2017-05-23 09:36:59 +02:00
< ? php
2018-08-03 20:31:33 +02:00
function mailbox ( $_action , $_type , $_data = null , $_extra = null ) {
2018-07-11 22:13:43 +02:00
global $pdo ;
global $redis ;
global $lang ;
2018-10-03 11:28:25 +02:00
global $MAILBOX_DEFAULT_ATTRIBUTES ;
2018-08-03 20:31:33 +02:00
$_data_log = $_data ;
! isset ( $_data_log [ 'password' ]) ? : $_data_log [ 'password' ] = '*' ;
! isset ( $_data_log [ 'password2' ]) ? : $_data_log [ 'password2' ] = '*' ;
2017-05-23 09:36:59 +02:00
switch ( $_action ) {
case 'add' :
switch ( $_type ) {
case 'time_limited_alias' :
2017-08-18 22:18:14 +02:00
if ( ! isset ( $_SESSION [ 'acl' ][ 'spam_alias' ]) || $_SESSION [ 'acl' ][ 'spam_alias' ] != " 1 " ) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-08-18 22:18:14 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'access_denied'
2017-08-18 22:18:14 +02:00
);
return false ;
}
2017-05-23 09:36:59 +02:00
if ( isset ( $_data [ 'username' ]) && filter_var ( $_data [ 'username' ], FILTER_VALIDATE_EMAIL )) {
if ( ! hasMailboxObjectAccess ( $_SESSION [ 'mailcow_cc_username' ], $_SESSION [ 'mailcow_cc_role' ], $_data [ 'username' ])) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'access_denied'
2017-05-23 09:36:59 +02:00
);
return false ;
}
else {
$username = $_data [ 'username' ];
}
}
else {
$username = $_SESSION [ 'mailcow_cc_username' ];
}
if ( ! is_numeric ( $_data [ " validity " ]) || $_data [ " validity " ] > 672 ) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'validity_missing'
2017-05-23 09:36:59 +02:00
);
return false ;
}
2018-08-13 23:20:40 +02:00
$stmt = $pdo -> prepare ( " SELECT `domain` FROM `mailbox` WHERE `username` = :username " );
$stmt -> execute ( array ( ':username' => $_SESSION [ 'mailcow_cc_username' ]));
$domain = $stmt -> fetch ( PDO :: FETCH_ASSOC )[ 'domain' ];
2017-05-23 09:36:59 +02:00
$validity = strtotime ( " + " . $_data [ " validity " ] . " hour " );
$letters = 'abcefghijklmnopqrstuvwxyz1234567890' ;
$random_name = substr ( str_shuffle ( $letters ), 0 , 24 );
2018-08-13 23:20:40 +02:00
$stmt = $pdo -> prepare ( " INSERT INTO `spamalias` (`address`, `goto`, `validity`) VALUES
( : address , : goto , : validity ) " );
$stmt -> execute ( array (
':address' => $random_name . '@' . $domain ,
':goto' => $username ,
':validity' => $validity
));
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'success' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => array ( 'mailbox_modified' , htmlspecialchars ( $_SESSION [ 'mailcow_cc_username' ]))
2017-05-23 09:36:59 +02:00
);
break ;
2017-11-03 20:37:24 +01:00
case 'filter' :
$sieve = new Sieve\SieveParser ();
if ( ! isset ( $_SESSION [ 'acl' ][ 'filters' ]) || $_SESSION [ 'acl' ][ 'filters' ] != " 1 " ) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-11-03 20:37:24 +01:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'access_denied'
2017-11-03 20:37:24 +01:00
);
return false ;
}
if ( isset ( $_data [ 'username' ]) && filter_var ( $_data [ 'username' ], FILTER_VALIDATE_EMAIL )) {
if ( ! hasMailboxObjectAccess ( $_SESSION [ 'mailcow_cc_username' ], $_SESSION [ 'mailcow_cc_role' ], $_data [ 'username' ])) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-11-03 20:37:24 +01:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'access_denied'
2017-11-03 20:37:24 +01:00
);
return false ;
}
else {
$username = $_data [ 'username' ];
}
}
elseif ( $_SESSION [ 'mailcow_cc_role' ] == " user " ) {
$username = $_SESSION [ 'mailcow_cc_username' ];
}
else {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-11-03 20:37:24 +01:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'no_user_defined'
2017-11-03 20:37:24 +01:00
);
return false ;
}
$active = intval ( $_data [ 'active' ]);
$script_data = $_data [ 'script_data' ];
$script_desc = $_data [ 'script_desc' ];
$filter_type = $_data [ 'filter_type' ];
if ( empty ( $script_data )) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-11-03 20:37:24 +01:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'script_empty'
2017-11-03 20:37:24 +01:00
);
return false ;
}
try {
$sieve -> parse ( $script_data );
}
catch ( Exception $e ) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-11-03 20:37:24 +01:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => array ( 'sieve_error' , $e -> getMessage ())
2017-11-03 20:37:24 +01:00
);
return false ;
}
if ( empty ( $script_data ) || empty ( $script_desc )) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-11-03 20:37:24 +01:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'value_missing'
2017-11-03 20:37:24 +01:00
);
return false ;
}
if ( $filter_type != 'postfilter' && $filter_type != 'prefilter' ) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-11-03 20:37:24 +01:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'filter_type'
2017-11-03 20:37:24 +01:00
);
return false ;
}
if ( ! empty ( $active )) {
$script_name = 'active' ;
2018-08-13 23:20:40 +02:00
$stmt = $pdo -> prepare ( " UPDATE `sieve_filters` SET `script_name` = 'inactive' WHERE `username` = :username AND `filter_type` = :filter_type " );
2017-11-03 20:37:24 +01:00
$stmt -> execute ( array (
':username' => $username ,
':filter_type' => $filter_type
));
}
2018-08-13 23:20:40 +02:00
else {
$script_name = 'inactive' ;
2017-11-03 20:37:24 +01:00
}
2018-08-13 23:20:40 +02:00
$stmt = $pdo -> prepare ( " INSERT INTO `sieve_filters` (`username`, `script_data`, `script_desc`, `script_name`, `filter_type`)
VALUES ( : username , : script_data , : script_desc , : script_name , : filter_type ) " );
$stmt -> execute ( array (
':username' => $username ,
':script_data' => $script_data ,
':script_desc' => $script_desc ,
':script_name' => $script_name ,
':filter_type' => $filter_type
));
$_SESSION [ 'return' ][] = array (
2017-11-03 20:37:24 +01:00
'type' => 'success' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => array ( 'mailbox_modified' , $username )
2017-11-03 20:37:24 +01:00
);
break ;
2017-05-23 09:36:59 +02:00
case 'syncjob' :
2017-08-18 22:18:14 +02:00
if ( ! isset ( $_SESSION [ 'acl' ][ 'syncjobs' ]) || $_SESSION [ 'acl' ][ 'syncjobs' ] != " 1 " ) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-08-18 22:18:14 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'access_denied'
2017-08-18 22:18:14 +02:00
);
return false ;
}
2017-05-23 09:36:59 +02:00
if ( isset ( $_data [ 'username' ]) && filter_var ( $_data [ 'username' ], FILTER_VALIDATE_EMAIL )) {
if ( ! hasMailboxObjectAccess ( $_SESSION [ 'mailcow_cc_username' ], $_SESSION [ 'mailcow_cc_role' ], $_data [ 'username' ])) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'access_denied'
2017-05-23 09:36:59 +02:00
);
return false ;
}
else {
$username = $_data [ 'username' ];
}
}
2017-07-29 10:32:17 +02:00
elseif ( $_SESSION [ 'mailcow_cc_role' ] == " user " ) {
2017-05-23 09:36:59 +02:00
$username = $_SESSION [ 'mailcow_cc_username' ];
}
2017-07-29 10:32:17 +02:00
else {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-07-29 10:32:17 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'no_user_defined'
2017-07-29 10:32:17 +02:00
);
return false ;
}
2018-07-27 22:19:59 +02:00
$active = intval ( $_data [ 'active' ]);
$subscribeall = intval ( $_data [ 'subscribeall' ]);
2018-01-24 12:59:04 +01:00
$delete2duplicates = intval ( $_data [ 'delete2duplicates' ]);
$delete1 = intval ( $_data [ 'delete1' ]);
$delete2 = intval ( $_data [ 'delete2' ]);
2018-07-27 22:19:59 +02:00
$timeout1 = intval ( $_data [ 'timeout1' ]);
$timeout2 = intval ( $_data [ 'timeout2' ]);
2018-01-24 12:59:04 +01:00
$skipcrossduplicates = intval ( $_data [ 'skipcrossduplicates' ]);
$automap = intval ( $_data [ 'automap' ]);
$port1 = $_data [ 'port1' ];
$host1 = strtolower ( $_data [ 'host1' ]);
$password1 = $_data [ 'password1' ];
$exclude = $_data [ 'exclude' ];
$maxage = $_data [ 'maxage' ];
$maxbytespersecond = $_data [ 'maxbytespersecond' ];
$subfolder2 = $_data [ 'subfolder2' ];
$user1 = $_data [ 'user1' ];
$mins_interval = $_data [ 'mins_interval' ];
2018-07-27 22:19:59 +02:00
$enc1 = $_data [ 'enc1' ];
$custom_params = ( empty ( trim ( $_data [ 'custom_params' ]))) ? '' : trim ( $_data [ 'custom_params' ]);
2017-05-23 09:36:59 +02:00
if ( empty ( $subfolder2 )) {
$subfolder2 = " " ;
}
2018-07-27 22:19:59 +02:00
if ( ! isset ( $maxage ) || ! filter_var ( $maxage , FILTER_VALIDATE_INT , array ( 'options' => array ( 'min_range' => 1 , 'max_range' => 32000 )))) {
2017-05-23 09:36:59 +02:00
$maxage = " 0 " ;
}
2018-07-27 22:19:59 +02:00
if ( ! isset ( $timeout1 ) || ! filter_var ( $timeout1 , FILTER_VALIDATE_INT , array ( 'options' => array ( 'min_range' => 1 , 'max_range' => 32000 )))) {
$timeout1 = " 600 " ;
}
if ( ! isset ( $timeout2 ) || ! filter_var ( $timeout2 , FILTER_VALIDATE_INT , array ( 'options' => array ( 'min_range' => 1 , 'max_range' => 32000 )))) {
$timeout2 = " 600 " ;
}
2018-01-24 12:59:04 +01:00
if ( ! isset ( $maxbytespersecond ) || ! filter_var ( $maxbytespersecond , FILTER_VALIDATE_INT , array ( 'options' => array ( 'min_range' => 1 , 'max_range' => 125000000 )))) {
$maxbytespersecond = " 0 " ;
}
2017-05-23 09:36:59 +02:00
if ( ! filter_var ( $port1 , FILTER_VALIDATE_INT , array ( 'options' => array ( 'min_range' => 1 , 'max_range' => 65535 )))) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'access_denied'
2017-05-23 09:36:59 +02:00
);
return false ;
}
2018-01-15 19:53:09 +01:00
if ( ! filter_var ( $mins_interval , FILTER_VALIDATE_INT , array ( 'options' => array ( 'min_range' => 1 , 'max_range' => 3600 )))) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'access_denied'
2017-05-23 09:36:59 +02:00
);
return false ;
}
if ( ! is_valid_domain_name ( $host1 )) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'access_denied'
2017-05-23 09:36:59 +02:00
);
return false ;
}
if ( $enc1 != " TLS " && $enc1 != " SSL " && $enc1 != " PLAIN " ) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'access_denied'
2017-05-23 09:36:59 +02:00
);
return false ;
}
if ( @ preg_match ( " / " . $exclude . " / " , null ) === false ) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'access_denied'
2017-05-23 09:36:59 +02:00
);
return false ;
}
2018-08-13 23:20:40 +02:00
$stmt = $pdo -> prepare ( " SELECT '1' FROM `imapsync`
WHERE `user2` = : user2 AND `user1` = : user1 AND `host1` = : host1 " );
$stmt -> execute ( array ( ':user1' => $user1 , ':user2' => $username , ':host1' => $host1 ));
$num_results = count ( $stmt -> fetchAll ( PDO :: FETCH_ASSOC ));
2017-05-23 09:36:59 +02:00
if ( $num_results != 0 ) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => array ( 'object_exists' , htmlspecialchars ( $host1 . ' / ' . $user1 ))
2017-05-23 09:36:59 +02:00
);
return false ;
}
2018-08-13 23:20:40 +02:00
$stmt = $pdo -> prepare ( " INSERT INTO `imapsync` (`user2`, `exclude`, `delete1`, `delete2`, `timeout1`, `timeout2`, `automap`, `skipcrossduplicates`, `maxbytespersecond`, `subscribeall`, `maxage`, `subfolder2`, `host1`, `authmech1`, `user1`, `password1`, `mins_interval`, `port1`, `enc1`, `delete2duplicates`, `custom_params`, `active`)
VALUES ( : user2 , : exclude , : delete1 , : delete2 , : timeout1 , : timeout2 , : automap , : skipcrossduplicates , : maxbytespersecond , : subscribeall , : maxage , : subfolder2 , : host1 , : authmech1 , : user1 , : password1 , : mins_interval , : port1 , : enc1 , : delete2duplicates , : custom_params , : active ) " );
$stmt -> execute ( array (
':user2' => $username ,
':custom_params' => $custom_params ,
':exclude' => $exclude ,
':maxage' => $maxage ,
':delete1' => $delete1 ,
':delete2' => $delete2 ,
':timeout1' => $timeout1 ,
':timeout2' => $timeout2 ,
':automap' => $automap ,
':skipcrossduplicates' => $skipcrossduplicates ,
':maxbytespersecond' => $maxbytespersecond ,
':subscribeall' => $subscribeall ,
':subfolder2' => $subfolder2 ,
':host1' => $host1 ,
':authmech1' => 'PLAIN' ,
':user1' => $user1 ,
':password1' => $password1 ,
':mins_interval' => $mins_interval ,
':port1' => $port1 ,
':enc1' => $enc1 ,
':delete2duplicates' => $delete2duplicates ,
':active' => $active ,
));
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'success' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => array ( 'mailbox_modified' , $username )
2017-05-23 09:36:59 +02:00
);
break ;
case 'domain' :
if ( $_SESSION [ 'mailcow_cc_role' ] != " admin " ) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'access_denied'
2017-05-23 09:36:59 +02:00
);
return false ;
}
$domain = idn_to_ascii ( strtolower ( trim ( $_data [ 'domain' ])));
$description = $_data [ 'description' ];
$aliases = $_data [ 'aliases' ];
$mailboxes = $_data [ 'mailboxes' ];
$maxquota = $_data [ 'maxquota' ];
2018-01-11 22:40:43 +01:00
$restart_sogo = $_data [ 'restart_sogo' ];
2017-05-23 09:36:59 +02:00
$quota = $_data [ 'quota' ];
if ( $maxquota > $quota ) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'mailbox_quota_exceeds_domain_quota'
2017-05-23 09:36:59 +02:00
);
return false ;
}
if ( $maxquota == " 0 " || empty ( $maxquota )) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'maxquota_empty'
2017-05-23 09:36:59 +02:00
);
return false ;
}
$active = intval ( $_data [ 'active' ]);
$relay_all_recipients = intval ( $_data [ 'relay_all_recipients' ]);
$backupmx = intval ( $_data [ 'backupmx' ]);
( $relay_all_recipients == 1 ) ? $backupmx = '1' : null ;
if ( ! is_valid_domain_name ( $domain )) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'domain_invalid'
2017-05-23 09:36:59 +02:00
);
return false ;
}
foreach ( array ( $quota , $maxquota , $mailboxes , $aliases ) as $data ) {
if ( ! is_numeric ( $data )) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => array ( 'object_is_not_numeric' , htmlspecialchars ( $data ))
2017-05-23 09:36:59 +02:00
);
return false ;
}
}
2018-08-13 23:20:40 +02:00
$stmt = $pdo -> prepare ( " SELECT `domain` FROM `domain`
WHERE `domain` = : domain " );
$stmt -> execute ( array ( ':domain' => $domain ));
$num_results = count ( $stmt -> fetchAll ( PDO :: FETCH_ASSOC ));
$stmt = $pdo -> prepare ( " SELECT `alias_domain` FROM `alias_domain`
WHERE `alias_domain` = : domain " );
$stmt -> execute ( array ( ':domain' => $domain ));
$num_results = $num_results + count ( $stmt -> fetchAll ( PDO :: FETCH_ASSOC ));
2017-05-23 09:36:59 +02:00
if ( $num_results != 0 ) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => array ( 'domain_exists' , htmlspecialchars ( $domain ))
2017-05-23 09:36:59 +02:00
);
return false ;
}
2018-07-29 00:38:22 +02:00
if ( $domain == getenv ( 'MAILCOW_HOSTNAME' )) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2018-05-03 22:42:31 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'domain_cannot_match_hostname'
2018-05-03 22:42:31 +02:00
);
return false ;
}
2018-08-13 23:20:40 +02:00
$stmt = $pdo -> prepare ( " INSERT INTO `domain` (`domain`, `description`, `aliases`, `mailboxes`, `maxquota`, `quota`, `backupmx`, `active`, `relay_all_recipients`)
VALUES ( : domain , : description , : aliases , : mailboxes , : maxquota , : quota , : backupmx , : active , : relay_all_recipients ) " );
$stmt -> execute ( array (
':domain' => $domain ,
':description' => $description ,
':aliases' => $aliases ,
':mailboxes' => $mailboxes ,
':maxquota' => $maxquota ,
':quota' => $quota ,
':backupmx' => $backupmx ,
':active' => $active ,
':relay_all_recipients' => $relay_all_recipients
));
2017-05-23 09:36:59 +02:00
try {
2018-08-13 23:20:40 +02:00
$redis -> hSet ( 'DOMAIN_MAP' , $domain , 1 );
2017-05-23 09:36:59 +02:00
}
2018-08-13 23:20:40 +02:00
catch ( RedisException $e ) {
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
2018-08-13 23:20:40 +02:00
'msg' => array ( 'redis_error' , $e )
2017-05-23 09:36:59 +02:00
);
return false ;
}
2018-08-21 21:06:22 +02:00
if ( ! empty ( intval ( $_data [ 'rl_value' ]))) {
2018-08-21 21:23:06 +02:00
ratelimit ( 'edit' , 'domain' , array ( 'rl_value' => $_data [ 'rl_value' ], 'rl_frame' => $_data [ 'rl_frame' ], 'object' => $domain ));
2018-08-21 21:06:22 +02:00
}
2018-08-13 23:20:40 +02:00
if ( ! empty ( $restart_sogo )) {
$restart_reponse = json_decode ( docker ( 'post' , 'sogo-mailcow' , 'restart' ), true );
if ( $restart_reponse [ 'type' ] == " success " ) {
$_SESSION [ 'return' ][] = array (
'type' => 'success' ,
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => array ( 'domain_added' , htmlspecialchars ( $domain ))
);
return true ;
}
else {
$_SESSION [ 'return' ][] = array (
'type' => 'warning' ,
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'domain_added_sogo_failed'
);
return false ;
}
}
$_SESSION [ 'return' ][] = array (
'type' => 'success' ,
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => array ( 'domain_added' , htmlspecialchars ( $domain ))
);
return true ;
2017-05-23 09:36:59 +02:00
break ;
case 'alias' :
$addresses = array_map ( 'trim' , preg_split ( " /( |,|;| \n )/ " , $_data [ 'address' ]));
$gotos = array_map ( 'trim' , preg_split ( " /( |,|;| \n )/ " , $_data [ 'goto' ]));
$active = intval ( $_data [ 'active' ]);
2017-09-16 13:17:37 +02:00
$goto_null = intval ( $_data [ 'goto_null' ]);
2018-07-29 00:38:22 +02:00
$goto_spam = intval ( $_data [ 'goto_spam' ]);
$goto_ham = intval ( $_data [ 'goto_ham' ]);
2017-05-23 09:36:59 +02:00
if ( empty ( $addresses [ 0 ])) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'alias_empty'
2017-05-23 09:36:59 +02:00
);
return false ;
}
2018-07-29 23:04:54 +02:00
if ( empty ( $gotos [ 0 ]) && ( $goto_null + $goto_spam + $goto_ham == 0 )) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'goto_empty'
2017-05-23 09:36:59 +02:00
);
return false ;
}
2017-09-16 13:17:37 +02:00
if ( $goto_null == " 1 " ) {
$goto = " null@localhost " ;
}
2018-07-29 00:38:22 +02:00
elseif ( $goto_spam == " 1 " ) {
$goto = " spam@localhost " ;
}
elseif ( $goto_ham == " 1 " ) {
$goto = " ham@localhost " ;
}
2017-09-16 13:17:37 +02:00
else {
2018-08-13 23:20:40 +02:00
foreach ( $gotos as $i => & $goto ) {
2017-09-16 13:17:37 +02:00
if ( empty ( $goto )) {
continue ;
}
$goto_domain = idn_to_ascii ( substr ( strstr ( $goto , '@' ), 1 ));
$goto_local_part = strstr ( $goto , '@' , true );
$goto = $goto_local_part . '@' . $goto_domain ;
$stmt = $pdo -> prepare ( " SELECT `username` FROM `mailbox`
WHERE `kind` REGEXP 'location|thing|group'
AND `username` = : goto " );
$stmt -> execute ( array ( ':goto' => $goto ));
$num_results = count ( $stmt -> fetchAll ( PDO :: FETCH_ASSOC ));
if ( $num_results != 0 ) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-09-16 13:17:37 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
2018-08-13 23:20:40 +02:00
'msg' => array ( 'goto_invalid' , htmlspecialchars ( $goto ))
2017-09-16 13:17:37 +02:00
);
2018-08-13 23:20:40 +02:00
unset ( $gotos [ $i ]);
continue ;
2017-09-16 13:17:37 +02:00
}
if ( ! filter_var ( $goto , FILTER_VALIDATE_EMAIL ) === true ) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-09-16 13:17:37 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
2018-08-13 23:20:40 +02:00
'msg' => array ( 'goto_invalid' , htmlspecialchars ( $goto ))
2017-09-16 13:17:37 +02:00
);
2018-08-13 23:20:40 +02:00
unset ( $gotos [ $i ]);
continue ;
2017-09-16 13:17:37 +02:00
}
2017-06-21 23:27:01 +02:00
}
2017-09-16 13:17:37 +02:00
$gotos = array_filter ( $gotos );
2018-08-13 23:20:40 +02:00
if ( empty ( $gotos )) { return false ; }
2017-09-16 13:17:37 +02:00
$goto = implode ( " , " , $gotos );
2017-06-21 23:27:01 +02:00
}
2017-05-23 09:36:59 +02:00
foreach ( $addresses as $address ) {
if ( empty ( $address )) {
continue ;
}
2017-06-21 23:27:01 +02:00
if ( in_array ( $address , $gotos )) {
continue ;
}
2018-02-17 09:50:58 +01:00
$domain = idn_to_ascii ( substr ( strstr ( $address , '@' ), 1 ));
$local_part = strstr ( $address , '@' , true );
2017-12-09 13:17:15 +01:00
$address = $local_part . '@' . $domain ;
2018-08-13 23:20:40 +02:00
$domaindata = mailbox ( 'get' , 'domain_details' , $domain );
if ( is_array ( $domaindata ) && $domaindata [ 'aliases_left' ] == " 0 " ) {
$_SESSION [ 'return' ][] = array (
'type' => 'danger' ,
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'max_alias_exceeded'
);
return false ;
}
2017-05-23 09:36:59 +02:00
$stmt = $pdo -> prepare ( " SELECT `address` FROM `alias`
2017-12-09 13:17:15 +01:00
WHERE `address` = : address OR `address` IN (
SELECT `username` FROM `mailbox` , `alias_domain`
WHERE (
`alias_domain` . `alias_domain` = : address_d
AND `mailbox` . `username` = CONCAT ( : address_l , '@' , alias_domain . target_domain ))) " );
$stmt -> execute ( array (
':address' => $address ,
':address_l' => $local_part ,
':address_d' => $domain
));
2017-05-23 09:36:59 +02:00
$num_results = count ( $stmt -> fetchAll ( PDO :: FETCH_ASSOC ));
if ( $num_results != 0 ) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => array ( 'is_alias_or_mailbox' , htmlspecialchars ( $address ))
2017-05-23 09:36:59 +02:00
);
return false ;
}
2018-08-13 23:20:40 +02:00
$stmt = $pdo -> prepare ( " SELECT `domain` FROM `domain`
WHERE `domain` = : domain1 OR `domain` = ( SELECT `target_domain` FROM `alias_domain` WHERE `alias_domain` = : domain2 ) " );
$stmt -> execute ( array ( ':domain1' => $domain , ':domain2' => $domain ));
$num_results = count ( $stmt -> fetchAll ( PDO :: FETCH_ASSOC ));
if ( $num_results == 0 ) {
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
2018-08-13 23:20:40 +02:00
'msg' => array ( 'domain_not_found' , htmlspecialchars ( $domain ))
2017-05-23 09:36:59 +02:00
);
return false ;
}
2018-08-13 23:20:40 +02:00
$stmt = $pdo -> prepare ( " SELECT `address` FROM `spamalias`
WHERE `address` = : address " );
$stmt -> execute ( array ( ':address' => $address ));
$num_results = count ( $stmt -> fetchAll ( PDO :: FETCH_ASSOC ));
if ( $num_results != 0 ) {
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
2018-08-13 23:20:40 +02:00
'msg' => array ( 'is_spam_alias' , htmlspecialchars ( $address ))
2017-05-23 09:36:59 +02:00
);
return false ;
}
if (( ! filter_var ( $address , FILTER_VALIDATE_EMAIL ) === true ) && ! empty ( $local_part )) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'alias_invalid'
2017-05-23 09:36:59 +02:00
);
return false ;
}
if ( ! hasDomainAccess ( $_SESSION [ 'mailcow_cc_username' ], $_SESSION [ 'mailcow_cc_role' ], $domain )) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'access_denied'
