vesta/web/edit/mail/index.php

<?php
// Init
error_reporting(NULL);
ob_start();
session_start();

$TAB = 'MAIL';
include($_SERVER['DOCUMENT_ROOT']."/inc/main.php");

// Header
include($_SERVER['DOCUMENT_ROOT'].'/templates/header.html');

// Panel
top_panel($user,$TAB);

// Are you admin?
if ($_SESSION['user'] == 'admin') {

    // Check user argument?
    if (empty($_GET['domain'])) {
        header("Location: /list/mail/");
        exit;
    }

    // Check domain
    if ((!empty($_GET['domain'])) && (empty($_GET['account'])))  {
        $v_domain = escapeshellarg($_GET['domain']);
        exec (VESTA_CMD."v_list_mail_domain ".$user." ".$v_domain." json", $output, $return_var);
        if ($return_var != 0) {
            $error = implode('<br>', $output);
            if (empty($error)) $error = 'Error: vesta did not return any output.';
            $_SESSION['error_msg'] = $error;
        } else {
            $data = json_decode(implode('', $output), true);
            unset($output);
            $v_username = $user;
            $v_domain = $_GET['domain'];
            $v_antispam = $data[$v_domain]['ANTISPAM'];
            $v_antivirus = $data[$v_domain]['ANTIVIRUS'];
            $v_dkim = $data[$v_domain]['DKIM'];
            $v_catchall = $data[$v_domain]['CATCHALL'];
            $v_date = $data[$v_domain]['DATE'];
            $v_time = $data[$v_domain]['TIME'];
            $v_suspended = $data[$v_domain]['SUSPENDED'];
            if ( $v_suspended == 'yes' ) {
                $v_status =  'suspended';
            } else {
                $v_status =  'active';
            }
        }

        // Action
        if (!empty($_POST['save'])) {
            $v_domain = escapeshellarg($_POST['v_domain']);

            // Antispam
            if (($v_antispam == 'yes') && (empty($_POST['v_antispam'])) && (empty($_SESSION['error_msg']))) {
                exec (VESTA_CMD."v_delete_mail_domain_antispam ".$v_username." ".$v_domain, $output, $return_var);
                if ($return_var != 0) {
                    $error = implode('<br>', $output);
                    if (empty($error)) $error = 'Error: vesta did not return any output.';
                    $_SESSION['error_msg'] = $error;
                }
                $v_antispam = 'no';
                unset($output);
            }
            if (($v_antispam == 'no') && (!empty($_POST['v_antispam'])) && (empty($_SESSION['error_msg']))) {
                exec (VESTA_CMD."v_add_mail_domain_antispam ".$v_username." ".$v_domain, $output, $return_var);
                if ($return_var != 0) {
                    $error = implode('<br>', $output);
                    if (empty($error)) $error = 'Error: vesta did not return any output.';
                    $_SESSION['error_msg'] = $error;
                }
                $v_antispam = 'yes';
                unset($output);
            }

            // Antivirus
            if (($v_antivirus == 'yes') && (empty($_POST['v_antivirus'])) && (empty($_SESSION['error_msg']))) {
                exec (VESTA_CMD."v_delete_mail_domain_antivirus ".$v_username." ".$v_domain, $output, $return_var);
                if ($return_var != 0) {
                    $error = implode('<br>', $output);
                    if (empty($error)) $error = 'Error: vesta did not return any output.';
                    $_SESSION['error_msg'] = $error;
                }
                $v_antivirus = 'no';
                unset($output);
            }
            if (($v_antivirus == 'no') && (!empty($_POST['v_antivirus'])) && (empty($_SESSION['error_msg']))) {
                exec (VESTA_CMD."v_add_mail_domain_antivirus ".$v_username." ".$v_domain, $output, $return_var);
                if ($return_var != 0) {
                    $error = implode('<br>', $output);
                    if (empty($error)) $error = 'Error: vesta did not return any output.';
                    $_SESSION['error_msg'] = $error;
                }
                $v_antivirus = 'yes';
                unset($output);
            }

            if (empty($_SESSION['error_msg'])) {
                $_SESSION['ok_msg'] = "OK: changes has been saved.";
            }

