51
|
|
|
/** |
52
|
|
|
* Filesystem access using WebDAV |
53
|
|
|
* |
54
|
|
|
* @access public |
55
|
|
|
*/ |
56
|
|
|
class HTTP_WebDAV_Server_vCal extends HTTP_WebDAV_Server |
57
|
|
|
{ |
58
|
|
|
/** |
59
|
|
|
* Root directory for WebDAV access |
60
|
|
|
* |
61
|
|
|
* Defaults to webserver document root (set by ServeRequest) |
62
|
|
|
* |
63
|
|
|
* @access private |
64
|
|
|
* @var string |
65
|
|
|
*/ |
66
|
|
|
var $base = ""; |
67
|
|
|
var $vcal_focus; |
68
|
|
|
var $vcal_type = ""; |
69
|
|
|
var $source = ""; |
70
|
|
|
var $publish_key = ""; |
71
|
|
|
|
72
|
|
|
function HTTP_WebDAV_Server_vCal() |
73
|
|
|
{ |
74
|
|
|
$this->vcal_focus = new vCal(); |
75
|
|
|
$this->user_focus = new User(); |
76
|
|
|
} |
77
|
|
|
|
78
|
|
|
|
79
|
|
|
/** |
80
|
|
|
* Serve a webdav request |
81
|
|
|
* |
82
|
|
|
* @access public |
83
|
|
|
* @param string |
84
|
|
|
*/ |
85
|
|
|
function ServeRequest($base = false) |
86
|
|
|
{ |
87
|
|
|
|
88
|
|
|
global $sugar_config,$current_language; |
89
|
|
|
|
90
|
|
|
if (!empty($sugar_config['session_dir'])) |
91
|
|
|
{ |
92
|
|
|
session_save_path($sugar_config['session_dir']); |
93
|
|
|
} |
94
|
|
|
|
95
|
|
|
session_start(); |
96
|
|
|
|
97
|
|
|
// clean_incoming_data(); |
98
|
|
|
|
99
|
|
|
|
100
|
|
|
$current_language = $sugar_config['default_language']; |
101
|
|
|
|
102
|
|
|
// special treatment for litmus compliance test |
103
|
|
|
// reply on its identifier header |
104
|
|
|
// not needed for the test itself but eases debugging |
105
|
|
|
/* |
106
|
|
|
foreach(apache_request_headers() as $key => $value) { |
107
|
|
|
if(stristr($key,"litmus")) { |
108
|
|
|
error_log("Litmus test $value"); |
109
|
|
|
header("X-Litmus-reply: ".$value); |
110
|
|
|
} |
111
|
|
|
} |
112
|
|
|
*/ |
113
|
|
|
|
114
|
|
|
// set root directory, defaults to webserver document root if not set |
115
|
|
|
if ($base) { |
116
|
|
|
$this->base = realpath($base); // TODO throw if not a directory |
117
|
|
|
} else if(!$this->base) { |
118
|
|
|
$this->base = $_SERVER['DOCUMENT_ROOT']; |
119
|
|
|
} |
120
|
|
|
|
121
|
|
|
|
122
|
|
|
$query_arr = array(); |
123
|
|
|
// set path |
124
|
|
|
if ( empty($_SERVER["PATH_INFO"])) |
125
|
|
|
{ |
126
|
|
|
$this->path = "/"; |
127
|
|
|
if(strtolower($_SERVER["REQUEST_METHOD"]) == 'get'){ |
128
|
|
|
$query_arr = $_REQUEST; |
129
|
|
|
}else{ |
130
|
|
|
parse_str($_REQUEST['parms'],$query_arr); |
131
|
|
|
} |
132
|
|
|
} else{ |
133
|
|
|
$this->path = $this->_urldecode( $_SERVER["PATH_INFO"]); |
134
|
|
|
|
135
|
|
|
if(ini_get("magic_quotes_gpc")) { |
136
|
|
|
$this->path = stripslashes($this->path); |
137
|
|
|
} |
138
|
|
|
|
139
|
|
|
$query_str = preg_replace('/^\//','',$this->path); |
140
|
|
|
$query_arr = array(); |
141
|
|
|
parse_str($query_str,$query_arr); |
142
|
|
|
} |
143
|
|
|
|
144
|
|
|
|
145
|
|
|
if ( ! empty($query_arr['type'])) |
146
|
|
|
{ |
147
|
|
|
$this->vcal_type = $query_arr['type']; |
148
|
|
|
} |
149
|
|
|
else { |
150
|
|
|
$this->vcal_type = 'vfb'; |
151
|
|
|
} |
152
|
|
|
|
153
|
|
|
if ( ! empty($query_arr['source'])) |
154
|
|
|
{ |
155
|
|
|
$this->source = $query_arr['source']; |
156
|
|
|
} |
157
|
|
|
else { |
158