2017-05-23 09:36:59 +02:00
);
return false ;
}
2018-08-13 23:20:40 +02:00
$stmt = $pdo -> prepare ( " INSERT INTO `alias` (`address`, `goto`, `domain`, `active`)
VALUES ( : address , : goto , : domain , : active ) " );
if ( ! filter_var ( $address , FILTER_VALIDATE_EMAIL ) === true ) {
$stmt -> execute ( array (
':address' => '@' . $domain ,
':goto' => $goto ,
':domain' => $domain ,
':active' => $active
));
2017-05-23 09:36:59 +02:00
}
2018-08-13 23:20:40 +02:00
else {
$stmt -> execute ( array (
':address' => $address ,
':goto' => $goto ,
':domain' => $domain ,
':active' => $active
));
2017-05-23 09:36:59 +02:00
}
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
'type' => 'success' ,
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => array ( 'alias_added' , $address )
);
2017-05-23 09:36:59 +02:00
}
break ;
case 'alias_domain' :
$active = intval ( $_data [ 'active' ]);
2017-06-12 20:21:31 +02:00
$alias_domains = array_map ( 'trim' , preg_split ( " /( |,|;| \n )/ " , $_data [ 'alias_domain' ]));
2018-08-13 23:20:40 +02:00
$alias_domains = array_filter ( $alias_domains );
2017-06-12 20:21:31 +02:00
$target_domain = idn_to_ascii ( strtolower ( trim ( $_data [ 'target_domain' ])));
2017-05-23 09:36:59 +02:00
if ( ! is_valid_domain_name ( $target_domain )) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'target_domain_invalid'
2017-05-23 09:36:59 +02:00
);
return false ;
}
if ( ! hasDomainAccess ( $_SESSION [ 'mailcow_cc_username' ], $_SESSION [ 'mailcow_cc_role' ], $target_domain )) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'access_denied'
2017-05-23 09:36:59 +02:00
);
return false ;
}
2018-08-23 08:49:02 +02:00
foreach ( $alias_domains as $i => $alias_domain ) {
2017-06-12 20:21:31 +02:00
$alias_domain = idn_to_ascii ( strtolower ( trim ( $alias_domain )));
if ( ! is_valid_domain_name ( $alias_domain )) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
2018-08-13 23:20:40 +02:00
'msg' => array ( 'alias_domain_invalid' , htmlspecialchars ( alias_domain ))
2017-05-23 09:36:59 +02:00
);
2018-08-13 23:20:40 +02:00
continue ;
2017-05-23 09:36:59 +02:00
}
2017-06-12 20:21:31 +02:00
if ( $alias_domain == $target_domain ) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-06-12 20:21:31 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
2018-08-13 23:20:40 +02:00
'msg' => array ( 'aliasd_targetd_identical' , htmlspecialchars ( $target_domain ))
2017-06-12 20:21:31 +02:00
);
2018-08-13 23:20:40 +02:00
continue ;
2017-06-12 20:21:31 +02:00
}
2018-08-13 23:20:40 +02:00
$stmt = $pdo -> prepare ( " SELECT `domain` FROM `domain`
WHERE `domain` = : target_domain " );
$stmt -> execute ( array ( ':target_domain' => $target_domain ));
$num_results = count ( $stmt -> fetchAll ( PDO :: FETCH_ASSOC ));
if ( $num_results == 0 ) {
$_SESSION [ 'return' ][] = array (
2017-06-12 20:21:31 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
2018-08-13 23:20:40 +02:00
'msg' => array ( 'targetd_not_found' , htmlspecialchars ( $target_domain ))
2017-05-23 09:36:59 +02:00
);
2018-08-13 23:20:40 +02:00
continue ;
2018-01-17 15:23:33 +01:00
}
2018-08-13 23:20:40 +02:00
$stmt = $pdo -> prepare ( " SELECT `alias_domain` FROM `alias_domain` WHERE `alias_domain`= :alias_domain
UNION
SELECT `domain` FROM `domain` WHERE `domain` = : alias_domain_in_domain " );
$stmt -> execute ( array ( ':alias_domain' => $alias_domain , ':alias_domain_in_domain' => $alias_domain ));
$num_results = count ( $stmt -> fetchAll ( PDO :: FETCH_ASSOC ));
if ( $num_results != 0 ) {
$_SESSION [ 'return' ][] = array (
2018-01-17 15:23:33 +01:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
2018-08-13 23:20:40 +02:00
'msg' => array ( 'alias_domain_invalid' , $alias_domain )
2018-01-17 15:23:33 +01:00
);
2018-08-13 23:20:40 +02:00
continue ;
2018-01-17 15:23:33 +01:00
}
2018-08-23 08:49:02 +02:00
$stmt = $pdo -> prepare ( " INSERT INTO `alias_domain` (`alias_domain`, `target_domain`, `active`)
VALUES ( : alias_domain , : target_domain , : active ) " );
$stmt -> execute ( array (
':alias_domain' => $alias_domain ,
':target_domain' => $target_domain ,
':active' => $active
));
try {
$redis -> hSet ( 'DOMAIN_MAP' , $alias_domain , 1 );
}
catch ( RedisException $e ) {
$_SESSION [ 'return' ][] = array (
'type' => 'danger' ,
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => array ( 'redis_error' , $e )
);
return false ;
}
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2018-08-23 08:49:02 +02:00
'type' => 'success' ,
2018-08-13 23:20:40 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
2018-08-23 08:49:02 +02:00
'msg' => array ( 'aliasd_added' , htmlspecialchars ( $alias_domain ))
2018-08-13 23:20:40 +02:00
);
}
2017-05-23 09:36:59 +02:00
break ;
case 'mailbox' :
$local_part = strtolower ( trim ( $_data [ 'local_part' ]));
$domain = idn_to_ascii ( strtolower ( trim ( $_data [ 'domain' ])));
$username = $local_part . '@' . $domain ;
if ( ! filter_var ( $username , FILTER_VALIDATE_EMAIL )) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'mailbox_invalid'
2017-05-23 09:36:59 +02:00
);
return false ;
}
if ( empty ( $_data [ 'local_part' ])) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'mailbox_invalid'
2017-05-23 09:36:59 +02:00
);
return false ;
}
$password = $_data [ 'password' ];
$password2 = $_data [ 'password2' ];
$name = $_data [ 'name' ];
$quota_m = filter_var ( $_data [ 'quota' ], FILTER_SANITIZE_NUMBER_FLOAT );
if ( empty ( $name )) {
$name = $local_part ;
}
$active = intval ( $_data [ 'active' ]);
$quota_b = ( $quota_m * 1048576 );
2018-10-03 11:28:25 +02:00
$mailbox_attrs = json_encode (
array (
'force_pw_update' => strval ( intval ( $MAILBOX_DEFAULT_ATTRIBUTES [ 'force_pw_update' ])),
'tls_enforce_in' => strval ( intval ( $MAILBOX_DEFAULT_ATTRIBUTES [ 'tls_enforce_in' ])),
2018-10-23 21:14:57 +02:00
'tls_enforce_out' => strval ( intval ( $MAILBOX_DEFAULT_ATTRIBUTES [ 'tls_enforce_out' ])),
2018-11-12 10:03:50 +01:00
'sogo_access' => strval ( intval ( $MAILBOX_DEFAULT_ATTRIBUTES [ 'sogo_access' ])),
'mailbox_format' => strval ( $MAILBOX_DEFAULT_ATTRIBUTES [ 'mailbox_format' ])
2018-10-23 21:14:57 +02:00
)
);
2017-05-23 09:36:59 +02:00
if ( ! is_valid_domain_name ( $domain )) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'domain_invalid'
2017-05-23 09:36:59 +02:00
);
return false ;
}
if ( ! hasDomainAccess ( $_SESSION [ 'mailcow_cc_username' ], $_SESSION [ 'mailcow_cc_role' ], $domain )) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'access_denied'
2017-05-23 09:36:59 +02:00
);
return false ;
}
2018-08-13 23:20:40 +02:00
$stmt = $pdo -> prepare ( " SELECT `mailboxes`, `maxquota`, `quota` FROM `domain`
WHERE `domain` = : domain " );
$stmt -> execute ( array ( ':domain' => $domain ));
$DomainData = $stmt -> fetch ( PDO :: FETCH_ASSOC );
$stmt = $pdo -> prepare ( " SELECT
COUNT ( * ) as count ,
COALESCE ( ROUND ( SUM ( `quota` ) / 1048576 ), 0 ) as `quota`
FROM `mailbox`
WHERE `kind` NOT REGEXP 'location|thing|group'
AND `domain` = : domain " );
$stmt -> execute ( array ( ':domain' => $domain ));
$MailboxData = $stmt -> fetch ( PDO :: FETCH_ASSOC );
$stmt = $pdo -> prepare ( " SELECT `local_part` FROM `mailbox` WHERE `local_part` = :local_part and `domain`= :domain " );
$stmt -> execute ( array ( ':local_part' => $local_part , ':domain' => $domain ));
$num_results = count ( $stmt -> fetchAll ( PDO :: FETCH_ASSOC ));
if ( $num_results != 0 ) {
$_SESSION [ 'return' ][] = array (
'type' => 'danger' ,
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => array ( 'object_exists' , htmlspecialchars ( $username ))
);
return false ;
}
$stmt = $pdo -> prepare ( " SELECT `address` FROM `alias` WHERE address= :username " );
$stmt -> execute ( array ( ':username' => $username ));
$num_results = count ( $stmt -> fetchAll ( PDO :: FETCH_ASSOC ));
if ( $num_results != 0 ) {
$_SESSION [ 'return' ][] = array (
'type' => 'danger' ,
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => array ( 'is_alias' , htmlspecialchars ( $username ))
);
return false ;
}
$stmt = $pdo -> prepare ( " SELECT `address` FROM `spamalias` WHERE `address`= :username " );
$stmt -> execute ( array ( ':username' => $username ));
$num_results = count ( $stmt -> fetchAll ( PDO :: FETCH_ASSOC ));
if ( $num_results != 0 ) {
$_SESSION [ 'return' ][] = array (
'type' => 'danger' ,
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => array ( 'is_spam_alias' , htmlspecialchars ( $username ))
);
return false ;
2017-05-23 09:36:59 +02:00
}
2018-08-13 23:20:40 +02:00
$stmt = $pdo -> prepare ( " SELECT `domain` FROM `domain` WHERE `domain`= :domain " );
$stmt -> execute ( array ( ':domain' => $domain ));
$num_results = count ( $stmt -> fetchAll ( PDO :: FETCH_ASSOC ));
if ( $num_results == 0 ) {
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
2018-08-13 23:20:40 +02:00
'msg' => array ( 'domain_not_found' , htmlspecialchars ( $domain ))
2017-05-23 09:36:59 +02:00
);
return false ;
}
if ( ! is_numeric ( $quota_m ) || $quota_m == " 0 " ) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'quota_not_0_not_numeric'
2017-05-23 09:36:59 +02:00
);
return false ;
}
if ( ! empty ( $password ) && ! empty ( $password2 )) {
if ( ! preg_match ( '/' . $GLOBALS [ 'PASSWD_REGEP' ] . '/' , $password )) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'password_complexity'
2017-05-23 09:36:59 +02:00
);
return false ;
}
if ( $password != $password2 ) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'password_mismatch'
2017-05-23 09:36:59 +02:00
);
return false ;
}
$password_hashed = hash_password ( $password );
}
else {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'password_empty'
2017-05-23 09:36:59 +02:00
);
return false ;
}
if ( $MailboxData [ 'count' ] >= $DomainData [ 'mailboxes' ]) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => array ( 'max_mailbox_exceeded' , $MailboxData [ 'count' ], $DomainData [ 'mailboxes' ])
2017-05-23 09:36:59 +02:00
);
return false ;
}
if ( $quota_m > $DomainData [ 'maxquota' ]) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => array ( 'mailbox_quota_exceeded' , $DomainData [ 'maxquota' ])
2017-05-23 09:36:59 +02:00
);
return false ;
}
if (( $MailboxData [ 'quota' ] + $quota_m ) > $DomainData [ 'quota' ]) {
$quota_left_m = ( $DomainData [ 'quota' ] - $MailboxData [ 'quota' ]);
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => array ( 'mailbox_quota_left_exceeded' , $quota_left_m )
2017-05-23 09:36:59 +02:00
);
return false ;
}
2018-11-12 10:03:50 +01:00
$stmt = $pdo -> prepare ( " INSERT INTO `mailbox` (`username`, `password`, `name`, `quota`, `local_part`, `domain`, `attributes`, `active`)
VALUES ( : username , : password_hashed , : name , : quota_b , : local_part , : domain , : mailbox_attrs , : active ) " );
2018-08-13 23:20:40 +02:00
$stmt -> execute ( array (
':username' => $username ,
':password_hashed' => $password_hashed ,
':name' => $name ,
':quota_b' => $quota_b ,
':local_part' => $local_part ,
':domain' => $domain ,
2018-10-03 11:28:25 +02:00
':mailbox_attrs' => $mailbox_attrs ,
2018-08-13 23:20:40 +02:00
':active' => $active
));
$stmt = $pdo -> prepare ( " INSERT INTO `quota2` (`username`, `bytes`, `messages`)
VALUES ( : username , '0' , '0' ) ON DUPLICATE KEY UPDATE `bytes` = '0' , `messages` = '0' ; " );
$stmt -> execute ( array ( ':username' => $username ));
$stmt = $pdo -> prepare ( " INSERT INTO `alias` (`address`, `goto`, `domain`, `active`)
VALUES ( : username1 , : username2 , : domain , : active ) " );
$stmt -> execute ( array (
':username1' => $username ,
':username2' => $username ,
':domain' => $domain ,
':active' => $active
));
$stmt = $pdo -> prepare ( " INSERT INTO `user_acl` (`username`) VALUES (:username) " );
$stmt -> execute ( array (
':username' => $username
));
$_SESSION [ 'return' ][] = array (
'type' => 'success' ,
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => array ( 'mailbox_added' , htmlspecialchars ( $username ))
);
2017-05-23 09:36:59 +02:00
break ;
case 'resource' :
$domain = idn_to_ascii ( strtolower ( trim ( $_data [ 'domain' ])));
$description = $_data [ 'description' ];
$local_part = preg_replace ( '/[^\da-z]/i' , '' , preg_quote ( $description , '/' ));
$name = $local_part . '@' . $domain ;
$kind = $_data [ 'kind' ];
2018-05-06 21:51:00 +02:00
$multiple_bookings = intval ( $_data [ 'multiple_bookings' ]);
2017-05-23 09:36:59 +02:00
$active = intval ( $_data [ 'active' ]);
if ( ! filter_var ( $name , FILTER_VALIDATE_EMAIL )) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'resource_invalid'
2017-05-23 09:36:59 +02:00
);
return false ;
}
if ( empty ( $description )) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'description_invalid'
2017-05-23 09:36:59 +02:00
);
return false ;
}
2018-05-06 21:51:00 +02:00
if ( ! isset ( $multiple_bookings ) || $multiple_bookings < - 1 ) {
$multiple_bookings = - 1 ;
}
2017-05-23 09:36:59 +02:00
if ( $kind != 'location' && $kind != 'group' && $kind != 'thing' ) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'resource_invalid'
2017-05-23 09:36:59 +02:00
);
return false ;
}
if ( ! is_valid_domain_name ( $domain )) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'domain_invalid'
2017-05-23 09:36:59 +02:00
);
return false ;
}
if ( ! hasDomainAccess ( $_SESSION [ 'mailcow_cc_username' ], $_SESSION [ 'mailcow_cc_role' ], $domain )) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'access_denied'
2017-05-23 09:36:59 +02:00
);
return false ;
}
2018-08-13 23:20:40 +02:00
$stmt = $pdo -> prepare ( " SELECT `username` FROM `mailbox` WHERE `username` = :name " );
$stmt -> execute ( array ( ':name' => $name ));
$num_results = count ( $stmt -> fetchAll ( PDO :: FETCH_ASSOC ));
if ( $num_results != 0 ) {
$_SESSION [ 'return' ][] = array (
'type' => 'danger' ,
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => array ( 'object_exists' , htmlspecialchars ( $name ))
);
return false ;
2017-05-23 09:36:59 +02:00
}
2018-08-13 23:20:40 +02:00
$stmt = $pdo -> prepare ( " SELECT `address` FROM `alias` WHERE address= :name " );
$stmt -> execute ( array ( ':name' => $name ));
$num_results = count ( $stmt -> fetchAll ( PDO :: FETCH_ASSOC ));
if ( $num_results != 0 ) {
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
2018-08-13 23:20:40 +02:00
'msg' => array ( 'is_alias' , htmlspecialchars ( $name ))
2017-05-23 09:36:59 +02:00
);
return false ;
}
2018-08-13 23:20:40 +02:00
$stmt = $pdo -> prepare ( " SELECT `address` FROM `spamalias` WHERE `address`= :name " );
$stmt -> execute ( array ( ':name' => $name ));
$num_results = count ( $stmt -> fetchAll ( PDO :: FETCH_ASSOC ));
if ( $num_results != 0 ) {
$_SESSION [ 'return' ][] = array (
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
2018-08-13 23:20:40 +02:00
'msg' => array ( 'is_spam_alias' , htmlspecialchars ( $name ))
2017-05-23 09:36:59 +02:00
);
2018-08-13 23:20:40 +02:00
return false ;
2017-05-23 09:36:59 +02:00
}
2018-08-13 23:20:40 +02:00
$stmt = $pdo -> prepare ( " SELECT `domain` FROM `domain` WHERE `domain`= :domain " );
$stmt -> execute ( array ( ':domain' => $domain ));
$num_results = count ( $stmt -> fetchAll ( PDO :: FETCH_ASSOC ));
if ( $num_results == 0 ) {
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
2018-08-13 23:20:40 +02:00
'msg' => array ( 'domain_not_found' , htmlspecialchars ( $domain ))
2017-05-23 09:36:59 +02:00
);
return false ;
}
2018-11-12 10:03:50 +01:00
$stmt = $pdo -> prepare ( " INSERT INTO `mailbox` (`username`, `password`, `name`, `quota`, `local_part`, `domain`, `active`, `multiple_bookings`, `kind`)
VALUES ( : name , 'RESOURCE' , : description , 0 , : local_part , : domain , : active , : multiple_bookings , : kind ) " );
2018-08-13 23:20:40 +02:00
$stmt -> execute ( array (
':name' => $name ,
':description' => $description ,
':local_part' => $local_part ,
':domain' => $domain ,
':active' => $active ,
':kind' => $kind ,
':multiple_bookings' => $multiple_bookings
));
$_SESSION [ 'return' ][] = array (
'type' => 'success' ,
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => array ( 'resource_added' , htmlspecialchars ( $name ))
);
2017-05-23 09:36:59 +02:00
break ;
}
break ;
case 'edit' :
switch ( $_type ) {
case 'alias_domain' :
2017-05-26 23:02:04 +02:00
$alias_domains = ( array ) $_data [ 'alias_domain' ];
2017-05-23 09:36:59 +02:00
foreach ( $alias_domains as $alias_domain ) {
$alias_domain = idn_to_ascii ( strtolower ( trim ( $alias_domain )));
$is_now = mailbox ( 'get' , 'alias_domain_details' , $alias_domain );
if ( ! empty ( $is_now )) {
2017-07-16 11:03:28 +02:00
$active = ( isset ( $_data [ 'active' ])) ? intval ( $_data [ 'active' ]) : $is_now [ 'active_int' ];
2017-05-23 09:36:59 +02:00
$target_domain = ( ! empty ( $_data [ 'target_domain' ])) ? idn_to_ascii ( strtolower ( trim ( $_data [ 'target_domain' ]))) : $is_now [ 'target_domain' ];
}
else {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
2018-08-13 23:20:40 +02:00
'msg' => array ( 'alias_domain_invalid' , htmlspecialchars ( $alias_domain ))
2017-05-23 09:36:59 +02:00
);
2018-08-13 23:20:40 +02:00
continue ;
2017-05-23 09:36:59 +02:00
}
if ( ! is_valid_domain_name ( $target_domain )) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
2018-08-13 23:20:40 +02:00
'msg' => array ( 'target_domain_invalid' , htmlspecialchars ( $target_domain ))
2017-05-23 09:36:59 +02:00
);
2018-08-13 23:20:40 +02:00
continue ;
2017-05-23 09:36:59 +02:00
}
if ( ! hasDomainAccess ( $_SESSION [ 'mailcow_cc_username' ], $_SESSION [ 'mailcow_cc_role' ], $target_domain )) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'access_denied'
2017-05-23 09:36:59 +02:00
);
2018-08-13 23:20:40 +02:00
continue ;
2017-05-23 09:36:59 +02:00
}
2017-07-16 11:03:28 +02:00
if ( empty ( mailbox ( 'get' , 'domain_details' , $target_domain )) || ! empty ( mailbox ( 'get' , 'alias_domain_details' , $target_domain ))) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
2018-08-13 23:20:40 +02:00
'msg' => array ( 'target_domain_invalid' , htmlspecialchars ( $target_domain ))
2017-05-23 09:36:59 +02:00
);
2018-08-13 23:20:40 +02:00
continue ;
2017-05-23 09:36:59 +02:00
}
2018-08-13 23:20:40 +02:00
$stmt = $pdo -> prepare ( " UPDATE `alias_domain` SET
`target_domain` = : target_domain ,
`active` = : active
WHERE `alias_domain` = : alias_domain " );
$stmt -> execute ( array (
':alias_domain' => $alias_domain ,
':target_domain' => $target_domain ,
':active' => $active
));
$_SESSION [ 'return' ][] = array (
'type' => 'success' ,
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => array ( 'aliasd_modified' , htmlspecialchars ( $alias_domain ))
);
2017-05-23 09:36:59 +02:00
}
break ;
case 'tls_policy' :
if ( ! is_array ( $_data [ 'username' ])) {
$usernames = array ();
$usernames [] = $_data [ 'username' ];
}
else {
$usernames = $_data [ 'username' ];
}
2017-08-18 22:18:14 +02:00
if ( ! isset ( $_SESSION [ 'acl' ][ 'tls_policy' ]) || $_SESSION [ 'acl' ][ 'tls_policy' ] != " 1 " ) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-08-18 22:18:14 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'access_denied'
2017-08-18 22:18:14 +02:00
);
return false ;
}
2017-05-23 09:36:59 +02:00
foreach ( $usernames as $username ) {
if ( ! filter_var ( $username , FILTER_VALIDATE_EMAIL ) || ! hasMailboxObjectAccess ( $_SESSION [ 'mailcow_cc_username' ], $_SESSION [ 'mailcow_cc_role' ], $username )) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'access_denied'
2017-05-23 09:36:59 +02:00
);
2018-08-13 23:20:40 +02:00
continue ;
2017-05-23 09:36:59 +02:00
}
$is_now = mailbox ( 'get' , 'tls_policy' , $username );
if ( ! empty ( $is_now )) {
2017-07-16 11:03:28 +02:00
$tls_enforce_in = ( isset ( $_data [ 'tls_enforce_in' ])) ? intval ( $_data [ 'tls_enforce_in' ]) : $is_now [ 'tls_enforce_in' ];
$tls_enforce_out = ( isset ( $_data [ 'tls_enforce_out' ])) ? intval ( $_data [ 'tls_enforce_out' ]) : $is_now [ 'tls_enforce_out' ];
2017-05-23 09:36:59 +02:00
}
else {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'access_denied'
2017-05-23 09:36:59 +02:00
);
2018-08-13 23:20:40 +02:00
continue ;
2017-05-23 09:36:59 +02:00
}
2018-08-13 23:20:40 +02:00
$stmt = $pdo -> prepare ( " UPDATE `mailbox`
SET `attributes` = JSON_SET ( `attributes` , '$.tls_enforce_out' , : tls_out ),
`attributes` = JSON_SET ( `attributes` , '$.tls_enforce_in' , : tls_in )
WHERE `username` = : username " );
$stmt -> execute ( array (
':tls_out' => intval ( $tls_enforce_out ),
':tls_in' => intval ( $tls_enforce_in ),
':username' => $username
));
$_SESSION [ 'return' ][] = array (
'type' => 'success' ,
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => array ( 'mailbox_modified' , $username )
);
2017-05-23 09:36:59 +02:00
}
break ;
case 'spam_score' :
if ( ! is_array ( $_data [ 'username' ])) {
$usernames = array ();
$usernames [] = $_data [ 'username' ];
}
else {
$usernames = $_data [ 'username' ];
}
2017-08-18 22:18:14 +02:00
if ( ! isset ( $_SESSION [ 'acl' ][ 'spam_score' ]) || $_SESSION [ 'acl' ][ 'spam_score' ] != " 1 " ) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-08-18 22:18:14 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'access_denied'
2017-08-18 22:18:14 +02:00
);
return false ;
}
2017-05-23 09:36:59 +02:00
foreach ( $usernames as $username ) {
2018-10-18 21:48:30 +02:00
if ( $_data [ 'spam_score' ] == " default " ) {
$stmt = $pdo -> prepare ( " DELETE FROM `filterconf` WHERE `object` = :username
AND ( `option` = 'lowspamlevel' OR `option` = 'highspamlevel' ) " );
$stmt -> execute ( array (
':username' => $username
));
2018-10-18 22:32:37 +02:00
$_SESSION [ 'return' ][] = array (
'type' => 'success' ,
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => array ( 'mailbox_modified' , $username )
);
2018-10-18 21:48:30 +02:00
continue ;
}
2017-05-23 09:36:59 +02:00
$lowspamlevel = explode ( ',' , $_data [ 'spam_score' ])[ 0 ];
$highspamlevel = explode ( ',' , $_data [ 'spam_score' ])[ 1 ];
if ( ! is_numeric ( $lowspamlevel ) || ! is_numeric ( $highspamlevel )) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
2018-10-18 21:48:30 +02:00
'msg' => 'Invalid spam score, format must be "1,2" where first is low and second is high spam value.'