            // DKIM
            if (($v_dkim == 'yes') && (empty($_POST['v_dkim'])) && (empty($_SESSION['error_msg']))) {
                exec (VESTA_CMD."v_delete_mail_domain_dkim ".$v_username." ".$v_domain, $output, $return_var);
                if ($return_var != 0) {
                    $error = implode('<br>', $output);
                    if (empty($error)) $error = 'Error: vesta did not return any output.';
                    $_SESSION['error_msg'] = $error;
                }
                $v_dkim = 'no';
                unset($output);
            }
            if (($v_dkim == 'no') && (!empty($_POST['v_dkim'])) && (empty($_SESSION['error_msg']))) {
                exec (VESTA_CMD."v_add_mail_domain_dkim ".$v_username." ".$v_domain, $output, $return_var);
                if ($return_var != 0) {
                    $error = implode('<br>', $output);
                    if (empty($error)) $error = 'Error: vesta did not return any output.';
                    $_SESSION['error_msg'] = $error;
                }
                $v_dkim = 'yes';
                unset($output);
            }

            // Catchall
            if ((!empty($v_catchall)) && (empty($_POST['v_catchall'])) && (empty($_SESSION['error_msg']))) {
                exec (VESTA_CMD."v_delete_mail_domain_catchall ".$v_username." ".$v_domain, $output, $return_var);
                if ($return_var != 0) {
                    $error = implode('<br>', $output);
                    if (empty($error)) $error = 'Error: vesta did not return any output.';
                    $_SESSION['error_msg'] = $error;
                }
                $v_catchall = '';
                unset($output);
            }

            if ((!empty($v_catchall)) && (!empty($_POST['v_catchall'])) && (empty($_SESSION['error_msg']))) {
                if ($v_catchall != $_POST['v_catchall']) {
                    $v_catchall = escapeshellarg($_POST['v_catchall']);
                    exec (VESTA_CMD."v_change_mail_domain_catchall ".$v_username." ".$v_domain." ".$v_catchall, $output, $return_var);
                    if ($return_var != 0) {
                        $error = implode('<br>', $output);
                        if (empty($error)) $error = 'Error: vesta did not return any output.';
                        $_SESSION['error_msg'] = $error;
                    }
                    unset($output);
                }
            }

            if ((empty($v_catchall)) && (!empty($_POST['v_catchall'])) && (empty($_SESSION['error_msg']))) {
                $v_catchall = escapeshellarg($_POST['v_catchall']);
                exec (VESTA_CMD."v_add_mail_domain_catchall ".$v_username." ".$v_domain." ".$v_catchall, $output, $return_var);
                if ($return_var != 0) {
                    $error = implode('<br>', $output);
                    if (empty($error)) $error = 'Error: vesta did not return any output.';
                    $_SESSION['error_msg'] = $error;
                }
                unset($output);
            }

            if (empty($_SESSION['error_msg'])) {
                $_SESSION['ok_msg'] = "OK: changes has been saved.";
            }
        }
        include($_SERVER['DOCUMENT_ROOT'].'/templates/admin/menu_edit_mail.html');
        include($_SERVER['DOCUMENT_ROOT'].'/templates/admin/edit_mail.html');
        unset($_SESSION['error_msg']);
        unset($_SESSION['ok_msg']);
    } else {