|
|
|
$this->source = 'outlook'; |
159
|
|
|
} |
160
|
|
|
|
161
|
|
|
if ( ! empty($query_arr['key'])) |
162
|
|
|
{ |
163
|
|
|
$this->publish_key = $query_arr['key']; |
164
|
|
|
} |
165
|
|
|
|
166
|
|
|
// select user by email |
167
|
|
|
if ( ! empty($query_arr['email'])) |
168
|
|
|
{ |
169
|
|
|
|
170
|
|
|
|
171
|
|
|
// clean the string! |
172
|
|
|
$query_arr['email'] = clean_string($query_arr['email']); |
173
|
|
|
//get user info |
174
|
|
|
$this->user_focus->retrieve_by_email_address( $query_arr['email']); |
175
|
|
|
|
176
|
|
|
} |
177
|
|
|
// else select user by user_name |
178
|
|
|
else if ( ! empty($query_arr['user_name'])) |
179
|
|
|
{ |
180
|
|
|
// clean the string! |
181
|
|
|
$query_arr['user_name'] = clean_string($query_arr['user_name']); |
182
|
|
|
|
183
|
|
|
//get user info |
184
|
|
|
$arr = array('user_name'=>$query_arr['user_name']); |
185
|
|
|
$this->user_focus->retrieve_by_string_fields($arr); |
186
|
|
|
} |
187
|
|
|
// else select user by user id |
188
|
|
|
else if ( ! empty($query_arr['user_id'])) |
189
|
|
|
{ |
190
|
|
|
$this->user_focus->retrieve($query_arr['user_id']); |
191
|
|
|
} |
192
|
|
|
|
193
|
|
|
// if we haven't found a user, then return 404 |
194
|
|
|
if ( empty($this->user_focus->id) || $this->user_focus->id == -1) |
195
|
|
|
{ |
196
|
|
|
$this->http_status('401 Unauthorized'); |
197
|
|
|
if (!isset($query_arr['noAuth'])) { |
198
|
|
|
header('WWW-Authenticate: Basic realm="'.($this->http_auth_realm).'"'); |
199
|
|
|
} |
200
|
|
|
return; |
201
|
|
|
} |
202
|
|
|
|
203
|
|
|
// if(empty($this->user_focus->user_preferences)) |
204
|
|
|
// { |
205
|
|
|
$this->user_focus->loadPreferences(); |
206
|
|
|
// } |
207
|
|
|
|
208
|
|
|
// let the base class do all the work |
209
|
|
|
parent::ServeRequest(); |
210
|
|
|
} |
211
|
|
|
|
212
|
|
|
/** |
213
|
|
|
* No authentication is needed here |
214
|
|
|
* |
215
|
|
|
* @access private |
216
|
|
|
* @param string HTTP Authentication type (Basic, Digest, ...) |
217
|
|
|
* @param string Username |
218
|
|
|
* @param string Password |
219
|
|
|
* @return bool true on successful authentication |
220
|
|
|
*/ |
221
|
|
|
function check_auth($type, $user, $pass) |
222
|
|
|
{ |
223
|
|
|
if(isset($_SESSION['authenticated_user_id'])) { |
224
|
|
|
// allow logged in users access to freebusy info |
225
|
|
|
return true; |
226
|
|
|
} |
227
|
|
|
if(!empty($this->publish_key) && !empty($this->user_focus) && $this->user_focus->getPreference('calendar_publish_key' ) == $this->publish_key) { |
228
|
|
|
return true; |
229
|
|
|
} |
230
|
|
|
return false; |
231
|
|
|
} |
232
|
|
|
|
233
|
|
|
|
234
|
|
|
function GET() |
235
|
|
|
{ |
236
|
|
|
return true; |
237
|
|
|
} |
238
|
|
|
|
239
|
|
|
// {{{ http_GET() |
240
|
|
|
|
241
|
|
|
/** |
242
|
|
|
* GET method handler |
243
|
|
|
* |
244
|
|
|
* @param void |
245
|
|
|
* @returns void |
246
|
|
|
*/ |
247
|
|
|
function http_GET() |
248
|
|
|
{ |
249
|
|
|
|
250
|
|
|
if ($this->vcal_type == 'vfb') |
251
|
|
|
{ |
252
|
|
|
$this->http_status("200 OK"); |
253
|
|
|
echo $this->vcal_focus->get_vcal_freebusy($this->user_focus); |
254
|
|
|
} else { |
255
|
|
|
$this->http_status("404 Not Found"); |