2017-05-23 09:36:59 +02:00
);
2018-08-13 23:20:40 +02:00
continue ;
2017-05-23 09:36:59 +02:00
}
2018-08-13 23:20:40 +02:00
$stmt = $pdo -> prepare ( " DELETE FROM `filterconf` WHERE `object` = :username
AND ( `option` = 'lowspamlevel' OR `option` = 'highspamlevel' ) " );
$stmt -> execute ( array (
':username' => $username
));
$stmt = $pdo -> prepare ( " INSERT INTO `filterconf` (`object`, `option`, `value`)
VALUES ( : username , 'highspamlevel' , : highspamlevel ) " );
$stmt -> execute ( array (
':username' => $username ,
':highspamlevel' => $highspamlevel
));
$stmt = $pdo -> prepare ( " INSERT INTO `filterconf` (`object`, `option`, `value`)
VALUES ( : username , 'lowspamlevel' , : lowspamlevel ) " );
$stmt -> execute ( array (
':username' => $username ,
':lowspamlevel' => $lowspamlevel
));
$_SESSION [ 'return' ][] = array (
'type' => 'success' ,
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => array ( 'mailbox_modified' , $username )
);
2017-05-23 09:36:59 +02:00
}
break ;
case 'time_limited_alias' :
2017-08-18 22:18:14 +02:00
if ( ! isset ( $_SESSION [ 'acl' ][ 'spam_alias' ]) || $_SESSION [ 'acl' ][ 'spam_alias' ] != " 1 " ) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-08-18 22:18:14 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'access_denied'
2017-08-18 22:18:14 +02:00
);
return false ;
}
2017-05-23 09:36:59 +02:00
if ( ! is_array ( $_data [ 'address' ])) {
$addresses = array ();
$addresses [] = $_data [ 'address' ];
}
else {
$addresses = $_data [ 'address' ];
}
foreach ( $addresses as $address ) {
2018-08-13 23:20:40 +02:00
$stmt = $pdo -> prepare ( " SELECT `goto` FROM `spamalias` WHERE `address` = :address " );
$stmt -> execute ( array ( ':address' => $address ));
$goto = $stmt -> fetch ( PDO :: FETCH_ASSOC )[ 'goto' ];
2017-05-23 09:36:59 +02:00
if ( ! hasMailboxObjectAccess ( $_SESSION [ 'mailcow_cc_username' ], $_SESSION [ 'mailcow_cc_role' ], $goto )) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'access_denied'
2017-05-23 09:36:59 +02:00
);
2018-08-13 23:20:40 +02:00
continue ;
2017-05-23 09:36:59 +02:00
}
2018-10-16 20:08:52 +02:00
if ( empty ( $_data [ 'validity' ])) {
continue ;
}
$validity = round (( int ) time () + ( $_data [ 'validity' ] * 3600 ));
$stmt = $pdo -> prepare ( " UPDATE `spamalias` SET `validity` = :validity WHERE
`address` = : address " );
2018-08-13 23:20:40 +02:00
$stmt -> execute ( array (
':address' => $address ,
2018-10-16 20:08:52 +02:00
':validity' => $validity
2018-08-13 23:20:40 +02:00
));
$_SESSION [ 'return' ][] = array (
'type' => 'success' ,
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => array ( 'mailbox_modified' , htmlspecialchars ( implode ( ', ' , $usernames )))
);
2017-05-23 09:36:59 +02:00
}
break ;
case 'delimiter_action' :
if ( ! is_array ( $_data [ 'username' ])) {
$usernames = array ();
$usernames [] = $_data [ 'username' ];
}
else {
$usernames = $_data [ 'username' ];
}
2017-08-18 22:18:14 +02:00
if ( ! isset ( $_SESSION [ 'acl' ][ 'delimiter_action' ]) || $_SESSION [ 'acl' ][ 'delimiter_action' ] != " 1 " ) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-08-18 22:18:14 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'access_denied'
2017-08-18 22:18:14 +02:00
);
return false ;
}
2017-05-23 09:36:59 +02:00
foreach ( $usernames as $username ) {
if ( ! filter_var ( $username , FILTER_VALIDATE_EMAIL ) || ! hasMailboxObjectAccess ( $_SESSION [ 'mailcow_cc_username' ], $_SESSION [ 'mailcow_cc_role' ], $username )) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'access_denied'
2017-05-23 09:36:59 +02:00
);
2018-08-13 23:20:40 +02:00
continue ;
2017-05-23 09:36:59 +02:00
}
if ( isset ( $_data [ 'tagged_mail_handler' ]) && $_data [ 'tagged_mail_handler' ] == " subject " ) {
try {
$redis -> hSet ( 'RCPT_WANTS_SUBJECT_TAG' , $username , 1 );
2018-01-16 16:31:37 +01:00
$redis -> hDel ( 'RCPT_WANTS_SUBFOLDER_TAG' , $username );
2017-05-23 09:36:59 +02:00
}
catch ( RedisException $e ) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => array ( 'redis_error' , $e )
2017-05-23 09:36:59 +02:00
);
2018-08-13 23:20:40 +02:00
continue ;
2017-05-23 09:36:59 +02:00
}
}
2018-01-16 12:47:59 +01:00
else if ( isset ( $_data [ 'tagged_mail_handler' ]) && $_data [ 'tagged_mail_handler' ] == " subfolder " ) {
try {
2018-01-16 16:31:37 +01:00
$redis -> hSet ( 'RCPT_WANTS_SUBFOLDER_TAG' , $username , 1 );
$redis -> hDel ( 'RCPT_WANTS_SUBJECT_TAG' , $username );
2017-05-23 09:36:59 +02:00
}
catch ( RedisException $e ) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => array ( 'redis_error' , $e )
2017-05-23 09:36:59 +02:00
);
2018-08-13 23:20:40 +02:00
continue ;
2017-05-23 09:36:59 +02:00
}
}
else {
try {
$redis -> hDel ( 'RCPT_WANTS_SUBJECT_TAG' , $username );
2018-01-16 16:31:37 +01:00
$redis -> hDel ( 'RCPT_WANTS_SUBFOLDER_TAG' , $username );
2017-05-23 09:36:59 +02:00
}
catch ( RedisException $e ) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => array ( 'redis_error' , $e )
2017-05-23 09:36:59 +02:00
);
2018-08-13 23:20:40 +02:00
continue ;
2017-05-23 09:36:59 +02:00
}
}
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
'type' => 'success' ,
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => array ( 'mailbox_modified' , $username )
);
2017-05-23 09:36:59 +02:00
}
break ;
case 'syncjob' :
if ( ! is_array ( $_data [ 'id' ])) {
$ids = array ();
$ids [] = $_data [ 'id' ];
}
else {
$ids = $_data [ 'id' ];
}
2017-08-18 22:18:14 +02:00
if ( ! isset ( $_SESSION [ 'acl' ][ 'syncjobs' ]) || $_SESSION [ 'acl' ][ 'syncjobs' ] != " 1 " ) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-08-18 22:18:14 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'access_denied'
2017-08-18 22:18:14 +02:00
);
return false ;
}
2017-05-23 09:36:59 +02:00
foreach ( $ids as $id ) {
2017-11-05 12:20:05 +01:00
$is_now = mailbox ( 'get' , 'syncjob_details' , $id , array ( 'with_password' ));
2017-05-23 09:36:59 +02:00
if ( ! empty ( $is_now )) {
$username = $is_now [ 'user2' ];
$user1 = ( ! empty ( $_data [ 'user1' ])) ? $_data [ 'user1' ] : $is_now [ 'user1' ];
2017-07-16 11:03:28 +02:00
$active = ( isset ( $_data [ 'active' ])) ? intval ( $_data [ 'active' ]) : $is_now [ 'active_int' ];
2017-11-05 12:20:05 +01:00
$last_run = ( isset ( $_data [ 'last_run' ])) ? NULL : $is_now [ 'last_run' ];
2017-07-16 11:03:28 +02:00
$delete2duplicates = ( isset ( $_data [ 'delete2duplicates' ])) ? intval ( $_data [ 'delete2duplicates' ]) : $is_now [ 'delete2duplicates' ];
2018-07-27 22:19:59 +02:00
$subscribeall = ( isset ( $_data [ 'subscribeall' ])) ? intval ( $_data [ 'subscribeall' ]) : $is_now [ 'subscribeall' ];
2017-07-16 11:03:28 +02:00
$delete1 = ( isset ( $_data [ 'delete1' ])) ? intval ( $_data [ 'delete1' ]) : $is_now [ 'delete1' ];
2017-08-31 10:36:10 +02:00
$delete2 = ( isset ( $_data [ 'delete2' ])) ? intval ( $_data [ 'delete2' ]) : $is_now [ 'delete2' ];
2018-01-24 12:59:04 +01:00
$automap = ( isset ( $_data [ 'automap' ])) ? intval ( $_data [ 'automap' ]) : $is_now [ 'automap' ];
$skipcrossduplicates = ( isset ( $_data [ 'skipcrossduplicates' ])) ? intval ( $_data [ 'skipcrossduplicates' ]) : $is_now [ 'skipcrossduplicates' ];
2017-05-23 09:36:59 +02:00
$port1 = ( ! empty ( $_data [ 'port1' ])) ? $_data [ 'port1' ] : $is_now [ 'port1' ];
$password1 = ( ! empty ( $_data [ 'password1' ])) ? $_data [ 'password1' ] : $is_now [ 'password1' ];
$host1 = ( ! empty ( $_data [ 'host1' ])) ? $_data [ 'host1' ] : $is_now [ 'host1' ];
2017-10-21 10:07:06 +02:00
$subfolder2 = ( isset ( $_data [ 'subfolder2' ])) ? $_data [ 'subfolder2' ] : $is_now [ 'subfolder2' ];
2017-05-23 09:36:59 +02:00
$enc1 = ( ! empty ( $_data [ 'enc1' ])) ? $_data [ 'enc1' ] : $is_now [ 'enc1' ];
$mins_interval = ( ! empty ( $_data [ 'mins_interval' ])) ? $_data [ 'mins_interval' ] : $is_now [ 'mins_interval' ];
2018-03-09 10:51:36 +01:00
$exclude = ( isset ( $_data [ 'exclude' ])) ? $_data [ 'exclude' ] : $is_now [ 'exclude' ];
2018-07-27 22:19:59 +02:00
$custom_params = ( isset ( $_data [ 'custom_params' ])) ? $_data [ 'custom_params' ] : $is_now [ 'custom_params' ];
2017-10-21 10:07:06 +02:00
$maxage = ( isset ( $_data [ 'maxage' ]) && $_data [ 'maxage' ] != " " ) ? intval ( $_data [ 'maxage' ]) : $is_now [ 'maxage' ];
2018-01-24 12:59:04 +01:00
$maxbytespersecond = ( isset ( $_data [ 'maxbytespersecond' ]) && $_data [ 'maxbytespersecond' ] != " " ) ? intval ( $_data [ 'maxbytespersecond' ]) : $is_now [ 'maxbytespersecond' ];
2018-07-27 22:19:59 +02:00
$timeout1 = ( isset ( $_data [ 'timeout1' ]) && $_data [ 'timeout1' ] != " " ) ? intval ( $_data [ 'timeout1' ]) : $is_now [ 'timeout1' ];
$timeout2 = ( isset ( $_data [ 'timeout2' ]) && $_data [ 'timeout2' ] != " " ) ? intval ( $_data [ 'timeout2' ]) : $is_now [ 'timeout2' ];
2017-05-23 09:36:59 +02:00
}
else {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'access_denied'
2017-05-23 09:36:59 +02:00
);
2018-08-13 23:20:40 +02:00
continue ;
2017-05-23 09:36:59 +02:00
}
if ( empty ( $subfolder2 )) {
$subfolder2 = " " ;
}
2018-07-27 22:19:59 +02:00
if ( ! isset ( $maxage ) || ! filter_var ( $maxage , FILTER_VALIDATE_INT , array ( 'options' => array ( 'min_range' => 1 , 'max_range' => 32000 )))) {
2017-05-23 09:36:59 +02:00
$maxage = " 0 " ;
}
2018-07-27 22:19:59 +02:00
if ( ! isset ( $timeout1 ) || ! filter_var ( $timeout1 , FILTER_VALIDATE_INT , array ( 'options' => array ( 'min_range' => 1 , 'max_range' => 32000 )))) {
$timeout1 = " 600 " ;
}
if ( ! isset ( $timeout2 ) || ! filter_var ( $timeout2 , FILTER_VALIDATE_INT , array ( 'options' => array ( 'min_range' => 1 , 'max_range' => 32000 )))) {
$timeout2 = " 600 " ;
}
2018-01-24 12:59:04 +01:00
if ( ! isset ( $maxbytespersecond ) || ! filter_var ( $maxbytespersecond , FILTER_VALIDATE_INT , array ( 'options' => array ( 'min_range' => 1 , 'max_range' => 125000000 )))) {
$maxbytespersecond = " 0 " ;
}
2017-05-23 09:36:59 +02:00
if ( ! filter_var ( $port1 , FILTER_VALIDATE_INT , array ( 'options' => array ( 'min_range' => 1 , 'max_range' => 65535 )))) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'access_denied'
2017-05-23 09:36:59 +02:00
);
2018-08-13 23:20:40 +02:00
continue ;
2017-05-23 09:36:59 +02:00
}
2018-01-15 19:53:09 +01:00
if ( ! filter_var ( $mins_interval , FILTER_VALIDATE_INT , array ( 'options' => array ( 'min_range' => 1 , 'max_range' => 3600 )))) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'access_denied'
2017-05-23 09:36:59 +02:00
);
2018-08-13 23:20:40 +02:00
continue ;
2017-05-23 09:36:59 +02:00
}
if ( ! is_valid_domain_name ( $host1 )) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'access_denied'
2017-05-23 09:36:59 +02:00
);
2018-08-13 23:20:40 +02:00
continue ;
2017-05-23 09:36:59 +02:00
}
if ( $enc1 != " TLS " && $enc1 != " SSL " && $enc1 != " PLAIN " ) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'access_denied'
2017-05-23 09:36:59 +02:00
);
2018-08-13 23:20:40 +02:00
continue ;
2017-05-23 09:36:59 +02:00
}
if ( @ preg_match ( " / " . $exclude . " / " , null ) === false ) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'access_denied'
2017-05-23 09:36:59 +02:00
);
2018-08-13 23:20:40 +02:00
continue ;
2017-05-23 09:36:59 +02:00
}
2018-08-13 23:20:40 +02:00
$stmt = $pdo -> prepare ( " UPDATE `imapsync` SET `delete1` = :delete1,
`delete2` = : delete2 ,
`automap` = : automap ,
`skipcrossduplicates` = : skipcrossduplicates ,
`maxage` = : maxage ,
`maxbytespersecond` = : maxbytespersecond ,
`subfolder2` = : subfolder2 ,
`exclude` = : exclude ,
`host1` = : host1 ,
`last_run` = : last_run ,
`user1` = : user1 ,
`password1` = : password1 ,
`mins_interval` = : mins_interval ,
`port1` = : port1 ,
`enc1` = : enc1 ,
`delete2duplicates` = : delete2duplicates ,
`custom_params` = : custom_params ,
`timeout1` = : timeout1 ,
`timeout2` = : timeout2 ,
`subscribeall` = : subscribeall ,
`active` = : active
WHERE `id` = : id " );
$stmt -> execute ( array (
':delete1' => $delete1 ,
':delete2' => $delete2 ,
':automap' => $automap ,
':skipcrossduplicates' => $skipcrossduplicates ,
':id' => $id ,
':exclude' => $exclude ,
':maxage' => $maxage ,
':maxbytespersecond' => $maxbytespersecond ,
':subfolder2' => $subfolder2 ,
':host1' => $host1 ,
':user1' => $user1 ,
':password1' => $password1 ,
':last_run' => $last_run ,
':mins_interval' => $mins_interval ,
':port1' => $port1 ,
':enc1' => $enc1 ,
':delete2duplicates' => $delete2duplicates ,
':custom_params' => $custom_params ,
':timeout1' => $timeout1 ,
':timeout2' => $timeout2 ,
':subscribeall' => $subscribeall ,
':active' => $active ,
));
$_SESSION [ 'return' ][] = array (
'type' => 'success' ,
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => array ( 'mailbox_modified' , $username )
);
2017-05-23 09:36:59 +02:00
}
break ;
2017-11-03 20:37:24 +01:00
case 'filter' :
if ( ! isset ( $_SESSION [ 'acl' ][ 'filters' ]) || $_SESSION [ 'acl' ][ 'filters' ] != " 1 " ) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-11-03 20:37:24 +01:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'access_denied'
2017-11-03 20:37:24 +01:00
);
return false ;
}
2018-09-09 21:17:59 +02:00
$sieve = new Sieve\SieveParser ();
if ( ! is_array ( $_data [ 'id' ])) {
$ids = array ();
$ids [] = $_data [ 'id' ];
}
else {
$ids = $_data [ 'id' ];
}
2017-11-03 20:37:24 +01:00
foreach ( $ids as $id ) {
$is_now = mailbox ( 'get' , 'filter_details' , $id );
if ( ! empty ( $is_now )) {
$username = $is_now [ 'username' ];
$active = ( isset ( $_data [ 'active' ])) ? intval ( $_data [ 'active' ]) : $is_now [ 'active_int' ];
$script_desc = ( ! empty ( $_data [ 'script_desc' ])) ? $_data [ 'script_desc' ] : $is_now [ 'script_desc' ];
$script_data = ( ! empty ( $_data [ 'script_data' ])) ? $_data [ 'script_data' ] : $is_now [ 'script_data' ];
$filter_type = ( ! empty ( $_data [ 'filter_type' ])) ? $_data [ 'filter_type' ] : $is_now [ 'filter_type' ];
}
else {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-11-03 20:37:24 +01:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'access_denied'
2017-11-03 20:37:24 +01:00
);
2018-08-13 23:20:40 +02:00
continue ;
2017-11-03 20:37:24 +01:00
}
try {
$sieve -> parse ( $script_data );
}
catch ( Exception $e ) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-11-03 20:37:24 +01:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => array ( 'sieve_error' , $e -> getMessage ())
2017-11-03 20:37:24 +01:00
);
2018-08-13 23:20:40 +02:00
continue ;
2017-11-03 20:37:24 +01:00
}
if ( $filter_type != 'postfilter' && $filter_type != 'prefilter' ) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-11-03 20:37:24 +01:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'filter_type'
2017-11-03 20:37:24 +01:00
);
2018-08-13 23:20:40 +02:00
continue ;
2017-11-03 20:37:24 +01:00
}
if ( $active == '1' ) {
$script_name = 'active' ;
2018-08-13 23:20:40 +02:00
$stmt = $pdo -> prepare ( " UPDATE `sieve_filters`
SET `script_name` = 'inactive'
WHERE `username` = : username
AND `filter_type` = : filter_type " );
2017-11-03 20:37:24 +01:00
$stmt -> execute ( array (
2018-08-13 23:20:40 +02:00
':username' => $username ,
':filter_type' => $filter_type
2017-11-03 20:37:24 +01:00
));
}
2018-08-13 23:20:40 +02:00
else {
$script_name = 'inactive' ;
2017-11-03 20:37:24 +01:00
}
2018-08-13 23:20:40 +02:00
$stmt = $pdo -> prepare ( " UPDATE `sieve_filters` SET `script_desc` = :script_desc, `script_data` = :script_data, `script_name` = :script_name, `filter_type` = :filter_type
WHERE `id` = : id " );
$stmt -> execute ( array (
':script_desc' => $script_desc ,
':script_data' => $script_data ,
':script_name' => $script_name ,
':filter_type' => $filter_type ,
':id' => $id
));
$_SESSION [ 'return' ][] = array (
'type' => 'success' ,
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => array ( 'mailbox_modified' , $username )
);
2017-11-03 20:37:24 +01:00
}
break ;
2017-05-23 09:36:59 +02:00
case 'alias' :
2018-08-13 23:20:40 +02:00
if ( ! is_array ( $_data [ 'id' ])) {
$ids = array ();
$ids [] = $_data [ 'id' ];
2017-05-23 09:36:59 +02:00
}
else {
2018-08-13 23:20:40 +02:00
$ids = $_data [ 'id' ];
2017-05-23 09:36:59 +02:00
}
2018-08-13 23:20:40 +02:00
foreach ( $ids as $id ) {
$is_now = mailbox ( 'get' , 'alias_details' , $id );
2017-05-23 09:36:59 +02:00
if ( ! empty ( $is_now )) {
2017-07-16 11:03:28 +02:00
$active = ( isset ( $_data [ 'active' ])) ? intval ( $_data [ 'active' ]) : $is_now [ 'active_int' ];
2018-08-13 23:20:40 +02:00
$goto_null = ( isset ( $_data [ 'goto_null' ])) ? intval ( $_data [ 'goto_null' ]) : 0 ;
$goto_spam = ( isset ( $_data [ 'goto_spam' ])) ? intval ( $_data [ 'goto_spam' ]) : 0 ;