        $v_username = $user;
        $v_domain = escapeshellarg($_GET['domain']);
        $v_account = escapeshellarg($_GET['account']);
        exec (VESTA_CMD."v_list_mail_account ".$user." ".$v_domain." ".$v_account." 'json'", $output, $return_var);
        if ($return_var != 0) {
            $error = implode('<br>', $output);
            if (empty($error)) $error = 'Error: vesta did not return any output.';
            $_SESSION['error_msg'] = $error;
        } else {
            $data = json_decode(implode('', $output), true);
            unset($output);
            $v_username = $user;
            $v_domain = $_GET['domain'];
            $v_account = $_GET['account'];
            $v_password = "••••••••";
            $v_aliases = str_replace(',', "\n", $data[$v_account]['ALIAS']);
            $valiases = explode(",", $data[$v_account]['ALIAS']);
            $v_fwd = str_replace(',', "\n", $data[$v_account]['FWD']);
            $vfwd = explode(",", $data[$v_account]['FWD']);
            $v_quota = $data[$v_account]['QUOTA'];
            $v_autoreply = $data[$v_account]['AUTOREPLY'];
            if ( $v_autoreply == 'yes' ) {
                exec (VESTA_CMD."v_list_mail_account_autoreply ".$user." '".$v_domain."' '".$v_account."' json", $output, $return_var);
                $autoreply_str = json_decode(implode('', $output), true);
                unset($output);
                $v_autoreply_message = $autoreply_str[$v_account]['MSG'];
            }
            $v_suspended = $data[$v_account]['SUSPENDED'];
            if ( $v_suspended == 'yes' ) {
                $v_status =  'suspended';
            } else {
                $v_status =  'active';
            }
            $v_date = $data[$v_account]['DATE'];
            $v_time = $data[$v_account]['TIME'];
        }

        // Action
        if (!empty($_POST['save'])) {
            $v_domain = escapeshellarg($_POST['v_domain']);
            $v_account = escapeshellarg($_POST['v_account']);

            // Password
            if (($v_password != $_POST['v_password']) && (empty($_SESSION['error_msg']))) {
                $v_password = escapeshellarg($_POST['v_password']);
                exec (VESTA_CMD."v_change_mail_account_password ".$v_username." ".$v_domain." ".$v_account." ".$v_password, $output, $return_var);
                if ($return_var != 0) {
                    $error = implode('<br>', $output);
                    if (empty($error)) $error = 'Error: vesta did not return any output.';
                    $_SESSION['error_msg'] = $error;
                }
                $v_password = "••••••••";
                unset($output);
            }

            // Quota
            if (($v_quota != $_POST['v_quota']) && (empty($_SESSION['error_msg']))) {
                if (empty($_POST['v_quota'])) {
                    $v_quota = 0; 
                } else {
                    $v_quota = escapeshellarg($_POST['v_quota']);
                }
                exec (VESTA_CMD."v_change_mail_account_quota ".$v_username." ".$v_domain." ".$v_account." ".$v_quota, $output, $return_var);
                if ($return_var != 0) {
                    $error = implode('<br>', $output);
                    if (empty($error)) $error = 'Error: vesta did not return any output.';
                    $_SESSION['error_msg'] = $error;
                }
                unset($output);
            }


            // Aliases
            if (empty($_SESSION['error_msg'])) {
                $waliases = preg_replace("/\n/", " ", $_POST['v_aliases']);
                $waliases = preg_replace("/,/", " ", $waliases);
                $waliases = preg_replace('/\s+/', ' ',$waliases);
                $waliases = trim($waliases);
                $aliases = explode(" ", $waliases);
                $v_aliases = str_replace(' ', "\n", $waliases);
                $result = array_diff($valiases, $aliases);
                foreach ($result as $alias) {
                    if (empty($_SESSION['error_msg'])) {
                        exec (VESTA_CMD."v_delete_mail_account_alias ".$v_username." ".$v_domain." ".$v_account." '".$alias, $output, $return_var);
                        if ($return_var != 0) {
                            $error = implode('<br>', $output);
                            if (empty($error)) $error = 'Error: vesta did not return any output.';
                            $_SESSION['error_msg'] = $error;
                        }
                        unset($output);
                    }
                }
                $result = array_diff($aliases, $valiases);
                foreach ($result as $alias) {
                    if (empty($_SESSION['error_msg'])) {
                        exec (VESTA_CMD."v_add_mail_account_alias ".$v_username." ".$v_domain." ".$v_account." '".$alias, $output, $return_var);
                        if ($return_var != 0) {
                            $error = implode('<br>', $output);
                            if (empty($error)) $error = 'Error: vesta did not return any output.';
                            $_SESSION['error_msg'] = $error;
                        }
                        unset($output);
                    }
                }
            }