256
|
|
|
} |
257
|
|
|
|
258
|
|
|
} |
259
|
|
|
// }}} |
260
|
|
|
|
261
|
|
|
|
262
|
|
|
// {{{ http_PUT() |
263
|
|
|
|
264
|
|
|
/** |
265
|
|
|
* PUT method handler |
266
|
|
|
* |
267
|
|
|
* @param void |
268
|
|
|
* @return void |
269
|
|
|
*/ |
270
|
|
|
function http_PUT() |
271
|
|
|
{ |
272
|
|
|
$options = Array(); |
273
|
|
|
$options["path"] = $this->path; |
274
|
|
|
$options["content_length"] = $_SERVER["CONTENT_LENGTH"]; |
275
|
|
|
|
276
|
|
|
// get the Content-type |
277
|
|
|
if (isset($_SERVER["CONTENT_TYPE"])) { |
278
|
|
|
// for now we do not support any sort of multipart requests |
279
|
|
|
if (!strncmp($_SERVER["CONTENT_TYPE"], "multipart/", 10)) { |
280
|
|
|
$this->http_status("501 not implemented"); |
281
|
|
|
echo "The service does not support mulipart PUT requests"; |
282
|
|
|
return; |
283
|
|
|
} |
284
|
|
|
$options["content_type"] = $_SERVER["CONTENT_TYPE"]; |
285
|
|
|
} else { |
286
|
|
|
// default content type if none given |
287
|
|
|
$options["content_type"] = "application/octet-stream"; |
288
|
|
|
} |
289
|
|
|
|
290
|
|
|
/* RFC 2616 2.6 says: "The recipient of the entity MUST NOT |
291
|
|
|
ignore any Content-* (e.g. Content-Range) headers that it |
292
|
|
|
does not understand or implement and MUST return a 501 |
293
|
|
|
(Not Implemented) response in such cases." |
294
|
|
|
*/ |
295
|
|
|
foreach ($_SERVER as $key => $val) { |
296
|
|
|
if (strncmp($key, "HTTP_CONTENT", 11)) continue; |
297
|
|
|
switch ($key) { |
298
|
|
|
case 'HTTP_CONTENT_ENCODING': // RFC 2616 14.11 |
299
|
|
|
// TODO support this if ext/zlib filters are available |
300
|
|
|
$this->http_status("501 not implemented"); |
301
|
|
|
echo "The service does not support '$val' content encoding"; |
302
|
|
|
return; |
303
|
|
|
|
304
|
|
|
case 'HTTP_CONTENT_LANGUAGE': // RFC 2616 14.12 |
305
|
|
|
// we assume it is not critical if this one is ignored |
306
|
|
|
// in the actual PUT implementation ... |
307
|
|
|
$options["content_language"] = $val; |
308
|
|
|
break; |
309
|
|
|
|
310
|
|
|
case 'HTTP_CONTENT_LOCATION': // RFC 2616 14.14 |
311
|
|
|
/* The meaning of the Content-Location header in PUT |
312
|
|
|
or POST requests is undefined; servers are free |
313
|
|
|
to ignore it in those cases. */ |
314
|
|
|
break; |
315
|
|
|
|
316
|
|
|
case 'HTTP_CONTENT_RANGE': // RFC 2616 14.16 |
317
|
|
|
// single byte range requests are NOT supported |
318
|
|
|
// the header format is also specified in RFC 2616 14.16 |
319
|
|
|
// TODO we have to ensure that implementations support this or send 501 instead |
320
|
|
|
$this->http_status("400 bad request"); |
321
|
|
|
echo "The service does only support single byte ranges"; |
322
|
|
|
return; |
323
|
|
|
|
324
|
|
|
case 'HTTP_CONTENT_MD5': // RFC 2616 14.15 |
325
|
|
|
// TODO: maybe we can just pretend here? |
326
|
|
|
$this->http_status("501 not implemented"); |
327
|
|
|
echo "The service does not support content MD5 checksum verification"; |
328
|
|
|
return; |
329
|
|
|
|
330
|
|
|
case 'HTTP_CONTENT_LENGTH': // RFC 2616 14.14 |
331
|
|
|
/* The meaning of the Content-Location header in PUT |
332
|
|
|
or POST requests is undefined; servers are free |
333
|
|
|