$goto_ham = ( isset ( $_data [ 'goto_ham' ])) ? intval ( $_data [ 'goto_ham' ]) : 0 ;
$goto = ( ! empty ( $_data [ 'goto' ])) ? $_data [ 'goto' ] : $is_now [ 'goto' ];
$address = ( ! empty ( $_data [ 'address' ])) ? $_data [ 'address' ] : $is_now [ 'address' ];
2017-05-23 09:36:59 +02:00
}
else {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'alias_invalid'
2017-05-23 09:36:59 +02:00
);
2018-08-13 23:20:40 +02:00
continue ;
}
if ( $is_now [ 'address' ] != $address ) {
$domain = idn_to_ascii ( substr ( strstr ( $address , '@' ), 1 ));
$local_part = strstr ( $address , '@' , true );
$address = $local_part . '@' . $domain ;
if ( ! hasDomainAccess ( $_SESSION [ 'mailcow_cc_username' ], $_SESSION [ 'mailcow_cc_role' ], $domain )) {
$_SESSION [ 'return' ][] = array (
'type' => 'danger' ,
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'access_denied'
);
continue ;
}
if (( ! filter_var ( $address , FILTER_VALIDATE_EMAIL ) === true ) && ! empty ( $local_part )) {
$_SESSION [ 'return' ][] = array (
'type' => 'danger' ,
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'alias_invalid'
);
continue ;
}
$stmt = $pdo -> prepare ( " SELECT `address` FROM `alias`
WHERE `address` = : address OR `address` IN (
SELECT `username` FROM `mailbox` , `alias_domain`
WHERE (
`alias_domain` . `alias_domain` = : address_d
AND `mailbox` . `username` = CONCAT ( : address_l , '@' , alias_domain . target_domain ))) " );
$stmt -> execute ( array (
':address' => $address ,
':address_l' => $local_part ,
':address_d' => $domain
));
$num_results = count ( $stmt -> fetchAll ( PDO :: FETCH_ASSOC ));
if ( $num_results != 0 ) {
$_SESSION [ 'return' ][] = array (
'type' => 'danger' ,
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => array ( 'is_alias_or_mailbox' , htmlspecialchars ( $address ))
);
continue ;
}
$stmt = $pdo -> prepare ( " SELECT `domain` FROM `domain`
WHERE `domain` = : domain1 OR `domain` = ( SELECT `target_domain` FROM `alias_domain` WHERE `alias_domain` = : domain2 ) " );
$stmt -> execute ( array ( ':domain1' => $domain , ':domain2' => $domain ));
$num_results = count ( $stmt -> fetchAll ( PDO :: FETCH_ASSOC ));
if ( $num_results == 0 ) {
$_SESSION [ 'return' ][] = array (
'type' => 'danger' ,
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => array ( 'domain_not_found' , htmlspecialchars ( $domain ))
);
continue ;
}
$stmt = $pdo -> prepare ( " SELECT `address` FROM `spamalias`
WHERE `address` = : address " );
$stmt -> execute ( array ( ':address' => $address ));
$num_results = count ( $stmt -> fetchAll ( PDO :: FETCH_ASSOC ));
if ( $num_results != 0 ) {
$_SESSION [ 'return' ][] = array (
'type' => 'danger' ,
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => array ( 'is_spam_alias' , htmlspecialchars ( $address ))
);
continue ;
}
2017-05-23 09:36:59 +02:00
}
2017-09-16 13:17:37 +02:00
if ( $goto_null == " 1 " ) {
$goto = " null@localhost " ;
}
2018-07-29 00:38:22 +02:00
elseif ( $goto_spam == " 1 " ) {
$goto = " spam@localhost " ;
}
elseif ( $goto_ham == " 1 " ) {
$goto = " ham@localhost " ;
}
2017-09-16 13:17:37 +02:00
else {
2018-08-13 23:20:40 +02:00
$gotos = array_map ( 'trim' , preg_split ( " /( |,|;| \n )/ " , $goto ));
foreach ( $gotos as $i => & $goto ) {
2017-09-16 13:17:37 +02:00
if ( empty ( $goto )) {
continue ;
}
if ( ! filter_var ( $goto , FILTER_VALIDATE_EMAIL )) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-09-16 13:17:37 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
2018-08-13 23:20:40 +02:00
'msg' => array ( 'goto_invalid' , $goto )
2017-09-16 13:17:37 +02:00
);
2018-08-13 23:20:40 +02:00
unset ( $gotos [ $i ]);
continue ;
2017-09-16 13:17:37 +02:00
}
if ( $goto == $address ) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-09-16 13:17:37 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'alias_goto_identical'
2017-09-16 13:17:37 +02:00
);
2018-08-13 23:20:40 +02:00
unset ( $gotos [ $i ]);
continue ;
2017-09-16 13:17:37 +02:00
}
2017-05-23 09:36:59 +02:00
}
2017-09-16 13:17:37 +02:00
$gotos = array_filter ( $gotos );
$goto = implode ( " , " , $gotos );
2017-05-23 09:36:59 +02:00
}
2018-08-13 23:20:40 +02:00
if ( ! empty ( $goto )) {
$stmt = $pdo -> prepare ( " UPDATE `alias` SET
`address` = : address ,
`goto` = : goto ,
`active` = : active
WHERE `id` = : id " );
$stmt -> execute ( array (
':address' => $address ,
':goto' => $goto ,
':active' => $active ,
':id' => $id
));
2017-05-23 09:36:59 +02:00
}
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
'type' => 'success' ,
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => array ( 'alias_modified' , htmlspecialchars ( $address ))
);
2017-05-23 09:36:59 +02:00
}
break ;
case 'domain' :
if ( ! is_array ( $_data [ 'domain' ])) {
$domains = array ();
$domains [] = $_data [ 'domain' ];
}
else {
$domains = $_data [ 'domain' ];
}
foreach ( $domains as $domain ) {
$domain = idn_to_ascii ( $domain );
if ( ! is_valid_domain_name ( $domain )) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'domain_invalid'
2017-05-23 09:36:59 +02:00
);
2018-08-13 23:20:40 +02:00
continue ;
2017-05-23 09:36:59 +02:00
}
if ( $_SESSION [ 'mailcow_cc_role' ] == " domainadmin " &&
hasDomainAccess ( $_SESSION [ 'mailcow_cc_username' ], $_SESSION [ 'mailcow_cc_role' ], $domain )) {
$description = $_data [ 'description' ];
$active = intval ( $_data [ 'active' ]);
2018-08-13 23:20:40 +02:00
$stmt = $pdo -> prepare ( " UPDATE `domain` SET
`description` = : description
WHERE `domain` = : domain " );
$stmt -> execute ( array (
':description' => $description ,
':domain' => $domain
));
$_SESSION [ 'return' ][] = array (
'type' => 'success' ,
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => array ( 'domain_modified' , htmlspecialchars ( $domain ))
);
2017-05-23 09:36:59 +02:00
}
elseif ( $_SESSION [ 'mailcow_cc_role' ] == " admin " ) {
$is_now = mailbox ( 'get' , 'domain_details' , $domain );
if ( ! empty ( $is_now )) {
2017-07-16 11:03:28 +02:00
$active = ( isset ( $_data [ 'active' ])) ? intval ( $_data [ 'active' ]) : $is_now [ 'active_int' ];
$backupmx = ( isset ( $_data [ 'backupmx' ])) ? intval ( $_data [ 'backupmx' ]) : $is_now [ 'backupmx_int' ];
$relay_all_recipients = ( isset ( $_data [ 'relay_all_recipients' ])) ? intval ( $_data [ 'relay_all_recipients' ]) : $is_now [ 'relay_all_recipients_int' ];
2017-07-22 20:39:54 +02:00
$relayhost = ( isset ( $_data [ 'relayhost' ])) ? intval ( $_data [ 'relayhost' ]) : $is_now [ 'relayhost' ];
2017-05-23 09:36:59 +02:00
$aliases = ( ! empty ( $_data [ 'aliases' ])) ? $_data [ 'aliases' ] : $is_now [ 'max_num_aliases_for_domain' ];
$mailboxes = ( ! empty ( $_data [ 'mailboxes' ])) ? $_data [ 'mailboxes' ] : $is_now [ 'max_num_mboxes_for_domain' ];
2017-05-29 21:51:06 +02:00
$maxquota = ( ! empty ( $_data [ 'maxquota' ])) ? $_data [ 'maxquota' ] : ( $is_now [ 'max_quota_for_mbox' ] / 1048576 );
2017-05-23 09:36:59 +02:00
$quota = ( ! empty ( $_data [ 'quota' ])) ? $_data [ 'quota' ] : ( $is_now [ 'max_quota_for_domain' ] / 1048576 );
$description = ( ! empty ( $_data [ 'description' ])) ? $_data [ 'description' ] : $is_now [ 'description' ];
( $relay_all_recipients == '1' ) ? $backupmx = '1' : null ;
}
else {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'domain_invalid'
2017-05-23 09:36:59 +02:00
);
2018-08-13 23:20:40 +02:00
continue ;
2017-05-23 09:36:59 +02:00
}
2018-08-13 23:20:40 +02:00
// todo: should be using api here
$stmt = $pdo -> prepare ( " SELECT
COUNT ( * ) AS count ,
MAX ( COALESCE ( ROUND ( `quota` / 1048576 ), 0 )) AS `biggest_mailbox` ,
COALESCE ( ROUND ( SUM ( `quota` ) / 1048576 ), 0 ) AS `quota_all`
FROM `mailbox`
WHERE `kind` NOT REGEXP 'location|thing|group'
AND domain = : domain " );
$stmt -> execute ( array ( ':domain' => $domain ));
$MailboxData = $stmt -> fetch ( PDO :: FETCH_ASSOC );
// todo: should be using api here
$stmt = $pdo -> prepare ( " SELECT COUNT(*) AS `count` FROM `alias`
WHERE domain = : domain
AND address NOT IN (
SELECT `username` FROM `mailbox`
) " );
$stmt -> execute ( array ( ':domain' => $domain ));
$AliasData = $stmt -> fetch ( PDO :: FETCH_ASSOC );
2017-05-23 09:36:59 +02:00
if ( $maxquota > $quota ) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'mailbox_quota_exceeds_domain_quota'
2017-05-23 09:36:59 +02:00
);
2018-08-13 23:20:40 +02:00
continue ;
2017-05-23 09:36:59 +02:00
}
if ( $maxquota == " 0 " || empty ( $maxquota )) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'maxquota_empty'
2017-05-23 09:36:59 +02:00
);
2018-08-13 23:20:40 +02:00
continue ;
2017-05-23 09:36:59 +02:00
}
if ( $MailboxData [ 'biggest_mailbox' ] > $maxquota ) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => array ( 'max_quota_in_use' , $MailboxData [ 'biggest_mailbox' ])
2017-05-23 09:36:59 +02:00
);
2018-08-13 23:20:40 +02:00
continue ;
2017-05-23 09:36:59 +02:00
}
if ( $MailboxData [ 'quota_all' ] > $quota ) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => array ( 'domain_quota_m_in_use' , $MailboxData [ 'quota_all' ])
2017-05-23 09:36:59 +02:00
);
2018-08-13 23:20:40 +02:00
continue ;
2017-05-23 09:36:59 +02:00
}
if ( $MailboxData [ 'count' ] > $mailboxes ) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => array ( 'mailboxes_in_use' , $MailboxData [ 'count' ])
2017-05-23 09:36:59 +02:00
);
2018-08-13 23:20:40 +02:00
continue ;
2017-05-23 09:36:59 +02:00
}
if ( $AliasData [ 'count' ] > $aliases ) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => array ( 'aliases_in_use' , $AliasData [ 'count' ])
2017-05-23 09:36:59 +02:00
);
2018-08-13 23:20:40 +02:00
continue ;
2017-05-23 09:36:59 +02:00
}
2018-08-13 23:20:40 +02:00
$stmt = $pdo -> prepare ( " UPDATE `domain` SET
`relay_all_recipients` = : relay_all_recipients ,
`backupmx` = : backupmx ,
`active` = : active ,
`quota` = : quota ,
`maxquota` = : maxquota ,
`relayhost` = : relayhost ,
`mailboxes` = : mailboxes ,
`aliases` = : aliases ,
`description` = : description
WHERE `domain` = : domain " );
$stmt -> execute ( array (
':relay_all_recipients' => $relay_all_recipients ,
':backupmx' => $backupmx ,
':active' => $active ,
':quota' => $quota ,
':maxquota' => $maxquota ,
':relayhost' => $relayhost ,
':mailboxes' => $mailboxes ,
':aliases' => $aliases ,
':description' => $description ,
':domain' => $domain
));
2018-08-15 00:05:18 +02:00
$_SESSION [ 'return' ][] = array (
'type' => 'success' ,
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => array ( 'domain_modified' , htmlspecialchars ( $domain ))
);
2017-05-23 09:36:59 +02:00
}
}
break ;
case 'mailbox' :
if ( ! is_array ( $_data [ 'username' ])) {
$usernames = array ();
$usernames [] = $_data [ 'username' ];
}
else {
$usernames = $_data [ 'username' ];
}
foreach ( $usernames as $username ) {
if ( ! filter_var ( $username , FILTER_VALIDATE_EMAIL )) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
2018-08-13 23:20:40 +02:00
'msg' => array ( 'username_invalid' , $username )
2017-05-23 09:36:59 +02:00
);
2018-08-13 23:20:40 +02:00
continue ;
2017-05-23 09:36:59 +02:00
}
$is_now = mailbox ( 'get' , 'mailbox_details' , $username );
if ( ! empty ( $is_now )) {
2017-07-16 11:03:28 +02:00
$active = ( isset ( $_data [ 'active' ])) ? intval ( $_data [ 'active' ]) : $is_now [ 'active_int' ];
2018-02-16 22:40:51 +01:00
( int ) $force_pw_update = ( isset ( $_data [ 'force_pw_update' ])) ? intval ( $_data [ 'force_pw_update' ]) : intval ( $is_now [ 'attributes' ][ 'force_pw_update' ]);
2018-10-23 21:14:57 +02:00
( int ) $sogo_access = ( isset ( $_data [ 'sogo_access' ])) ? intval ( $_data [ 'sogo_access' ]) : intval ( $is_now [ 'attributes' ][ 'sogo_access' ]);
2017-05-23 09:36:59 +02:00
$name = ( ! empty ( $_data [ 'name' ])) ? $_data [ 'name' ] : $is_now [ 'name' ];
$domain = $is_now [ 'domain' ];
$quota_m = ( ! empty ( $_data [ 'quota' ])) ? $_data [ 'quota' ] : ( $is_now [ 'quota' ] / 1048576 );
$quota_b = $quota_m * 1048576 ;
$password = ( ! empty ( $_data [ 'password' ])) ? $_data [ 'password' ] : null ;
$password2 = ( ! empty ( $_data [ 'password2' ])) ? $_data [ 'password2' ] : null ;
}
else {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'access_denied'
2017-05-23 09:36:59 +02:00
);
2018-08-13 23:20:40 +02:00
continue ;
2017-05-23 09:36:59 +02:00
}
2018-08-13 23:20:40 +02:00
$stmt = $pdo -> prepare ( " SELECT `quota`, `maxquota`
FROM `domain`
WHERE `domain` = : domain " );
$stmt -> execute ( array ( ':domain' => $domain ));
$DomainData = $stmt -> fetch ( PDO :: FETCH_ASSOC );
2017-05-23 09:36:59 +02:00
if ( ! hasDomainAccess ( $_SESSION [ 'mailcow_cc_username' ], $_SESSION [ 'mailcow_cc_role' ], $domain )) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'access_denied'
2017-05-23 09:36:59 +02:00
);
2018-08-13 23:20:40 +02:00
continue ;
2017-05-23 09:36:59 +02:00
}
if ( ! is_numeric ( $quota_m ) || $quota_m == " 0 " ) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => array ( 'quota_not_0_not_numeric' , htmlspecialchars ( $quota_m ))
2017-05-23 09:36:59 +02:00
);
2018-08-13 23:20:40 +02:00
continue ;
2017-05-23 09:36:59 +02:00
}
if ( $quota_m > $DomainData [ 'maxquota' ]) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => array ( 'mailbox_quota_exceeded' , $DomainData [ 'maxquota' ])
2017-05-23 09:36:59 +02:00
);
2018-08-13 23:20:40 +02:00
continue ;
2017-05-23 09:36:59 +02:00
}
if (((( $is_now [ 'quota_used' ] / 1048576 ) - $quota_m ) + $quota_m ) > $DomainData [ 'quota' ]) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => array ( 'mailbox_quota_left_exceeded' , ( $is_now [ 'max_new_quota' ] / 1048576 ))
2017-05-23 09:36:59 +02:00
);
2018-08-13 23:20:40 +02:00
continue ;
2017-05-23 09:36:59 +02:00
}
if ( isset ( $_data [ 'sender_acl' ])) {
// Get sender_acl items set by admin
$sender_acl_admin = array_merge (
mailbox ( 'get' , 'sender_acl_handles' , $username )[ 'sender_acl_domains' ][ 'ro' ],
mailbox ( 'get' , 'sender_acl_handles' , $username )[ 'sender_acl_addresses' ][ 'ro' ]
);
// Get sender_acl items from POST array
2018-08-03 20:31:33 +02:00
// Set sender_acl_domain_admin to empty array if sender_acl contains "default" to trigger a reset
// Delete records from sender_acl if sender_acl contains "*" and set to array("*")
$_data [ 'sender_acl' ] = ( array ) $_data [ 'sender_acl' ];
if ( in_array ( " * " , $_data [ 'sender_acl' ])) {
$sender_acl_domain_admin = array ( '*' );
}
elseif ( array ( " default " ) === $_data [ 'sender_acl' ]) {
$sender_acl_domain_admin = array ();
}
else {
if ( array_search ( 'default' , $_data [ 'sender_acl' ]) !== false ){
2018-08-13 23:20:40 +02:00
unset ( $_data [ 'sender_acl' ][ array_search ( 'default' , $_data [ 'sender_acl' ])]);
2018-08-03 20:31:33 +02:00
}
$sender_acl_domain_admin = $_data [ 'sender_acl' ];
}
2017-05-23 09:36:59 +02:00
if ( ! empty ( $sender_acl_domain_admin ) || ! empty ( $sender_acl_admin )) {
2017-07-16 11:03:28 +02:00
// Check items in POST array and skip invalid
foreach ( $sender_acl_domain_admin as $key => $val ) {
2018-08-03 20:31:33 +02:00
// Check for invalid domain or email format or not *
if ( ! filter_var ( $val , FILTER_VALIDATE_EMAIL ) && ! is_valid_domain_name ( ltrim ( $val , '@' )) && $val != '*' ) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
'type' => 'danger' ,
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => array ( 'sender_acl_invalid' , $sender_acl_domain_admin [ $key ])
);
2017-07-16 11:03:28 +02:00
unset ( $sender_acl_domain_admin [ $key ]);
2018-08-03 20:31:33 +02:00
continue ;
2017-05-23 09:36:59 +02:00
}
2018-08-03 20:31:33 +02:00
// Check if user has domain access (if object is domain)
2018-08-13 23:20:40 +02:00
$domain = ltrim ( $sender_acl_domain_admin [ $key ], '@' );
2018-08-03 20:31:33 +02:00
if ( is_valid_domain_name ( $domain )) {
// Check for- and skip non-mailcow domains
$domains = array_merge ( mailbox ( 'get' , 'domains' ), mailbox ( 'get' , 'alias_domains' ));
if ( ! empty ( $domains )) {
if ( ! in_array ( $domain , $domains )) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
'type' => 'danger' ,
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => array ( 'sender_acl_invalid' , $sender_acl_domain_admin [ $key ])
);
2018-08-03 20:31:33 +02:00
unset ( $sender_acl_domain_admin [ $key ]);
continue ;
}
}
if ( ! hasDomainAccess ( $_SESSION [ 'mailcow_cc_username' ], $_SESSION [ 'mailcow_cc_role' ], $domain )) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
2018-08-13 23:20:40 +02:00
'msg' => array ( 'sender_acl_invalid' , $sender_acl_domain_admin [ $key ])
2017-05-23 09:36:59 +02:00
);
2018-08-13 23:20:40 +02:00
unset ( $sender_acl_domain_admin [ $key ]);
continue ;
2017-05-23 09:36:59 +02:00
}
}
2018-08-03 20:31:33 +02:00
// Wildcard can only be used if role == admin
if ( $val == '*' && $_SESSION [ 'mailcow_cc_role' ] != 'admin' ) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2018-08-03 20:31:33 +02:00
'type' => 'danger' ,
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
2018-08-13 23:20:40 +02:00
'msg' => array ( 'sender_acl_invalid' , $sender_acl_domain_admin [ $key ])
2018-08-03 20:31:33 +02:00
);
2018-08-13 23:20:40 +02:00
unset ( $sender_acl_domain_admin [ $key ]);
continue ;
2018-08-03 20:31:33 +02:00
}
// Check if user has mailbox access (if object is email)
2017-07-16 11:03:28 +02:00
if ( filter_var ( $val , FILTER_VALIDATE_EMAIL )) {
if ( ! hasMailboxObjectAccess ( $_SESSION [ 'mailcow_cc_username' ], $_SESSION [ 'mailcow_cc_role' ], $val )) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
2018-08-13 23:20:40 +02:00
'msg' => array ( 'sender_acl_invalid' , $sender_acl_domain_admin [ $key ])
2017-05-23 09:36:59 +02:00
);
2018-08-13 23:20:40 +02:00
unset ( $sender_acl_domain_admin [ $key ]);
continue ;
2017-05-23 09:36:59 +02:00
}
}
}
// Merge both arrays
$sender_acl_merged = array_merge ( $sender_acl_domain_admin , $sender_acl_admin );
2018-08-03 20:31:33 +02:00
// If merged array still contains "*", set it as only value
! in_array ( '*' , $sender_acl_merged ) ? : $sender_acl_merged = array ( '*' );
2018-08-13 23:20:40 +02:00
$stmt = $pdo -> prepare ( " DELETE FROM `sender_acl` WHERE `logged_in_as` = :username " );
$stmt -> execute ( array (
':username' => $username
));
2017-05-23 09:36:59 +02:00
foreach ( $sender_acl_merged as $sender_acl ) {
$domain = ltrim ( $sender_acl , '@' );
if ( is_valid_domain_name ( $domain )) {
$sender_acl = '@' . $domain ;
}
2018-08-13 23:20:40 +02:00
$stmt = $pdo -> prepare ( " INSERT INTO `sender_acl` (`send_as`, `logged_in_as`)
VALUES ( : sender_acl , : username ) " );
2017-05-23 09:36:59 +02:00
$stmt -> execute ( array (
2018-08-13 23:20:40 +02:00
':sender_acl' => $sender_acl ,
2017-05-23 09:36:59 +02:00
':username' => $username
));
}
2018-08-13 23:20:40 +02:00
}
else {
$stmt = $pdo -> prepare ( " DELETE FROM `sender_acl` WHERE `logged_in_as` = :username " );
$stmt -> execute ( array (
':username' => $username
));
2017-05-23 09:36:59 +02:00
}
}
if ( ! empty ( $password ) && ! empty ( $password2 )) {
if ( ! preg_match ( '/' . $GLOBALS [ 'PASSWD_REGEP' ] . '/' , $password )) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'password_complexity'
2017-05-23 09:36:59 +02:00
);
2018-08-13 23:20:40 +02:00
continue ;
2017-05-23 09:36:59 +02:00
}
if ( $password != $password2 ) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'password_mismatch'
2017-05-23 09:36:59 +02:00
);
2018-08-13 23:20:40 +02:00
continue ;
2017-05-23 09:36:59 +02:00
}
$password_hashed = hash_password ( $password );
$stmt = $pdo -> prepare ( " UPDATE `mailbox` SET
2018-08-13 23:20:40 +02:00
`password` = : password_hashed
2017-05-23 09:36:59 +02:00
WHERE `username` = : username " );
$stmt -> execute ( array (
2018-08-13 23:20:40 +02:00
':password_hashed' => $password_hashed ,
2017-05-23 09:36:59 +02:00
':username' => $username
));
}
2018-08-13 23:20:40 +02:00
$stmt = $pdo -> prepare ( " UPDATE `alias` SET
`active` = : active
WHERE `address` = : address " );
$stmt -> execute ( array (
':address' => $username ,
':active' => $active
));
$stmt = $pdo -> prepare ( " UPDATE `mailbox` SET
`active` = : active ,
`name` = : name ,
`quota` = : quota_b ,
2018-10-23 21:14:57 +02:00
`attributes` = JSON_SET ( `attributes` , '$.force_pw_update' , : force_pw_update ),
`attributes` = JSON_SET ( `attributes` , '$.sogo_access' , : sogo_access )
2018-08-13 23:20:40 +02:00
WHERE `username` = : username " );
$stmt -> execute ( array (
':active' => $active ,
':name' => $name ,
':quota_b' => $quota_b ,
':force_pw_update' => $force_pw_update ,
2018-10-23 21:14:57 +02:00
':sogo_access' => $sogo_access ,
2018-08-13 23:20:40 +02:00
':username' => $username
));
$_SESSION [ 'return' ][] = array (
'type' => 'success' ,
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => array ( 'mailbox_modified' , $username )
);
2017-05-23 09:36:59 +02:00
}
break ;
case 'resource' :
if ( ! is_array ( $_data [ 'name' ])) {
$names = array ();
$names [] = $_data [ 'name' ];
}
else {
$names = $_data [ 'name' ];
}
foreach ( $names as $name ) {
$is_now = mailbox ( 'get' , 'resource_details' , $name );
if ( ! empty ( $is_now )) {
2017-07-16 11:03:28 +02:00
$active = ( isset ( $_data [ 'active' ])) ? intval ( $_data [ 'active' ]) : $is_now [ 'active_int' ];
2018-05-06 21:51:00 +02:00
$multiple_bookings = ( isset ( $_data [ 'multiple_bookings' ])) ? intval ( $_data [ 'multiple_bookings' ]) : $is_now [ 'multiple_bookings' ];
2017-05-23 09:36:59 +02:00
$description = ( ! empty ( $_data [ 'description' ])) ? $_data [ 'description' ] : $is_now [ 'description' ];
$kind = ( ! empty ( $_data [ 'kind' ])) ? $_data [ 'kind' ] : $is_now [ 'kind' ];
}
else {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
2018-08-13 23:20:40 +02:00
'msg' => array ( 'resource_invalid' , htmlspecialchars ( $name ))
2017-05-23 09:36:59 +02:00
);
2018-08-13 23:20:40 +02:00
continue ;
2017-05-23 09:36:59 +02:00
}
if ( ! filter_var ( $name , FILTER_VALIDATE_EMAIL )) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
2018-08-13 23:20:40 +02:00
'msg' => array ( 'resource_invalid' , htmlspecialchars ( $name ))
2017-05-23 09:36:59 +02:00
);
2018-08-13 23:20:40 +02:00
continue ;
2017-05-23 09:36:59 +02:00
}
2018-05-06 21:51:00 +02:00
if ( ! isset ( $multiple_bookings ) || $multiple_bookings < - 1 ) {
$multiple_bookings = - 1 ;
}
2017-05-23 09:36:59 +02:00
if ( empty ( $description )) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
2018-08-13 23:20:40 +02:00
'msg' => array ( 'description_invalid' , htmlspecialchars ( $name ))
2017-05-23 09:36:59 +02:00
);
2018-08-13 23:20:40 +02:00
continue ;
2017-05-23 09:36:59 +02:00
}
if ( $kind != 'location' && $kind != 'group' && $kind != 'thing' ) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
2018-08-13 23:20:40 +02:00
'msg' => array ( 'resource_invalid' , htmlspecialchars ( $name ))
2017-05-23 09:36:59 +02:00
);
2018-08-13 23:20:40 +02:00
continue ;
2017-05-23 09:36:59 +02:00
}
if ( ! hasMailboxObjectAccess ( $_SESSION [ 'mailcow_cc_username' ], $_SESSION [ 'mailcow_cc_role' ], $name )) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'access_denied'
2017-05-23 09:36:59 +02:00
);
2018-08-13 23:20:40 +02:00
continue ;
2017-05-23 09:36:59 +02:00
}
2018-08-13 23:20:40 +02:00
$stmt = $pdo -> prepare ( " UPDATE `mailbox` SET
`active` = : active ,
`name` = : description ,
`kind` = : kind ,
`multiple_bookings` = : multiple_bookings
WHERE `username` = : name " );
$stmt -> execute ( array (
':active' => $active ,
':description' => $description ,
':multiple_bookings' => $multiple_bookings ,
':kind' => $kind ,
':name' => $name
));
$_SESSION [ 'return' ][] = array (
'type' => 'success' ,
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => array ( 'resource_modified' , htmlspecialchars ( $name ))
);
2017-05-23 09:36:59 +02:00
}
break ;
}
break ;
case 'get' :
switch ( $_type ) {
case 'sender_acl_handles' :
if ( $_SESSION [ 'mailcow_cc_role' ] != " admin " && $_SESSION [ 'mailcow_cc_role' ] != " domainadmin " ) {
return false ;
}
$data [ 'sender_acl_domains' ][ 'ro' ] = array ();
$data [ 'sender_acl_domains' ][ 'rw' ] = array ();
$data [ 'sender_acl_domains' ][ 'selectable' ] = array ();
$data [ 'sender_acl_addresses' ][ 'ro' ] = array ();
$data [ 'sender_acl_addresses' ][ 'rw' ] = array ();
$data [ 'sender_acl_addresses' ][ 'selectable' ] = array ();
$data [ 'fixed_sender_aliases' ] = array ();
2018-08-13 23:20:40 +02:00
// Fixed addresses
$stmt = $pdo -> prepare ( " SELECT `address` FROM `alias` WHERE `goto` REGEXP :goto AND `address` NOT LIKE '@%' " );
$stmt -> execute ( array ( ':goto' => '(^|,)' . $_data . '($|,)' ));
$rows = $stmt -> fetchAll ( PDO :: FETCH_ASSOC );
while ( $row = array_shift ( $rows )) {
$data [ 'fixed_sender_aliases' ][] = $row [ 'address' ];
}
$stmt = $pdo -> prepare ( " SELECT CONCAT(`local_part`, '@', `alias_domain`.`alias_domain`) AS `alias_domain_alias` FROM `mailbox`, `alias_domain`
WHERE `alias_domain` . `target_domain` = `mailbox` . `domain`
AND `mailbox` . `username` = : username " );
$stmt -> execute ( array ( ':username' => $_data ));
$rows = $stmt -> fetchAll ( PDO :: FETCH_ASSOC );
while ( $row = array_shift ( $rows )) {
if ( ! empty ( $row [ 'alias_domain_alias' ])) {
$data [ 'fixed_sender_aliases' ][] = $row [ 'alias_domain_alias' ];
}
}
// Return array $data['sender_acl_domains/addresses']['ro'] with read-only objects
// Return array $data['sender_acl_domains/addresses']['rw'] with read-write objects (can be deleted)
$stmt = $pdo -> prepare ( " SELECT REPLACE(`send_as`, '@', '') AS `send_as` FROM `sender_acl` WHERE `logged_in_as` = :logged_in_as AND (`send_as` LIKE '@%' OR `send_as` = '*') " );
$stmt -> execute ( array ( ':logged_in_as' => $_data ));
$domain_rows = $stmt -> fetchAll ( PDO :: FETCH_ASSOC );
while ( $domain_row = array_shift ( $domain_rows )) {
if ( is_valid_domain_name ( $domain_row [ 'send_as' ]) && ! hasDomainAccess ( $_SESSION [ 'mailcow_cc_username' ], $_SESSION [ 'mailcow_cc_role' ], $domain_row [ 'send_as' ])) {
$data [ 'sender_acl_domains' ][ 'ro' ][] = $domain_row [ 'send_as' ];
continue ;
2017-05-23 09:36:59 +02:00
}
2018-08-13 23:20:40 +02:00
if ( is_valid_domain_name ( $domain_row [ 'send_as' ]) && hasDomainAccess ( $_SESSION [ 'mailcow_cc_username' ], $_SESSION [ 'mailcow_cc_role' ], $domain_row [ 'send_as' ])) {
$data [ 'sender_acl_domains' ][ 'rw' ][] = $domain_row [ 'send_as' ];
continue ;
2017-05-23 09:36:59 +02:00
}
2018-08-13 23:20:40 +02:00
if ( $domain_row [ 'send_as' ] == '*' && $_SESSION [ 'mailcow_cc_role' ] != 'admin' ) {
$data [ 'sender_acl_domains' ][ 'ro' ][] = $domain_row [ 'send_as' ];
2017-05-23 09:36:59 +02:00
}
2018-08-13 23:20:40 +02:00
if ( $domain_row [ 'send_as' ] == '*' && $_SESSION [ 'mailcow_cc_role' ] == 'admin' ) {
$data [ 'sender_acl_domains' ][ 'rw' ][] = $domain_row [ 'send_as' ];
2017-05-23 09:36:59 +02:00
}
2018-08-13 23:20:40 +02:00
}
$stmt = $pdo -> prepare ( " SELECT `send_as` FROM `sender_acl` WHERE `logged_in_as` = :logged_in_as AND (`send_as` NOT LIKE '@%' AND `send_as` != '*') " );
$stmt -> execute ( array ( ':logged_in_as' => $_data ));
$address_rows = $stmt -> fetchAll ( PDO :: FETCH_ASSOC );
while ( $address_row = array_shift ( $address_rows )) {
if ( filter_var ( $address_row [ 'send_as' ], FILTER_VALIDATE_EMAIL ) && ! hasMailboxObjectAccess ( $_SESSION [ 'mailcow_cc_username' ], $_SESSION [ 'mailcow_cc_role' ], $address_row [ 'send_as' ])) {
$data [ 'sender_acl_addresses' ][ 'ro' ][] = $address_row [ 'send_as' ];
continue ;
2017-05-23 09:36:59 +02:00
}
2018-08-13 23:20:40 +02:00
if ( filter_var ( $address_row [ 'send_as' ], FILTER_VALIDATE_EMAIL ) && hasMailboxObjectAccess ( $_SESSION [ 'mailcow_cc_username' ], $_SESSION [ 'mailcow_cc_role' ], $address_row [ 'send_as' ])) {
$data [ 'sender_acl_addresses' ][ 'rw' ][] = $address_row [ 'send_as' ];
continue ;
2017-05-23 09:36:59 +02:00
}
}
2018-08-13 23:20:40 +02:00
$stmt = $pdo -> prepare ( " SELECT `domain` FROM `domain`
WHERE `domain` NOT IN (
SELECT REPLACE ( `send_as` , '@' , '' ) FROM `sender_acl`
WHERE `logged_in_as` = : logged_in_as1
AND `send_as` LIKE '@%' )
UNION
SELECT '*' FROM `domain`
WHERE '*' NOT IN (
SELECT `send_as` FROM `sender_acl`
WHERE `logged_in_as` = : logged_in_as2
) " );
$stmt -> execute ( array (
':logged_in_as1' => $_data ,
':logged_in_as2' => $_data
));
$rows_domain = $stmt -> fetchAll ( PDO :: FETCH_ASSOC );
while ( $row_domain = array_shift ( $rows_domain )) {
if ( is_valid_domain_name ( $row_domain [ 'domain' ]) && hasDomainAccess ( $_SESSION [ 'mailcow_cc_username' ], $_SESSION [ 'mailcow_cc_role' ], $row_domain [ 'domain' ])) {
$data [ 'sender_acl_domains' ][ 'selectable' ][] = $row_domain [ 'domain' ];
continue ;
}
if ( $row_domain [ 'domain' ] == '*' && $_SESSION [ 'mailcow_cc_role' ] == 'admin' ) {
$data [ 'sender_acl_domains' ][ 'selectable' ][] = $row_domain [ 'domain' ];
continue ;
}
}
$stmt = $pdo -> prepare ( " SELECT `address` FROM `alias`
WHERE `goto` != : goto
AND `address` NOT IN (
SELECT `send_as` FROM `sender_acl`
WHERE `logged_in_as` = : logged_in_as
AND `send_as` NOT LIKE '@%' ) " );
$stmt -> execute ( array (
':logged_in_as' => $_data ,
':goto' => $_data
));
$rows_mbox = $stmt -> fetchAll ( PDO :: FETCH_ASSOC );
while ( $row = array_shift ( $rows_mbox )) {
if ( filter_var ( $row [ 'address' ], FILTER_VALIDATE_EMAIL ) && hasMailboxObjectAccess ( $_SESSION [ 'mailcow_cc_username' ], $_SESSION [ 'mailcow_cc_role' ], $row [ 'address' ])) {
$data [ 'sender_acl_addresses' ][ 'selectable' ][] = $row [ 'address' ];
}
2017-05-23 09:36:59 +02:00
}
return $data ;
break ;
case 'mailboxes' :
$mailboxes = array ();
if ( isset ( $_data ) && ! hasDomainAccess ( $_SESSION [ 'mailcow_cc_username' ], $_SESSION [ 'mailcow_cc_role' ], $_data )) {
return false ;
}
elseif ( isset ( $_data ) && hasDomainAccess ( $_SESSION [ 'mailcow_cc_username' ], $_SESSION [ 'mailcow_cc_role' ], $_data )) {
2018-10-11 11:59:23 +02:00
$stmt = $pdo -> prepare ( " SELECT `username` FROM `mailbox` WHERE `kind` NOT REGEXP 'location|thing|group' AND `domain` = :domain " );
2018-08-13 23:20:40 +02:00
$stmt -> execute ( array (
':domain' => $_data ,
));
$rows = $stmt -> fetchAll ( PDO :: FETCH_ASSOC );
while ( $row = array_shift ( $rows )) {
$mailboxes [] = $row [ 'username' ];
2017-05-23 09:36:59 +02:00
}
}
else {
2018-08-13 23:20:40 +02:00
$stmt = $pdo -> prepare ( " SELECT `username` FROM `mailbox` WHERE `kind` NOT REGEXP 'location|thing|group' AND (`domain` IN (SELECT `domain` FROM `domain_admins` WHERE `active` = '1' AND `username` = :username) OR 'admin' = :role) " );
$stmt -> execute ( array (
':username' => $_SESSION [ 'mailcow_cc_username' ],
':role' => $_SESSION [ 'mailcow_cc_role' ],
));
$rows = $stmt -> fetchAll ( PDO :: FETCH_ASSOC );
while ( $row = array_shift ( $rows )) {
$mailboxes [] = $row [ 'username' ];
2017-05-23 09:36:59 +02:00
}
}
return $mailboxes ;
break ;
case 'tls_policy' :
2018-02-17 11:12:16 +01:00
$attrs = array ();
2017-05-23 09:36:59 +02:00
if ( isset ( $_data ) && filter_var ( $_data , FILTER_VALIDATE_EMAIL )) {
if ( ! hasMailboxObjectAccess ( $_SESSION [ 'mailcow_cc_username' ], $_SESSION [ 'mailcow_cc_role' ], $_data )) {
return false ;
}
}
else {
$_data = $_SESSION [ 'mailcow_cc_username' ];
}
2018-08-13 23:20:40 +02:00
$stmt = $pdo -> prepare ( " SELECT `attributes` FROM `mailbox` WHERE `username` = :username " );
$stmt -> execute ( array ( ':username' => $_data ));
$attrs = $stmt -> fetch ( PDO :: FETCH_ASSOC );
2018-02-17 11:12:16 +01:00
$attrs = json_decode ( $attrs [ 'attributes' ], true );
return array (
'tls_enforce_in' => $attrs [ 'tls_enforce_in' ],
'tls_enforce_out' => $attrs [ 'tls_enforce_out' ]
);
2017-05-23 09:36:59 +02:00
break ;
2017-11-03 20:37:24 +01:00
case 'filters' :
$filters = array ();
if ( isset ( $_data ) && filter_var ( $_data , FILTER_VALIDATE_EMAIL )) {
if ( ! hasMailboxObjectAccess ( $_SESSION [ 'mailcow_cc_username' ], $_SESSION [ 'mailcow_cc_role' ], $_data )) {
return false ;
}
}
else {
$_data = $_SESSION [ 'mailcow_cc_username' ];
}
2018-08-13 23:20:40 +02:00
$stmt = $pdo -> prepare ( " SELECT `id` FROM `sieve_filters` WHERE `username` = :username " );
$stmt -> execute ( array ( ':username' => $_data ));
$rows = $stmt -> fetchAll ( PDO :: FETCH_ASSOC );
while ( $row = array_shift ( $rows )) {
$filters [] = $row [ 'id' ];
2017-11-03 20:37:24 +01:00
}
return $filters ;
break ;
case 'filter_details' :
$filter_details = array ();
if ( ! is_numeric ( $_data )) {
return false ;
}
2018-08-13 23:20:40 +02:00
$stmt = $pdo -> prepare ( " SELECT CASE `script_name` WHEN 'active' THEN ' " . $lang [ 'mailbox' ][ 'yes' ] . " ' ELSE ' " . $lang [ 'mailbox' ][ 'no' ] . " ' END AS `active`,
CASE `script_name` WHEN 'active' THEN 1 ELSE 0 END AS `active_int` ,
id ,
username ,
filter_type ,
script_data ,
script_desc
FROM `sieve_filters`
WHERE `id` = : id " );
$stmt -> execute ( array ( ':id' => $_data ));
$filter_details = $stmt -> fetch ( PDO :: FETCH_ASSOC );
2017-11-03 20:37:24 +01:00
if ( ! hasMailboxObjectAccess ( $_SESSION [ 'mailcow_cc_username' ], $_SESSION [ 'mailcow_cc_role' ], $filter_details [ 'username' ])) {
return false ;
}
return $filter_details ;
break ;
case 'active_user_sieve' :
$filter_details = array ();
if ( isset ( $_data ) && filter_var ( $_data , FILTER_VALIDATE_EMAIL )) {
if ( ! hasMailboxObjectAccess ( $_SESSION [ 'mailcow_cc_username' ], $_SESSION [ 'mailcow_cc_role' ], $_data )) {