to ignore it in those cases. */ |
334
|
|
|
break; |
335
|
|
|
|
336
|
|
|
default: |
337
|
|
|
// any other unknown Content-* headers |
338
|
|
|
$this->http_status("501 not implemented"); |
339
|
|
|
echo "The service does not support '$key'"; |
340
|
|
|
return; |
341
|
|
|
} |
342
|
|
|
} |
343
|
|
|
|
344
|
|
|
// DO AUTHORIZATION for publishing Free/busy to Sugar: |
345
|
|
|
if ( empty($this->publish_key) || |
346
|
|
|
$this->publish_key != $this->user_focus->getPreference('calendar_publish_key' )) |
347
|
|
|
{ |
348
|
|
|
$this->http_status("401 not authorized"); |
349
|
|
|
return; |
350
|
|
|
|
351
|
|
|
} |
352
|
|
|
|
353
|
|
|
// retrieve |
354
|
|
|
$arr = array('user_id'=>$this->user_focus->id,'type'=>'vfb','source'=>$this->source); |
355
|
|
|
$this->vcal_focus->retrieve_by_string_fields($arr); |
356
|
|
|
|
357
|
|
|
$isUpdate = false; |
358
|
|
|
|
359
|
|
|
if ( ! empty($this->vcal_focus->user_id ) && |
360
|
|
|
$this->vcal_focus->user_id != -1 ) |
361
|
|
|
{ |
362
|
|
|
$isUpdate = true; |
363
|
|
|
} |
364
|
|
|
|
365
|
|
|
// open input stream |
366
|
|
|
$options["stream"] = fopen("php://input", "r"); |
367
|
|
|
$content = ''; |
368
|
|
|
|
369
|
|
|
// read in input stream |
370
|
|
|
while (!feof($options["stream"])) |
371
|
|
|
{ |
372
|
|
|
$content .= fread($options["stream"], 4096); |
373
|
|
|
} |
374
|
|
|
|
375
|
|
|
// set freebusy members and save |
376
|
|
|
$this->vcal_focus->content = $content; |
377
|
|
|
$this->vcal_focus->type = 'vfb'; |
378
|
|
|
$this->vcal_focus->source = $this->source; |
379
|
|
|
$focus->date_modified = null; |
380
|
|
|
$this->vcal_focus->user_id = $this->user_focus->id; |
381
|
|
|
$this->vcal_focus->save(); |
382
|
|
|
|
383
|
|
|
if ( $isUpdate ) |
384
|
|
|
{ |
385
|
|
|
$this->http_status("204 No Content"); |
386
|
|
|
} else { |
387
|
|
|
$this->http_status("201 Created"); |
388
|
|
|
} |
389
|
|
|
} |
390
|
|
|
|
391
|
|
|
/** |
392
|
|
|
* PUT method handler |
393
|
|
|
* |
394
|
|
|
* @param array parameter passing array |
395
|
|
|
* @return bool true on success |
396
|
|
|
*/ |
397
|
|
|
function PUT(&$options) |
398
|
|
|
{ |
399
|
|
|
|
400
|
|
|
} |
401
|
|
|
|
402
|
|
|
/** |
403
|
|
|
* LOCK method handler |
404
|
|
|
* |
405
|
|
|
* @param array general parameter passing array |
406
|
|
|
* @return bool true on success |
407
|
|
|
*/ |
408
|
|
|
function lock(&$options) |
409
|
|
|
{ |
410
|
|
|
|
411
|
|
|
$options["timeout"] = time()+300; // 5min. hardcoded |
412
|
|
|
return true; |
413
|
|
|
} |
414
|
|
|
|
415
|
|
|
/** |
416
|
|
|
* UNLOCK method handler |
417
|
|
|
* |
418
|
|
|
* @param array general parameter passing array |
419
|
|
|
* @return bool true on success |
420
|
|
|
*/ |
421
|
|
|
function unlock(&$options) |
422
|
|
|
{ |
423
|
|
|
|
424
|
|
|
return "200 OK"; |
425
|
|
|
} |
426
|
|
|
|
427
|
|
|
|
428
|
|
|
/** |
429
|
|
|
* checkLock() helper |
430
|
|
|
* |
431
|
|
|
* @param string resource path to check for locks |
432
|
|
|
* @return bool true on success |
433
|
|
|
*/ |
434
|
|
|
function checkLock($path) |
435
|
|
|
{ |
436
|
|
|
return false; |
437
|
|
|
|
438
|
|
|
} |
439
|
|
|
|
440
|
|
|
} |
441
|
|
|
|
442
|
|
|
|
443
|
|
|
?> |
444
|
|
|
|