return false ;
}
}
else {
$_data = $_SESSION [ 'mailcow_cc_username' ];
}
$exec_fields = array (
2018-10-23 21:14:57 +02:00
'cmd' => 'sieve' ,
'task' => 'list' ,
2017-11-03 20:37:24 +01:00
'username' => $_data
);
2018-10-23 21:14:57 +02:00
$filters = docker ( 'post' , 'dovecot-mailcow' , 'exec' , $exec_fields );
$filters = array_filter ( preg_split ( " /( \r \n | \n | \r )/ " , $filters ));
2017-11-03 20:37:24 +01:00
foreach ( $filters as $filter ) {
if ( preg_match ( '/.+ ACTIVE/i' , $filter )) {
$exec_fields = array (
2018-10-23 21:14:57 +02:00
'cmd' => 'sieve' ,
'task' => 'print' ,
2017-11-03 20:37:24 +01:00
'script_name' => substr ( $filter , 0 , - 7 ),
'username' => $_data
);
2018-10-23 21:14:57 +02:00
$script = docker ( 'post' , 'dovecot-mailcow' , 'exec' , $exec_fields );
// Remove first line
return preg_replace ( '/^.+\n/' , '' , $script );
2017-11-03 20:37:24 +01:00
}
}
return false ;
break ;
2017-05-23 09:36:59 +02:00
case 'syncjob_details' :
$syncjobdetails = array ();
if ( ! is_numeric ( $_data )) {
return false ;
}
2018-08-13 23:20:40 +02:00
if ( isset ( $_extra ) && in_array ( 'no_log' , $_extra )) {
$field_query = $pdo -> query ( 'SHOW FIELDS FROM `imapsync` WHERE FIELD NOT IN ("returned_text", "password1")' );
$fields = $field_query -> fetchAll ( PDO :: FETCH_ASSOC );
while ( $field = array_shift ( $fields )) {
$shown_fields [] = $field [ 'Field' ];
2017-11-03 20:37:24 +01:00
}
2018-08-13 23:20:40 +02:00
$stmt = $pdo -> prepare ( " SELECT " . implode ( ',' , $shown_fields ) . " ,
`active` AS `active_int` ,
CASE `active` WHEN 1 THEN '".$lang[' mailbox '][' yes ']."' ELSE '".$lang[' mailbox '][' no ']."' END AS `active`
FROM `imapsync` WHERE id = : id " );
}
elseif ( isset ( $_extra ) && in_array ( 'with_password' , $_extra )) {
$stmt = $pdo -> prepare ( " SELECT *,
`active` AS `active_int` ,
CASE `active` WHEN 1 THEN '".$lang[' mailbox '][' yes ']."' ELSE '".$lang[' mailbox '][' no ']."' END AS `active`
FROM `imapsync` WHERE id = : id " );
}
else {
$field_query = $pdo -> query ( 'SHOW FIELDS FROM `imapsync` WHERE FIELD NOT IN ("password1")' );
$fields = $field_query -> fetchAll ( PDO :: FETCH_ASSOC );
while ( $field = array_shift ( $fields )) {
$shown_fields [] = $field [ 'Field' ];
2017-11-03 20:37:24 +01:00
}
2018-08-13 23:20:40 +02:00
$stmt = $pdo -> prepare ( " SELECT " . implode ( ',' , $shown_fields ) . " ,
`active` AS `active_int` ,
CASE `active` WHEN 1 THEN '".$lang[' mailbox '][' yes ']."' ELSE '".$lang[' mailbox '][' no ']."' END AS `active`
FROM `imapsync` WHERE id = : id " );
2017-05-23 09:36:59 +02:00
}
2018-08-13 23:20:40 +02:00
$stmt -> execute ( array ( ':id' => $_data ));
$syncjobdetails = $stmt -> fetch ( PDO :: FETCH_ASSOC );
if ( ! empty ( $syncjobdetails [ 'returned_text' ])) {
$syncjobdetails [ 'log' ] = $syncjobdetails [ 'returned_text' ];
}
else {
$syncjobdetails [ 'log' ] = '' ;
2017-05-23 09:36:59 +02:00
}
2018-08-13 23:20:40 +02:00
unset ( $syncjobdetails [ 'returned_text' ]);
2017-05-23 09:36:59 +02:00
if ( ! hasMailboxObjectAccess ( $_SESSION [ 'mailcow_cc_username' ], $_SESSION [ 'mailcow_cc_role' ], $syncjobdetails [ 'user2' ])) {
return false ;
}
return $syncjobdetails ;
break ;
case 'syncjobs' :
$syncjobdata = array ();
if ( isset ( $_data ) && filter_var ( $_data , FILTER_VALIDATE_EMAIL )) {
if ( ! hasMailboxObjectAccess ( $_SESSION [ 'mailcow_cc_username' ], $_SESSION [ 'mailcow_cc_role' ], $_data )) {
return false ;
}
}
else {
$_data = $_SESSION [ 'mailcow_cc_username' ];
}
2018-08-13 23:20:40 +02:00
$stmt = $pdo -> prepare ( " SELECT `id` FROM `imapsync` WHERE `user2` = :username " );
$stmt -> execute ( array ( ':username' => $_data ));
$rows = $stmt -> fetchAll ( PDO :: FETCH_ASSOC );
while ( $row = array_shift ( $rows )) {
$syncjobdata [] = $row [ 'id' ];
2017-05-23 09:36:59 +02:00
}
return $syncjobdata ;
break ;
case 'spam_score' :
2018-10-18 21:48:30 +02:00
$curl = curl_init ();
curl_setopt ( $curl , CURLOPT_UNIX_SOCKET_PATH , '/var/lib/rspamd/rspamd.sock' );
curl_setopt ( $curl , CURLOPT_URL , " http://rspamd/actions " );
curl_setopt ( $curl , CURLOPT_RETURNTRANSFER , true );
$default_actions = curl_exec ( $curl );
if ( ! curl_errno ( $curl )) {
$data_array = json_decode ( $default_actions , true );
curl_close ( $curl );
foreach ( $data_array as $data ) {
if ( $data [ 'action' ] == 'reject' ) {
$reject = $data [ 'value' ];
continue ;
}
elseif ( $data [ 'action' ] == 'add header' ) {
$add_header = $data [ 'value' ];
continue ;
}
}
if ( empty ( $add_header ) || empty ( $reject )) {
// Assume default, set warning
$default = " 5, 15 " ;
$_SESSION [ 'return' ][] = array (
'type' => 'warning' ,
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'Could not determine servers default spam score, assuming default'
);
}
else {
$default = $add_header . ', ' . $reject ;
}
}
else {
// Assume default, set warning
$default = " 5, 15 " ;
$_SESSION [ 'return' ][] = array (
'type' => 'warning' ,
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'Could not determine servers default spam score, assuming default'
);
}
curl_close ( $curl );
2017-05-23 09:36:59 +02:00
$policydata = array ();
if ( isset ( $_data ) && filter_var ( $_data , FILTER_VALIDATE_EMAIL )) {
if ( ! hasMailboxObjectAccess ( $_SESSION [ 'mailcow_cc_username' ], $_SESSION [ 'mailcow_cc_role' ], $_data )) {
return false ;
}
}
else {
$_data = $_SESSION [ 'mailcow_cc_username' ];
}
2018-08-13 23:20:40 +02:00
$stmt = $pdo -> prepare ( " SELECT `value` FROM `filterconf` WHERE `object` = :username AND
( `option` = 'lowspamlevel' OR `option` = 'highspamlevel' ) " );
$stmt -> execute ( array ( ':username' => $_data ));
$num_results = count ( $stmt -> fetchAll ( PDO :: FETCH_ASSOC ));
2017-05-23 09:36:59 +02:00
if ( empty ( $num_results )) {
return $default ;
}
else {
2018-08-13 23:20:40 +02:00
$stmt = $pdo -> prepare ( " SELECT `value` FROM `filterconf` WHERE `option` = 'highspamlevel' AND `object` = :username " );
$stmt -> execute ( array ( ':username' => $_data ));
$highspamlevel = $stmt -> fetch ( PDO :: FETCH_ASSOC );
$stmt = $pdo -> prepare ( " SELECT `value` FROM `filterconf` WHERE `option` = 'lowspamlevel' AND `object` = :username " );
$stmt -> execute ( array ( ':username' => $_data ));
$lowspamlevel = $stmt -> fetch ( PDO :: FETCH_ASSOC );
return $lowspamlevel [ 'value' ] . ', ' . $highspamlevel [ 'value' ];
2017-05-23 09:36:59 +02:00
}
break ;
case 'time_limited_aliases' :
$tladata = array ();
if ( isset ( $_data ) && filter_var ( $_data , FILTER_VALIDATE_EMAIL )) {
if ( ! hasMailboxObjectAccess ( $_SESSION [ 'mailcow_cc_username' ], $_SESSION [ 'mailcow_cc_role' ], $_data )) {
return false ;
}
}
else {
$_data = $_SESSION [ 'mailcow_cc_username' ];
}
2018-08-13 23:20:40 +02:00
$stmt = $pdo -> prepare ( " SELECT `address`,
`goto` ,
`validity`
FROM `spamalias`
WHERE `goto` = : username
AND `validity` >= : unixnow " );
$stmt -> execute ( array ( ':username' => $_data , ':unixnow' => time ()));
$tladata = $stmt -> fetchAll ( PDO :: FETCH_ASSOC );
2017-05-23 09:36:59 +02:00
return $tladata ;
break ;
case 'delimiter_action' :
$policydata = array ();
if ( isset ( $_data ) && filter_var ( $_data , FILTER_VALIDATE_EMAIL )) {
if ( ! hasMailboxObjectAccess ( $_SESSION [ 'mailcow_cc_username' ], $_SESSION [ 'mailcow_cc_role' ], $_data )) {
return false ;
}
}
else {
$_data = $_SESSION [ 'mailcow_cc_username' ];
}
try {
if ( $redis -> hGet ( 'RCPT_WANTS_SUBJECT_TAG' , $_data )) {
return " subject " ;
}
2018-01-16 16:31:37 +01:00
elseif ( $redis -> hGet ( 'RCPT_WANTS_SUBFOLDER_TAG' , $_data )) {
2017-05-23 09:36:59 +02:00
return " subfolder " ;
}
2018-01-16 12:47:59 +01:00
else {
return " none " ;
}
2017-05-23 09:36:59 +02:00
}
catch ( RedisException $e ) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => array ( 'redis_error' , $e )
2017-05-23 09:36:59 +02:00
);
return false ;
}
break ;
case 'resources' :
$resources = array ();
if ( isset ( $_data ) && ! hasDomainAccess ( $_SESSION [ 'mailcow_cc_username' ], $_SESSION [ 'mailcow_cc_role' ], $_data )) {
return false ;
}
elseif ( isset ( $_data ) && hasDomainAccess ( $_SESSION [ 'mailcow_cc_username' ], $_SESSION [ 'mailcow_cc_role' ], $_data )) {
2018-10-11 11:59:23 +02:00
$stmt = $pdo -> prepare ( " SELECT `username` FROM `mailbox` WHERE `kind` REGEXP 'location|thing|group' AND `domain` = :domain " );
2018-08-13 23:20:40 +02:00
$stmt -> execute ( array (
':domain' => $_data ,
));
$rows = $stmt -> fetchAll ( PDO :: FETCH_ASSOC );
while ( $row = array_shift ( $rows )) {
$resources [] = $row [ 'username' ];
2017-05-23 09:36:59 +02:00
}
}
else {
2018-08-13 23:20:40 +02:00
$stmt = $pdo -> prepare ( " SELECT `username` FROM `mailbox` WHERE `kind` REGEXP 'location|thing|group' AND `domain` IN (SELECT `domain` FROM `domain_admins` WHERE `active` = '1' AND `username` = :username) OR 'admin' = :role " );
$stmt -> execute ( array (
':username' => $_SESSION [ 'mailcow_cc_username' ],
':role' => $_SESSION [ 'mailcow_cc_role' ],
));
$rows = $stmt -> fetchAll ( PDO :: FETCH_ASSOC );
while ( $row = array_shift ( $rows )) {
$resources [] = $row [ 'username' ];
2017-05-23 09:36:59 +02:00
}
}
return $resources ;
break ;
case 'alias_domains' :
$aliasdomains = array ();
if ( isset ( $_data ) && ! hasDomainAccess ( $_SESSION [ 'mailcow_cc_username' ], $_SESSION [ 'mailcow_cc_role' ], $_data )) {
return false ;
}
elseif ( isset ( $_data ) && hasDomainAccess ( $_SESSION [ 'mailcow_cc_username' ], $_SESSION [ 'mailcow_cc_role' ], $_data )) {
2018-08-13 23:20:40 +02:00
$stmt = $pdo -> prepare ( " SELECT `alias_domain` FROM `alias_domain` WHERE `target_domain` = :domain " );
$stmt -> execute ( array (
':domain' => $_data ,
));
$rows = $stmt -> fetchAll ( PDO :: FETCH_ASSOC );
while ( $row = array_shift ( $rows )) {
$aliasdomains [] = $row [ 'alias_domain' ];
2017-05-23 09:36:59 +02:00
}
}
else {
2018-08-13 23:20:40 +02:00
$stmt = $pdo -> prepare ( " SELECT `alias_domain` FROM `alias_domain` WHERE `target_domain` IN (SELECT `domain` FROM `domain_admins` WHERE `active` = '1' AND `username` = :username) OR 'admin' = :role " );
$stmt -> execute ( array (
':username' => $_SESSION [ 'mailcow_cc_username' ],
':role' => $_SESSION [ 'mailcow_cc_role' ],
));
$rows = $stmt -> fetchAll ( PDO :: FETCH_ASSOC );
while ( $row = array_shift ( $rows )) {
$aliasdomains [] = $row [ 'alias_domain' ];
2017-05-23 09:36:59 +02:00
}
}
return $aliasdomains ;
break ;
case 'aliases' :
$aliases = array ();
if ( ! hasDomainAccess ( $_SESSION [ 'mailcow_cc_username' ], $_SESSION [ 'mailcow_cc_role' ], $_data )) {
return false ;
}
2018-08-13 23:20:40 +02:00
$stmt = $pdo -> prepare ( " SELECT `id` FROM `alias` WHERE `address` != `goto` AND `domain` = :domain " );
$stmt -> execute ( array (
':domain' => $_data ,
));
$rows = $stmt -> fetchAll ( PDO :: FETCH_ASSOC );
while ( $row = array_shift ( $rows )) {
$aliases [] = $row [ 'id' ];
2017-05-23 09:36:59 +02:00
}
return $aliases ;
break ;
case 'alias_details' :
$aliasdata = array ();
2018-08-13 23:20:40 +02:00
$stmt = $pdo -> prepare ( " SELECT
`id` ,
`domain` ,
`goto` ,
`address` ,
`active` as `active_int` ,
CASE `active` WHEN 1 THEN '".$lang[' mailbox '][' yes ']."' ELSE '".$lang[' mailbox '][' no ']."' END AS `active` ,
`created` ,
`modified`
FROM `alias`
WHERE `id` = : id AND `address` != `goto` " );
$stmt -> execute ( array (
':id' => intval ( $_data ),
));
$row = $stmt -> fetch ( PDO :: FETCH_ASSOC );
$stmt = $pdo -> prepare ( " SELECT `target_domain` FROM `alias_domain` WHERE `alias_domain` = :domain " );
$stmt -> execute ( array (
':domain' => $row [ 'domain' ],
));
$row_alias_domain = $stmt -> fetch ( PDO :: FETCH_ASSOC );
if ( isset ( $row_alias_domain [ 'target_domain' ]) && ! empty ( $row_alias_domain [ 'target_domain' ])) {
$aliasdata [ 'in_primary_domain' ] = $row_alias_domain [ 'target_domain' ];
2017-05-23 09:36:59 +02:00
}
2018-08-13 23:20:40 +02:00
else {
$aliasdata [ 'in_primary_domain' ] = " " ;
}
$aliasdata [ 'id' ] = $row [ 'id' ];
$aliasdata [ 'domain' ] = $row [ 'domain' ];
$aliasdata [ 'goto' ] = $row [ 'goto' ];
$aliasdata [ 'address' ] = $row [ 'address' ];
( ! filter_var ( $aliasdata [ 'address' ], FILTER_VALIDATE_EMAIL )) ? $aliasdata [ 'is_catch_all' ] = 1 : $aliasdata [ 'is_catch_all' ] = 0 ;
$aliasdata [ 'active' ] = $row [ 'active' ];
$aliasdata [ 'active_int' ] = $row [ 'active_int' ];
$aliasdata [ 'created' ] = $row [ 'created' ];
$aliasdata [ 'modified' ] = $row [ 'modified' ];
if ( ! hasDomainAccess ( $_SESSION [ 'mailcow_cc_username' ], $_SESSION [ 'mailcow_cc_role' ], $aliasdata [ 'domain' ])) {
2017-05-23 09:36:59 +02:00
return false ;
}
return $aliasdata ;
break ;
case 'alias_domain_details' :
$aliasdomaindata = array ();
2018-08-21 17:41:04 +02:00
$rl = ratelimit ( 'get' , 'domain' , $_data );
2018-08-13 23:20:40 +02:00
$stmt = $pdo -> prepare ( " SELECT
`alias_domain` ,
`target_domain` ,
`active` AS `active_int` ,
CASE `active` WHEN 1 THEN '".$lang[' mailbox '][' yes ']."' ELSE '".$lang[' mailbox '][' no ']."' END AS `active` ,
`created` ,
`modified`
FROM `alias_domain`
WHERE `alias_domain` = : aliasdomain " );
$stmt -> execute ( array (
':aliasdomain' => $_data ,
));
$row = $stmt -> fetch ( PDO :: FETCH_ASSOC );
$aliasdomaindata [ 'alias_domain' ] = $row [ 'alias_domain' ];
$aliasdomaindata [ 'target_domain' ] = $row [ 'target_domain' ];
$aliasdomaindata [ 'active' ] = $row [ 'active' ];
2018-08-21 17:41:04 +02:00
$aliasdomaindata [ 'rl' ] = $rl ;
2018-08-13 23:20:40 +02:00
$aliasdomaindata [ 'active_int' ] = $row [ 'active_int' ];
$aliasdomaindata [ 'created' ] = $row [ 'created' ];
$aliasdomaindata [ 'modified' ] = $row [ 'modified' ];
2017-05-23 09:36:59 +02:00
if ( ! hasDomainAccess ( $_SESSION [ 'mailcow_cc_username' ], $_SESSION [ 'mailcow_cc_role' ], $aliasdomaindata [ 'target_domain' ])) {
return false ;
}
return $aliasdomaindata ;
break ;
case 'domains' :
$domains = array ();
if ( $_SESSION [ 'mailcow_cc_role' ] != " admin " && $_SESSION [ 'mailcow_cc_role' ] != " domainadmin " ) {
return false ;
}
2018-08-13 23:20:40 +02:00
$stmt = $pdo -> prepare ( " SELECT `domain` FROM `domain`
WHERE ( `domain` IN (
SELECT `domain` from `domain_admins`
WHERE ( `active` = '1' AND `username` = : username ))
)
2018-10-11 11:59:23 +02:00
OR 'admin' = : role " );
2018-08-13 23:20:40 +02:00
$stmt -> execute ( array (
':username' => $_SESSION [ 'mailcow_cc_username' ],
':role' => $_SESSION [ 'mailcow_cc_role' ],
));
$rows = $stmt -> fetchAll ( PDO :: FETCH_ASSOC );
while ( $row = array_shift ( $rows )) {
$domains [] = $row [ 'domain' ];
2017-05-23 09:36:59 +02:00
}
return $domains ;
break ;
case 'domain_details' :
$domaindata = array ();
$_data = idn_to_ascii ( strtolower ( trim ( $_data )));
if ( ! hasDomainAccess ( $_SESSION [ 'mailcow_cc_username' ], $_SESSION [ 'mailcow_cc_role' ], $_data )) {
return false ;
}
2018-08-13 23:20:40 +02:00
$stmt = $pdo -> prepare ( " SELECT `target_domain` FROM `alias_domain` WHERE `alias_domain` = :domain " );
$stmt -> execute ( array (
':domain' => $_data
));
$row = $stmt -> fetch ( PDO :: FETCH_ASSOC );
if ( ! empty ( $row )) {
$_data = $row [ 'target_domain' ];
2017-05-23 09:36:59 +02:00
}
2018-08-13 23:20:40 +02:00
$stmt = $pdo -> prepare ( " SELECT
`domain` ,
`description` ,
`aliases` ,
`mailboxes` ,
`maxquota` ,
`quota` ,
`relayhost` ,
`relay_all_recipients` as `relay_all_recipients_int` ,
`backupmx` as `backupmx_int` ,
`active` as `active_int` ,
CASE `relay_all_recipients` WHEN 1 THEN '".$lang[' mailbox '][' yes ']."' ELSE '".$lang[' mailbox '][' no ']."' END AS `relay_all_recipients` ,
CASE `backupmx` WHEN 1 THEN '".$lang[' mailbox '][' yes ']."' ELSE '".$lang[' mailbox '][' no ']."' END AS `backupmx` ,
CASE `active` WHEN 1 THEN '".$lang[' mailbox '][' yes ']."' ELSE '".$lang[' mailbox '][' no ']."' END AS `active`
FROM `domain` WHERE `domain` = : domain " );
$stmt -> execute ( array (
':domain' => $_data
));
$row = $stmt -> fetch ( PDO :: FETCH_ASSOC );
if ( empty ( $row )) {
return false ;
}
$stmt = $pdo -> prepare ( " SELECT COUNT(*) AS `count`,
COALESCE ( SUM ( `quota` ), 0 ) AS `in_use`
FROM `mailbox`
WHERE `kind` NOT REGEXP 'location|thing|group'
AND `domain` = : domain " );
$stmt -> execute ( array ( ':domain' => $row [ 'domain' ]));
$MailboxDataDomain = $stmt -> fetch ( PDO :: FETCH_ASSOC );
2018-08-21 17:41:04 +02:00
$rl = ratelimit ( 'get' , 'domain' , $_data );
2018-08-13 23:20:40 +02:00
$domaindata [ 'max_new_mailbox_quota' ] = ( $row [ 'quota' ] * 1048576 ) - $MailboxDataDomain [ 'in_use' ];
if ( $domaindata [ 'max_new_mailbox_quota' ] > ( $row [ 'maxquota' ] * 1048576 )) {
$domaindata [ 'max_new_mailbox_quota' ] = ( $row [ 'maxquota' ] * 1048576 );
}
$domaindata [ 'quota_used_in_domain' ] = $MailboxDataDomain [ 'in_use' ];
$domaindata [ 'mboxes_in_domain' ] = $MailboxDataDomain [ 'count' ];
$domaindata [ 'mboxes_left' ] = $row [ 'mailboxes' ] - $MailboxDataDomain [ 'count' ];
$domaindata [ 'domain_name' ] = $row [ 'domain' ];
$domaindata [ 'description' ] = $row [ 'description' ];
$domaindata [ 'max_num_aliases_for_domain' ] = $row [ 'aliases' ];
$domaindata [ 'max_num_mboxes_for_domain' ] = $row [ 'mailboxes' ];
$domaindata [ 'max_quota_for_mbox' ] = $row [ 'maxquota' ] * 1048576 ;
$domaindata [ 'max_quota_for_domain' ] = $row [ 'quota' ] * 1048576 ;
$domaindata [ 'relayhost' ] = $row [ 'relayhost' ];
$domaindata [ 'backupmx' ] = $row [ 'backupmx' ];
$domaindata [ 'backupmx_int' ] = $row [ 'backupmx_int' ];
2018-08-21 17:41:04 +02:00
$domaindata [ 'rl' ] = $rl ;
2018-08-13 23:20:40 +02:00
$domaindata [ 'active' ] = $row [ 'active' ];
$domaindata [ 'active_int' ] = $row [ 'active_int' ];
$domaindata [ 'relay_all_recipients' ] = $row [ 'relay_all_recipients' ];
$domaindata [ 'relay_all_recipients_int' ] = $row [ 'relay_all_recipients_int' ];
$stmt = $pdo -> prepare ( " SELECT COUNT(*) AS `alias_count` FROM `alias`
WHERE ( `domain` = : domain OR `domain` IN ( SELECT `alias_domain` FROM `alias_domain` WHERE `target_domain` = : domain2 ))
AND `address` NOT IN (
SELECT `username` FROM `mailbox`
) " );
$stmt -> execute ( array (
':domain' => $_data ,
':domain2' => $_data
));
$AliasDataDomain = $stmt -> fetch ( PDO :: FETCH_ASSOC );
( isset ( $AliasDataDomain [ 'alias_count' ])) ? $domaindata [ 'aliases_in_domain' ] = $AliasDataDomain [ 'alias_count' ] : $domaindata [ 'aliases_in_domain' ] = " 0 " ;
$domaindata [ 'aliases_left' ] = $row [ 'aliases' ] - $AliasDataDomain [ 'alias_count' ];
2017-05-23 09:36:59 +02:00
return $domaindata ;
break ;
case 'mailbox_details' :
if ( ! hasMailboxObjectAccess ( $_SESSION [ 'mailcow_cc_username' ], $_SESSION [ 'mailcow_cc_role' ], $_data )) {
return false ;
}
$mailboxdata = array ();
2018-08-21 17:41:04 +02:00
$rl = ratelimit ( 'get' , 'mailbox' , $_data );
2018-08-13 23:20:40 +02:00
$stmt = $pdo -> prepare ( " SELECT
`domain` . `backupmx` ,
`mailbox` . `username` ,
`mailbox` . `name` ,
`mailbox` . `active` AS `active_int` ,
CASE `mailbox` . `active` WHEN 1 THEN '".$lang[' mailbox '][' yes ']."' ELSE '".$lang[' mailbox '][' no ']."' END AS `active` ,
`mailbox` . `domain` ,
2018-11-12 10:03:50 +01:00
`mailbox` . `local_part` ,
2018-08-13 23:20:40 +02:00
`mailbox` . `quota` ,
`quota2` . `bytes` ,
`attributes` ,
`quota2` . `messages`
FROM `mailbox` , `quota2` , `domain`
WHERE `mailbox` . `kind` NOT REGEXP 'location|thing|group' AND `mailbox` . `username` = `quota2` . `username` AND `domain` . `domain` = `mailbox` . `domain` AND `mailbox` . `username` = : mailbox " );
$stmt -> execute ( array (
':mailbox' => $_data ,
));
$row = $stmt -> fetch ( PDO :: FETCH_ASSOC );
$stmt = $pdo -> prepare ( " SELECT `maxquota`, `quota` FROM `domain` WHERE `domain` = :domain " );
$stmt -> execute ( array ( ':domain' => $row [ 'domain' ]));
$DomainQuota = $stmt -> fetch ( PDO :: FETCH_ASSOC );
$stmt = $pdo -> prepare ( " SELECT COALESCE(SUM(`quota`), 0) as `in_use` FROM `mailbox` WHERE `kind` NOT REGEXP 'location|thing|group' AND `domain` = :domain AND `username` != :username " );
$stmt -> execute ( array ( ':domain' => $row [ 'domain' ], ':username' => $_data ));
$MailboxUsage = $stmt -> fetch ( PDO :: FETCH_ASSOC );
$stmt = $pdo -> prepare ( " SELECT IFNULL(COUNT(`address`), 0) AS `sa_count` FROM `spamalias` WHERE `goto` = :address AND `validity` >= :unixnow " );
$stmt -> execute ( array ( ':address' => $_data , ':unixnow' => time ()));
$SpamaliasUsage = $stmt -> fetch ( PDO :: FETCH_ASSOC );
$mailboxdata [ 'max_new_quota' ] = ( $DomainQuota [ 'quota' ] * 1048576 ) - $MailboxUsage [ 'in_use' ];
if ( $mailboxdata [ 'max_new_quota' ] > ( $DomainQuota [ 'maxquota' ] * 1048576 )) {
$mailboxdata [ 'max_new_quota' ] = ( $DomainQuota [ 'maxquota' ] * 1048576 );
}
$mailboxdata [ 'username' ] = $row [ 'username' ];
2018-08-21 17:41:04 +02:00
$mailboxdata [ 'rl' ] = $rl ;
2018-08-13 23:20:40 +02:00
$mailboxdata [ 'is_relayed' ] = $row [ 'backupmx' ];
$mailboxdata [ 'name' ] = $row [ 'name' ];
$mailboxdata [ 'active' ] = $row [ 'active' ];
$mailboxdata [ 'active_int' ] = $row [ 'active_int' ];
$mailboxdata [ 'domain' ] = $row [ 'domain' ];
2018-11-12 10:03:50 +01:00
$mailboxdata [ 'local_part' ] = $row [ 'local_part' ];
2018-08-13 23:20:40 +02:00
$mailboxdata [ 'quota' ] = $row [ 'quota' ];
$mailboxdata [ 'attributes' ] = json_decode ( $row [ 'attributes' ], true );
$mailboxdata [ 'quota_used' ] = intval ( $row [ 'bytes' ]);
$mailboxdata [ 'percent_in_use' ] = round (( intval ( $row [ 'bytes' ]) / intval ( $row [ 'quota' ])) * 100 );
$mailboxdata [ 'messages' ] = $row [ 'messages' ];
$mailboxdata [ 'spam_aliases' ] = $SpamaliasUsage [ 'sa_count' ];
if ( $mailboxdata [ 'percent_in_use' ] >= 90 ) {
$mailboxdata [ 'percent_class' ] = " danger " ;
}
elseif ( $mailboxdata [ 'percent_in_use' ] >= 75 ) {
$mailboxdata [ 'percent_class' ] = " warning " ;
2017-05-23 09:36:59 +02:00
}
2018-08-13 23:20:40 +02:00
else {
$mailboxdata [ 'percent_class' ] = " success " ;
2017-05-23 09:36:59 +02:00
}
return $mailboxdata ;
break ;
case 'resource_details' :
$resourcedata = array ();
if ( ! hasMailboxObjectAccess ( $_SESSION [ 'mailcow_cc_username' ], $_SESSION [ 'mailcow_cc_role' ], $_data )) {
return false ;
}
2018-08-13 23:20:40 +02:00
$stmt = $pdo -> prepare ( " SELECT
`username` ,
`name` ,
`kind` ,
`multiple_bookings` ,
`local_part` ,
`active` AS `active_int` ,
CASE `active` WHEN 1 THEN '".$lang[' mailbox '][' yes ']."' ELSE '".$lang[' mailbox '][' no ']."' END AS `active` ,
`domain`
FROM `mailbox` WHERE `kind` REGEXP 'location|thing|group' AND `username` = : resource " );
$stmt -> execute ( array (
':resource' => $_data ,
));
$row = $stmt -> fetch ( PDO :: FETCH_ASSOC );
$resourcedata [ 'name' ] = $row [ 'username' ];
$resourcedata [ 'kind' ] = $row [ 'kind' ];
$resourcedata [ 'multiple_bookings' ] = $row [ 'multiple_bookings' ];
$resourcedata [ 'description' ] = $row [ 'name' ];
$resourcedata [ 'active' ] = $row [ 'active' ];
$resourcedata [ 'active_int' ] = $row [ 'active_int' ];
$resourcedata [ 'domain' ] = $row [ 'domain' ];
$resourcedata [ 'local_part' ] = $row [ 'local_part' ];
2017-05-23 09:36:59 +02:00
if ( ! isset ( $resourcedata [ 'domain' ]) ||
( isset ( $resourcedata [ 'domain' ]) && ! hasDomainAccess ( $_SESSION [ 'mailcow_cc_username' ], $_SESSION [ 'mailcow_cc_role' ], $resourcedata [ 'domain' ]))) {
return false ;
}
return $resourcedata ;
break ;
}
break ;
case 'delete' :
switch ( $_type ) {
case 'syncjob' :
if ( ! is_array ( $_data [ 'id' ])) {
$ids = array ();
$ids [] = $_data [ 'id' ];
}
else {
$ids = $_data [ 'id' ];
}
2017-08-18 22:18:14 +02:00
if ( ! isset ( $_SESSION [ 'acl' ][ 'syncjobs' ]) || $_SESSION [ 'acl' ][ 'syncjobs' ] != " 1 " ) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-08-18 22:18:14 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'access_denied'
2017-08-18 22:18:14 +02:00
);
return false ;
}
2017-05-23 09:36:59 +02:00
foreach ( $ids as $id ) {
if ( ! is_numeric ( $id )) {
return false ;
}
2018-08-13 23:20:40 +02:00
$stmt = $pdo -> prepare ( " SELECT `user2` FROM `imapsync` WHERE id = :id " );
$stmt -> execute ( array ( ':id' => $id ));
$user2 = $stmt -> fetch ( PDO :: FETCH_ASSOC )[ 'user2' ];
if ( ! hasMailboxObjectAccess ( $_SESSION [ 'mailcow_cc_username' ], $_SESSION [ 'mailcow_cc_role' ], $user2 )) {
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
2018-08-13 23:20:40 +02:00
'msg' => 'access_denied'
2017-05-23 09:36:59 +02:00
);
2018-08-13 23:20:40 +02:00
continue ;
2017-05-23 09:36:59 +02:00
}
2018-08-13 23:20:40 +02:00
$stmt = $pdo -> prepare ( " DELETE FROM `imapsync` WHERE `id`= :id " );
$stmt -> execute ( array ( ':id' => $id ));
$_SESSION [ 'return' ][] = array (
'type' => 'success' ,
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => array ( 'deleted_syncjob' , $id )
);
2017-05-23 09:36:59 +02:00
}
break ;
2017-11-03 20:37:24 +01:00
case 'filter' :
if ( ! is_array ( $_data [ 'id' ])) {
$ids = array ();
$ids [] = $_data [ 'id' ];
}
else {
$ids = $_data [ 'id' ];
}
if ( ! isset ( $_SESSION [ 'acl' ][ 'filters' ]) || $_SESSION [ 'acl' ][ 'filters' ] != " 1 " ) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-11-03 20:37:24 +01:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'access_denied'
2017-11-03 20:37:24 +01:00
);
return false ;
}
foreach ( $ids as $id ) {
if ( ! is_numeric ( $id )) {
2018-08-13 23:20:40 +02:00
continue ;
2017-11-03 20:37:24 +01:00
}
2018-08-13 23:20:40 +02:00
$stmt = $pdo -> prepare ( " SELECT `username` FROM `sieve_filters` WHERE id = :id " );
$stmt -> execute ( array ( ':id' => $id ));
$usr = $stmt -> fetch ( PDO :: FETCH_ASSOC )[ 'username' ];
if ( ! hasMailboxObjectAccess ( $_SESSION [ 'mailcow_cc_username' ], $_SESSION [ 'mailcow_cc_role' ], $usr )) {
$_SESSION [ 'return' ][] = array (
2017-11-03 20:37:24 +01:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
2018-08-13 23:20:40 +02:00
'msg' => 'access_denied'
2017-11-03 20:37:24 +01:00
);
2018-08-13 23:20:40 +02:00
continue ;
2017-11-03 20:37:24 +01:00
}
2018-08-13 23:20:40 +02:00
$stmt = $pdo -> prepare ( " DELETE FROM `sieve_filters` WHERE `id`= :id " );
$stmt -> execute ( array ( ':id' => $id ));
$_SESSION [ 'return' ][] = array (
'type' => 'success' ,
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => array ( 'delete_filter' , $id )
);
2017-11-03 20:37:24 +01:00
}
break ;
2017-05-23 09:36:59 +02:00
case 'time_limited_alias' :
if ( ! is_array ( $_data [ 'address' ])) {
$addresses = array ();
$addresses [] = $_data [ 'address' ];
}
else {
$addresses = $_data [ 'address' ];
}
2017-08-18 22:18:14 +02:00
if ( ! isset ( $_SESSION [ 'acl' ][ 'spam_alias' ]) || $_SESSION [ 'acl' ][ 'spam_alias' ] != " 1 " ) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-08-18 22:18:14 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'access_denied'
2017-08-18 22:18:14 +02:00
);
return false ;
}
2017-05-23 09:36:59 +02:00
foreach ( $addresses as $address ) {
2018-08-13 23:20:40 +02:00
$stmt = $pdo -> prepare ( " SELECT `goto` FROM `spamalias` WHERE `address` = :address " );
$stmt -> execute ( array ( ':address' => $address ));
$goto = $stmt -> fetch ( PDO :: FETCH_ASSOC )[ 'goto' ];
2017-05-23 09:36:59 +02:00
if ( ! hasMailboxObjectAccess ( $_SESSION [ 'mailcow_cc_username' ], $_SESSION [ 'mailcow_cc_role' ], $goto )) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'access_denied'
2017-05-23 09:36:59 +02:00
);
2018-08-13 23:20:40 +02:00
continue ;
2017-05-23 09:36:59 +02:00
}
2018-08-13 23:20:40 +02:00
$stmt = $pdo -> prepare ( " DELETE FROM `spamalias` WHERE `goto` = :username AND `address` = :item " );
$stmt -> execute ( array (
':username' => $goto ,
':item' => $address
));
$_SESSION [ 'return' ][] = array (
'type' => 'success' ,
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => array ( 'mailbox_modified' , htmlspecialchars ( $goto ))
);
2017-05-23 09:36:59 +02:00
}
break ;
case 'eas_cache' :
if ( ! is_array ( $_data [ 'username' ])) {
$usernames = array ();
$usernames [] = $_data [ 'username' ];
}
else {
$usernames = $_data [ 'username' ];
}
2017-08-18 22:18:14 +02:00
if ( ! isset ( $_SESSION [ 'acl' ][ 'eas_reset' ]) || $_SESSION [ 'acl' ][ 'eas_reset' ] != " 1 " ) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-08-18 22:18:14 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'access_denied'
2017-08-18 22:18:14 +02:00
);
return false ;
}
2017-05-23 09:36:59 +02:00
foreach ( $usernames as $username ) {
if ( ! hasMailboxObjectAccess ( $_SESSION [ 'mailcow_cc_username' ], $_SESSION [ 'mailcow_cc_role' ], $username )) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'access_denied'
2017-05-23 09:36:59 +02:00
);
2018-08-13 23:20:40 +02:00
continue ;
2017-05-23 09:36:59 +02:00
}
2018-08-13 23:20:40 +02:00
$stmt = $pdo -> prepare ( " DELETE FROM `sogo_cache_folder` WHERE `c_uid` = :username " );
$stmt -> execute ( array (
':username' => $username
));
$_SESSION [ 'return' ][] = array (
'type' => 'success' ,
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => array ( 'eas_reset' , htmlspecialchars ( $username ))
);
2017-05-23 09:36:59 +02:00
}
break ;
2018-10-23 21:14:57 +02:00
case 'sogo_profile' :
if ( ! is_array ( $_data [ 'username' ])) {
$usernames = array ();
$usernames [] = $_data [ 'username' ];
}
else {
$usernames = $_data [ 'username' ];
}
if ( ! isset ( $_SESSION [ 'acl' ][ 'sogo_profile_reset' ]) || $_SESSION [ 'acl' ][ 'sogo_profile_reset' ] != " 1 " ) {
$_SESSION [ 'return' ][] = array (
'type' => 'danger' ,
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'access_denied'
);
return false ;
}
foreach ( $usernames as $username ) {
if ( ! hasMailboxObjectAccess ( $_SESSION [ 'mailcow_cc_username' ], $_SESSION [ 'mailcow_cc_role' ], $username )) {
$_SESSION [ 'return' ][] = array (
'type' => 'danger' ,
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'access_denied'
);
continue ;
}
$stmt = $pdo -> prepare ( " DELETE FROM `sogo_user_profile` WHERE `c_uid` = :username " );
$stmt -> execute ( array (
':username' => $username
));
$stmt = $pdo -> prepare ( " DELETE FROM `sogo_cache_folder` WHERE `c_uid` = :username " );
$stmt -> execute ( array (
':username' => $username
));
$stmt = $pdo -> prepare ( " DELETE FROM `sogo_acl` WHERE `c_object` LIKE '%/ " . $username . " /%' OR `c_uid` = :username " );
$stmt -> execute ( array (
':username' => $username
));
$stmt = $pdo -> prepare ( " DELETE FROM `sogo_store` WHERE `c_folder_id` IN (SELECT `c_folder_id` FROM `sogo_folder_info` WHERE `c_path2` = :username) " );
$stmt -> execute ( array (
':username' => $username
));
$stmt = $pdo -> prepare ( " DELETE FROM `sogo_quick_contact` WHERE `c_folder_id` IN (SELECT `c_folder_id` FROM `sogo_folder_info` WHERE `c_path2` = :username) " );
$stmt -> execute ( array (
':username' => $username
));
$stmt = $pdo -> prepare ( " DELETE FROM `sogo_quick_appointment` WHERE `c_folder_id` IN (SELECT `c_folder_id` FROM `sogo_folder_info` WHERE `c_path2` = :username) " );
$stmt -> execute ( array (
':username' => $username
));
$stmt = $pdo -> prepare ( " DELETE FROM `sogo_folder_info` WHERE `c_path2` = :username " );
$stmt -> execute ( array (
':username' => $username
));
$_SESSION [ 'return' ][] = array (
'type' => 'success' ,
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => array ( 'sogo_profile_reset' , htmlspecialchars ( $username ))
);
}
break ;
2017-05-23 09:36:59 +02:00
case 'domain' :
if ( ! is_array ( $_data [ 'domain' ])) {
$domains = array ();
$domains [] = $_data [ 'domain' ];
}
else {
$domains = $_data [ 'domain' ];
}
if ( $_SESSION [ 'mailcow_cc_role' ] != " admin " ) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'access_denied'
2017-05-23 09:36:59 +02:00
);
return false ;
}
foreach ( $domains as $domain ) {
if ( ! is_valid_domain_name ( $domain )) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'domain_invalid'
2017-05-23 09:36:59 +02:00
);
2018-08-13 23:20:40 +02:00
continue ;
2017-05-23 09:36:59 +02:00
}
$domain = idn_to_ascii ( strtolower ( trim ( $domain )));
2018-08-13 23:20:40 +02:00
$stmt = $pdo -> prepare ( " SELECT `username` FROM `mailbox`
WHERE `domain` = : domain " );
$stmt -> execute ( array ( ':domain' => $domain ));
$num_results = count ( $stmt -> fetchAll ( PDO :: FETCH_ASSOC ));
2017-05-23 09:36:59 +02:00
if ( $num_results != 0 || ! empty ( $num_results )) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'domain_not_empty'
2017-05-23 09:36:59 +02:00
);
2018-08-13 23:20:40 +02:00
continue ;
2017-05-23 09:36:59 +02:00
}
2018-10-23 21:14:57 +02:00
$exec_fields = array ( 'cmd' => 'maildir' , 'task' => 'cleanup' , 'maildir' => $domain );
[Docker API] Use TLS encryption for communication with "on-the-fly" created key paris (non-exposed)
[Docker API] Create pipe to pass Rspamd UI worker password
[Dovecot] Pull Spamassassin ruleset to be read by Rspamd (MANY THANKS to Peer Heinlein!)
[Dovecot] Garbage collector for deleted maildirs (set keep time via MAILDIR_GC_TIME which defaults to 1440 minutes)
[Web] Flush memcached after mailbox item changes, fixes #1808
[Web] Fix duplicate IDs, fixes #1792
[Compose] Use SQL sockets
[PHP-FPM] Update APCu and Redis libs
[Dovecot] Encrypt maildir with global key pair in crypt-vol-1 (BACKUP!), also fixes #1791
[Web] Fix deletion of spam aliases
[Helper] Add "crypt" to backup script
[Helper] Override file for external SQL socket (not supported!)
[Compose] New images for Rspamd, PHP-FPM, SOGo, Dovecot, Docker API, Watchdog, ACME, Postfix
2018-09-29 22:01:23 +02:00
$maildir_gc = json_decode ( docker ( 'post' , 'dovecot-mailcow' , 'exec' , $exec_fields ), true );
if ( $maildir_gc [ 'type' ] != 'success' ) {
$_SESSION [ 'return' ][] = array (
'type' => 'warning' ,
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
2018-11-12 10:03:50 +01:00
'msg' => 'Could not move mail storage to garbage collector: ' . $maildir_gc [ 'msg' ]
[Docker API] Use TLS encryption for communication with "on-the-fly" created key paris (non-exposed)
[Docker API] Create pipe to pass Rspamd UI worker password
[Dovecot] Pull Spamassassin ruleset to be read by Rspamd (MANY THANKS to Peer Heinlein!)
[Dovecot] Garbage collector for deleted maildirs (set keep time via MAILDIR_GC_TIME which defaults to 1440 minutes)
[Web] Flush memcached after mailbox item changes, fixes #1808
[Web] Fix duplicate IDs, fixes #1792
[Compose] Use SQL sockets
[PHP-FPM] Update APCu and Redis libs
[Dovecot] Encrypt maildir with global key pair in crypt-vol-1 (BACKUP!), also fixes #1791
[Web] Fix deletion of spam aliases
[Helper] Add "crypt" to backup script
[Helper] Override file for external SQL socket (not supported!)
[Compose] New images for Rspamd, PHP-FPM, SOGo, Dovecot, Docker API, Watchdog, ACME, Postfix
2018-09-29 22:01:23 +02:00
);
}
2018-08-13 23:20:40 +02:00
$stmt = $pdo -> prepare ( " DELETE FROM `domain` WHERE `domain` = :domain " );
$stmt -> execute ( array (
':domain' => $domain ,
));
$stmt = $pdo -> prepare ( " DELETE FROM `domain_admins` WHERE `domain` = :domain " );
$stmt -> execute ( array (
':domain' => $domain ,
));
$stmt = $pdo -> prepare ( " DELETE FROM `alias` WHERE `domain` = :domain " );
$stmt -> execute ( array (
':domain' => $domain ,
));
$stmt = $pdo -> prepare ( " DELETE FROM `alias_domain` WHERE `target_domain` = :domain " );
$stmt -> execute ( array (
':domain' => $domain ,
));
$stmt = $pdo -> prepare ( " DELETE FROM `mailbox` WHERE `domain` = :domain " );
$stmt -> execute ( array (
':domain' => $domain ,
));
$stmt = $pdo -> prepare ( " DELETE FROM `sender_acl` WHERE `logged_in_as` LIKE :domain " );
$stmt -> execute ( array (
':domain' => '%@' . $domain ,
));
[Docker API] Use TLS encryption for communication with "on-the-fly" created key paris (non-exposed)
[Docker API] Create pipe to pass Rspamd UI worker password
[Dovecot] Pull Spamassassin ruleset to be read by Rspamd (MANY THANKS to Peer Heinlein!)
[Dovecot] Garbage collector for deleted maildirs (set keep time via MAILDIR_GC_TIME which defaults to 1440 minutes)
[Web] Flush memcached after mailbox item changes, fixes #1808
[Web] Fix duplicate IDs, fixes #1792
[Compose] Use SQL sockets
[PHP-FPM] Update APCu and Redis libs
[Dovecot] Encrypt maildir with global key pair in crypt-vol-1 (BACKUP!), also fixes #1791
[Web] Fix deletion of spam aliases
[Helper] Add "crypt" to backup script
[Helper] Override file for external SQL socket (not supported!)
[Compose] New images for Rspamd, PHP-FPM, SOGo, Dovecot, Docker API, Watchdog, ACME, Postfix
2018-09-29 22:01:23 +02:00
$stmt = $pdo -> prepare ( " DELETE FROM `quota2` WHERE `username` LIKE :domain " );
2018-08-13 23:20:40 +02:00
$stmt -> execute ( array (
':domain' => '%@' . $domain ,
));
[Docker API] Use TLS encryption for communication with "on-the-fly" created key paris (non-exposed)
[Docker API] Create pipe to pass Rspamd UI worker password
[Dovecot] Pull Spamassassin ruleset to be read by Rspamd (MANY THANKS to Peer Heinlein!)
[Dovecot] Garbage collector for deleted maildirs (set keep time via MAILDIR_GC_TIME which defaults to 1440 minutes)
[Web] Flush memcached after mailbox item changes, fixes #1808
[Web] Fix duplicate IDs, fixes #1792
[Compose] Use SQL sockets
[PHP-FPM] Update APCu and Redis libs
[Dovecot] Encrypt maildir with global key pair in crypt-vol-1 (BACKUP!), also fixes #1791
[Web] Fix deletion of spam aliases
[Helper] Add "crypt" to backup script
[Helper] Override file for external SQL socket (not supported!)
[Compose] New images for Rspamd, PHP-FPM, SOGo, Dovecot, Docker API, Watchdog, ACME, Postfix
2018-09-29 22:01:23 +02:00
$stmt = $pdo -> prepare ( " DELETE FROM `spamalias` WHERE `address` LIKE :domain " );
2018-08-13 23:20:40 +02:00
$stmt -> execute ( array (
':domain' => '%@' . $domain ,
));
$stmt = $pdo -> prepare ( " DELETE FROM `filterconf` WHERE `object` = :domain " );
$stmt -> execute ( array (
[Docker API] Use TLS encryption for communication with "on-the-fly" created key paris (non-exposed)
[Docker API] Create pipe to pass Rspamd UI worker password
[Dovecot] Pull Spamassassin ruleset to be read by Rspamd (MANY THANKS to Peer Heinlein!)
[Dovecot] Garbage collector for deleted maildirs (set keep time via MAILDIR_GC_TIME which defaults to 1440 minutes)
[Web] Flush memcached after mailbox item changes, fixes #1808
[Web] Fix duplicate IDs, fixes #1792
[Compose] Use SQL sockets
[PHP-FPM] Update APCu and Redis libs
[Dovecot] Encrypt maildir with global key pair in crypt-vol-1 (BACKUP!), also fixes #1791
[Web] Fix deletion of spam aliases
[Helper] Add "crypt" to backup script
[Helper] Override file for external SQL socket (not supported!)
[Compose] New images for Rspamd, PHP-FPM, SOGo, Dovecot, Docker API, Watchdog, ACME, Postfix
2018-09-29 22:01:23 +02:00
':domain' => $domain ,
2018-08-13 23:20:40 +02:00
));
$stmt = $pdo -> prepare ( " DELETE FROM `bcc_maps` WHERE `local_dest` = :domain " );
$stmt -> execute ( array (
':domain' => $domain ,
));
2017-05-23 09:36:59 +02:00
try {
$redis -> hDel ( 'DOMAIN_MAP' , $domain );
2018-08-21 21:06:22 +02:00
$redis -> hDel ( 'RL_VALUE' , $domain );
2017-05-23 09:36:59 +02:00
}
catch ( RedisException $e ) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => array ( 'redis_error' , $e )
2017-05-23 09:36:59 +02:00
);
2018-08-13 23:20:40 +02:00
continue ;
2017-05-23 09:36:59 +02:00
}
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
'type' => 'success' ,
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => array ( 'domain_removed' , htmlspecialchars ( $domain ))
);
2017-05-23 09:36:59 +02:00
}
break ;
case 'alias' :
2018-08-13 23:20:40 +02:00
if ( ! is_array ( $_data [ 'id' ])) {
$ids = array ();
$ids [] = $_data [ 'id' ];
2017-05-23 09:36:59 +02:00
}
else {
2018-08-13 23:20:40 +02:00
$ids = $_data [ 'id' ];
2017-05-23 09:36:59 +02:00
}
2018-08-13 23:20:40 +02:00
foreach ( $ids as $id ) {
$alias_data = mailbox ( 'get' , 'alias_details' , $id );
if ( empty ( $alias_data )) {
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'access_denied'
2017-05-23 09:36:59 +02:00
);
2018-08-13 23:20:40 +02:00
continue ;
2017-05-23 09:36:59 +02:00
}
2018-08-13 23:20:40 +02:00
$stmt = $pdo -> prepare ( " DELETE FROM `alias` WHERE `id` = :id " );
$stmt -> execute ( array (
':id' => $id
));
$_SESSION [ 'return' ][] = array (
'type' => 'success' ,
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => array ( 'alias_removed' , htmlspecialchars ( $alias_data [ 'address' ]))
);
2017-05-23 09:36:59 +02:00
}
break ;
case 'alias_domain' :
if ( ! is_array ( $_data [ 'alias_domain' ])) {
$alias_domains = array ();
$alias_domains [] = $_data [ 'alias_domain' ];
}
else {
$alias_domains = $_data [ 'alias_domain' ];
}
foreach ( $alias_domains as $alias_domain ) {
if ( ! is_valid_domain_name ( $alias_domain )) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'domain_invalid'
2017-05-23 09:36:59 +02:00
);
2018-08-13 23:20:40 +02:00
continue ;
2017-05-23 09:36:59 +02:00
}
2018-08-13 23:20:40 +02:00
$stmt = $pdo -> prepare ( " SELECT `target_domain` FROM `alias_domain`
WHERE `alias_domain` = : alias_domain " );
$stmt -> execute ( array ( ':alias_domain' => $alias_domain ));
$DomainData = $stmt -> fetch ( PDO :: FETCH_ASSOC );
2017-05-23 09:36:59 +02:00
if ( ! hasDomainAccess ( $_SESSION [ 'mailcow_cc_username' ], $_SESSION [ 'mailcow_cc_role' ], $DomainData [ 'target_domain' ])) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'access_denied'
2017-05-23 09:36:59 +02:00
);
2018-08-13 23:20:40 +02:00
continue ;
2017-05-23 09:36:59 +02:00
}
2018-08-13 23:20:40 +02:00
$stmt = $pdo -> prepare ( " DELETE FROM `alias_domain` WHERE `alias_domain` = :alias_domain " );
$stmt -> execute ( array (
':alias_domain' => $alias_domain ,
));
$stmt = $pdo -> prepare ( " DELETE FROM `alias` WHERE `domain` = :alias_domain " );
$stmt -> execute ( array (
':alias_domain' => $alias_domain ,
));
$stmt = $pdo -> prepare ( " DELETE FROM `bcc_maps` WHERE `local_dest` = :alias_domain " );
$stmt -> execute ( array (
':alias_domain' => $alias_domain ,
));
2018-01-17 15:23:33 +01:00
try {
$redis -> hDel ( 'DOMAIN_MAP' , $alias_domain );
2018-08-21 21:06:22 +02:00
$redis -> hDel ( 'RL_VALUE' , $domain );
2018-01-17 15:23:33 +01:00
}
catch ( RedisException $e ) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2018-01-17 15:23:33 +01:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => array ( 'redis_error' , $e )
2018-01-17 15:23:33 +01:00
);
2018-08-13 23:20:40 +02:00
continue ;
2018-01-17 15:23:33 +01:00
}
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
'type' => 'success' ,
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => array ( 'alias_domain_removed' , htmlspecialchars ( $alias_domain ))
);
2017-05-23 09:36:59 +02:00
}
break ;
case 'mailbox' :
if ( ! is_array ( $_data [ 'username' ])) {
$usernames = array ();
$usernames [] = $_data [ 'username' ];
}
else {
$usernames = $_data [ 'username' ];
}
foreach ( $usernames as $username ) {
if ( ! filter_var ( $username , FILTER_VALIDATE_EMAIL )) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'access_denied'
2017-05-23 09:36:59 +02:00
);
2018-08-13 23:20:40 +02:00
continue ;
2017-05-23 09:36:59 +02:00
}
if ( ! hasMailboxObjectAccess ( $_SESSION [ 'mailcow_cc_username' ], $_SESSION [ 'mailcow_cc_role' ], $username )) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'access_denied'
2017-05-23 09:36:59 +02:00
);
2018-08-13 23:20:40 +02:00
continue ;
2017-05-23 09:36:59 +02:00
}
2018-11-12 10:03:50 +01:00
$mailbox_details = mailbox ( 'get' , 'mailbox_details' , $username );
if ( ! empty ( $mailbox_details [ 'domain' ]) && ! empty ( $mailbox_details [ 'local_part' ])) {
$maildir = $mailbox_details [ 'domain' ] . '/' . $mailbox_details [ 'local_part' ];
$exec_fields = array ( 'cmd' => 'maildir' , 'task' => 'cleanup' , 'maildir' => $maildir );
$maildir_gc = json_decode ( docker ( 'post' , 'dovecot-mailcow' , 'exec' , $exec_fields ), true );
if ( $maildir_gc [ 'type' ] != 'success' ) {
$_SESSION [ 'return' ][] = array (
'type' => 'warning' ,
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'Could not move maildir to garbage collector: ' . $maildir_gc [ 'msg' ]
);
}
}
else {
[Docker API] Use TLS encryption for communication with "on-the-fly" created key paris (non-exposed)
[Docker API] Create pipe to pass Rspamd UI worker password
[Dovecot] Pull Spamassassin ruleset to be read by Rspamd (MANY THANKS to Peer Heinlein!)
[Dovecot] Garbage collector for deleted maildirs (set keep time via MAILDIR_GC_TIME which defaults to 1440 minutes)
[Web] Flush memcached after mailbox item changes, fixes #1808
[Web] Fix duplicate IDs, fixes #1792
[Compose] Use SQL sockets
[PHP-FPM] Update APCu and Redis libs
[Dovecot] Encrypt maildir with global key pair in crypt-vol-1 (BACKUP!), also fixes #1791
[Web] Fix deletion of spam aliases
[Helper] Add "crypt" to backup script
[Helper] Override file for external SQL socket (not supported!)
[Compose] New images for Rspamd, PHP-FPM, SOGo, Dovecot, Docker API, Watchdog, ACME, Postfix
2018-09-29 22:01:23 +02:00
$_SESSION [ 'return' ][] = array (
'type' => 'warning' ,
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
2018-11-12 10:03:50 +01:00
'msg' => 'Could not move maildir to garbage collector: variables local_part and/or domain empty'
[Docker API] Use TLS encryption for communication with "on-the-fly" created key paris (non-exposed)
[Docker API] Create pipe to pass Rspamd UI worker password
[Dovecot] Pull Spamassassin ruleset to be read by Rspamd (MANY THANKS to Peer Heinlein!)
[Dovecot] Garbage collector for deleted maildirs (set keep time via MAILDIR_GC_TIME which defaults to 1440 minutes)
[Web] Flush memcached after mailbox item changes, fixes #1808
[Web] Fix duplicate IDs, fixes #1792
[Compose] Use SQL sockets
[PHP-FPM] Update APCu and Redis libs
[Dovecot] Encrypt maildir with global key pair in crypt-vol-1 (BACKUP!), also fixes #1791
[Web] Fix deletion of spam aliases
[Helper] Add "crypt" to backup script
[Helper] Override file for external SQL socket (not supported!)
[Compose] New images for Rspamd, PHP-FPM, SOGo, Dovecot, Docker API, Watchdog, ACME, Postfix
2018-09-29 22:01:23 +02:00
);
}
2018-08-13 23:20:40 +02:00
$stmt = $pdo -> prepare ( " DELETE FROM `alias` WHERE `goto` = :username " );
$stmt -> execute ( array (
':username' => $username
));
$stmt = $pdo -> prepare ( " DELETE FROM `quota2` WHERE `username` = :username " );
$stmt -> execute ( array (
':username' => $username
));
$stmt = $pdo -> prepare ( " DELETE FROM `mailbox` WHERE `username` = :username " );
$stmt -> execute ( array (
':username' => $username
));
$stmt = $pdo -> prepare ( " DELETE FROM `sender_acl` WHERE `logged_in_as` = :username " );
$stmt -> execute ( array (
':username' => $username
));
$stmt = $pdo -> prepare ( " DELETE FROM `spamalias` WHERE `goto` = :username " );
$stmt -> execute ( array (
':username' => $username
));
$stmt = $pdo -> prepare ( " DELETE FROM `imapsync` WHERE `user2` = :username " );
$stmt -> execute ( array (
':username' => $username
));
$stmt = $pdo -> prepare ( " DELETE FROM `filterconf` WHERE `object` = :username " );
$stmt -> execute ( array (
':username' => $username
));
$stmt = $pdo -> prepare ( " DELETE FROM `sogo_user_profile` WHERE `c_uid` = :username " );
$stmt -> execute ( array (
':username' => $username
));
$stmt = $pdo -> prepare ( " DELETE FROM `sogo_cache_folder` WHERE `c_uid` = :username " );
$stmt -> execute ( array (
':username' => $username
));
$stmt = $pdo -> prepare ( " DELETE FROM `sogo_acl` WHERE `c_object` LIKE '%/ " . $username . " /%' OR `c_uid` = :username " );
$stmt -> execute ( array (
':username' => $username
));
$stmt = $pdo -> prepare ( " DELETE FROM `sogo_store` WHERE `c_folder_id` IN (SELECT `c_folder_id` FROM `sogo_folder_info` WHERE `c_path2` = :username) " );
$stmt -> execute ( array (
':username' => $username
));
$stmt = $pdo -> prepare ( " DELETE FROM `sogo_quick_contact` WHERE `c_folder_id` IN (SELECT `c_folder_id` FROM `sogo_folder_info` WHERE `c_path2` = :username) " );
$stmt -> execute ( array (
':username' => $username
));
$stmt = $pdo -> prepare ( " DELETE FROM `sogo_quick_appointment` WHERE `c_folder_id` IN (SELECT `c_folder_id` FROM `sogo_folder_info` WHERE `c_path2` = :username) " );
$stmt -> execute ( array (
':username' => $username
));
$stmt = $pdo -> prepare ( " DELETE FROM `sogo_folder_info` WHERE `c_path2` = :username " );
$stmt -> execute ( array (
':username' => $username
));
$stmt = $pdo -> prepare ( " DELETE FROM `bcc_maps` WHERE `local_dest` = :username " );
$stmt -> execute ( array (
':username' => $username
));
$stmt = $pdo -> prepare ( " SELECT `address`, `goto` FROM `alias`
WHERE `goto` REGEXP : username " );
$stmt -> execute ( array ( ':username' => '(^|,)' . $username . '($|,)' ));
$GotoData = $stmt -> fetchAll ( PDO :: FETCH_ASSOC );
foreach ( $GotoData as $gotos ) {
$goto_exploded = explode ( ',' , $gotos [ 'goto' ]);
if (( $key = array_search ( $username , $goto_exploded )) !== false ) {
unset ( $goto_exploded [ $key ]);
}
$gotos_rebuild = implode ( ',' , $goto_exploded );
$stmt = $pdo -> prepare ( " UPDATE `alias` SET
`goto` = : goto
WHERE `address` = : address " );
2017-11-19 15:13:43 +01:00
$stmt -> execute ( array (
2018-08-13 23:20:40 +02:00
':goto' => $gotos_rebuild ,
':address' => $gotos [ 'address' ]
2017-11-19 15:13:43 +01:00
));
2017-05-23 09:36:59 +02:00
}
2018-08-21 21:06:22 +02:00
try {
$redis -> hDel ( 'RL_VALUE' , $username );
}
catch ( RedisException $e ) {
$_SESSION [ 'return' ][] = array (
'type' => 'danger' ,
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => array ( 'redis_error' , $e )
);
continue ;
}
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
'type' => 'success' ,
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => array ( 'mailbox_removed' , htmlspecialchars ( $username ))
);
2017-05-23 09:36:59 +02:00
}
break ;
case 'resource' :
if ( ! is_array ( $_data [ 'name' ])) {
$names = array ();
$names [] = $_data [ 'name' ];
}
else {
$names = $_data [ 'name' ];
}
foreach ( $names as $name ) {
if ( ! filter_var ( $name , FILTER_VALIDATE_EMAIL )) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'access_denied'
2017-05-23 09:36:59 +02:00
);
2018-08-13 23:20:40 +02:00
continue ;
2017-05-23 09:36:59 +02:00
}
if ( ! hasMailboxObjectAccess ( $_SESSION [ 'mailcow_cc_username' ], $_SESSION [ 'mailcow_cc_role' ], $name )) {
2018-08-13 23:20:40 +02:00
$_SESSION [ 'return' ][] = array (
2017-05-23 09:36:59 +02:00
'type' => 'danger' ,
2018-08-03 20:31:33 +02:00
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => 'access_denied'
2017-05-23 09:36:59 +02:00
);
2018-08-13 23:20:40 +02:00
continue ;
2017-05-23 09:36:59 +02:00
}
2018-08-13 23:20:40 +02:00
$stmt = $pdo -> prepare ( " DELETE FROM `mailbox` WHERE `username` = :username " );
$stmt -> execute ( array (
':username' => $name
));
$stmt = $pdo -> prepare ( " DELETE FROM `sogo_user_profile` WHERE `c_uid` = :username " );
$stmt -> execute ( array (
':username' => $name
));
$stmt = $pdo -> prepare ( " DELETE FROM `sogo_cache_folder` WHERE `c_uid` = :username " );
$stmt -> execute ( array (
':username' => $name
));
$stmt = $pdo -> prepare ( " DELETE FROM `sogo_acl` WHERE `c_object` LIKE '%/ " . $name . " /%' OR `c_uid` = :username " );
$stmt -> execute ( array (
':username' => $name
));
$stmt = $pdo -> prepare ( " DELETE FROM `sogo_store` WHERE `c_folder_id` IN (SELECT `c_folder_id` FROM `sogo_folder_info` WHERE `c_path2` = :username) " );
$stmt -> execute ( array (
':username' => $name
));
$stmt = $pdo -> prepare ( " DELETE FROM `sogo_quick_contact` WHERE `c_folder_id` IN (SELECT `c_folder_id` FROM `sogo_folder_info` WHERE `c_path2` = :username) " );
$stmt -> execute ( array (
':username' => $name
));
$stmt = $pdo -> prepare ( " DELETE FROM `sogo_quick_appointment` WHERE `c_folder_id` IN (SELECT `c_folder_id` FROM `sogo_folder_info` WHERE `c_path2` = :username) " );
$stmt -> execute ( array (
':username' => $name
));
$stmt = $pdo -> prepare ( " DELETE FROM `sogo_folder_info` WHERE `c_path2` = :username " );
$stmt -> execute ( array (
':username' => $name
));
$_SESSION [ 'return' ][] = array (
'type' => 'success' ,
'log' => array ( __FUNCTION__ , $_action , $_type , $_data_log , $_attr ),
'msg' => array ( 'resource_removed' , htmlspecialchars ( $name ))
);
2017-05-23 09:36:59 +02:00
}
break ;
}
break ;
}
2018-07-11 22:13:43 +02:00
if ( $_action != 'get' && in_array ( $_type , array ( 'domain' , 'alias' , 'alias_domain' , 'mailbox' ))) {
update_sogo_static_view ();
}
2018-08-26 18:31:44 +02:00
}