            // Forwarders
            if (empty($_SESSION['error_msg'])) {
                $wfwd = preg_replace("/\n/", " ", $_POST['v_fwd']);
                $wfwd = preg_replace("/,/", " ", $wfwd);
                $wfwd = preg_replace('/\s+/', ' ',$wfwd);
                $wfwd = trim($wfwd);
                $fwd = explode(" ", $wfwd);
                $v_fwd = str_replace(' ', "\n", $wfwd);
                $result = array_diff($vfwd, $fwd);
                foreach ($result as $forward) {
                    if (empty($_SESSION['error_msg'])) {
                        exec (VESTA_CMD."v_delete_mail_account_forward ".$v_username." ".$v_domain." ".$v_account." '".$forward."'", $output, $return_var);
                        if ($return_var != 0) {
                            $error = implode('<br>', $output);
                            if (empty($error)) $error = 'Error: vesta did not return any output.';
                            $_SESSION['error_msg'] = $error;
                        }
                        unset($output);
                    }
                }
                $result = array_diff($fwd, $vfwd);
                foreach ($result as $forward) {
                    if (empty($_SESSION['error_msg'])) {
                        exec (VESTA_CMD."v_add_mail_account_forward ".$v_username." ".$v_domain." ".$v_account." '".$forward."'", $output, $return_var);
                        if ($return_var != 0) {
                            $error = implode('<br>', $output);
                            if (empty($error)) $error = 'Error: vesta did not return any output.';
                            $_SESSION['error_msg'] = $error;
                        }
                        unset($output);
                    }
                }
            }

            // Autoreply
            if (($v_autoreply == 'yes') && (empty($_POST['v_autoreply'])) && (empty($_SESSION['error_msg']))) {
                exec (VESTA_CMD."v_delete_mail_account_autoreply ".$v_username." ".$v_domain." ".$v_account, $output, $return_var);
                if ($return_var != 0) {
                    $error = implode('<br>', $output);
                    if (empty($error)) $error = 'Error: vesta did not return any output.';
                    $_SESSION['error_msg'] = $error;
                }
                unset($output);
                $v_autoreply = 'no';
		$v_autoreply_message = '';
            }
            if (($v_autoreply == 'yes') && (!empty($_POST['v_autoreply'])) && (empty($_SESSION['error_msg']))) {
                if ( $v_autoreply_message != str_replace("\r\n", "\n", $_POST['v_autoreply_message'])) {
                    $v_autoreply_message = str_replace("\r\n", "\n", $_POST['v_autoreply_message']);
                    $v_autoreply_message = escapeshellarg($v_autoreply_message);
                    exec (VESTA_CMD."v_add_mail_account_autoreply ".$v_username." ".$v_domain." ".$v_account." ".$v_autoreply_message, $output, $return_var);
                    if ($return_var != 0) {
                        $error = implode('<br>', $output);
                        if (empty($error)) $error = 'Error: vesta did not return any output.';
                        $_SESSION['error_msg'] = $error;
                    }
                    unset($output);
                    $v_autoreply_message = $_POST['v_autoreply_message'];
                }
            }

            if (($v_autoreply == 'no') && (!empty($_POST['v_autoreply'])) && (empty($_SESSION['error_msg']))) {
                if (empty($_POST['v_autoreply_message'])) $_SESSION['error_msg'] = "Error: field atoreply message  can not be blank.";
                if (empty($_SESSION['error_msg'])) {
                    $v_autoreply_message = str_replace("\r\n", "\n", $_POST['v_autoreply_message']);
                    $v_autoreply_message = escapeshellarg($v_autoreply_message);
                    exec (VESTA_CMD."v_add_mail_account_autoreply ".$v_username." ".$v_domain." ".$v_account." ".$v_autoreply_message, $output, $return_var);
                    if ($return_var != 0) {
                        $error = implode('<br>', $output);
                        if (empty($error)) $error = 'Error: vesta did not return any output.';
                        $_SESSION['error_msg'] = $error;
                    }
	            unset($output);
                    $v_autoreply = 'yes';
                    $v_autoreply_message = $_POST['v_autoreply_message'];
                }
            }


            if (empty($_SESSION['error_msg'])) {
                $_SESSION['ok_msg'] = "OK: changes has been saved.";
            }

        }
        include($_SERVER['DOCUMENT_ROOT'].'/templates/admin/menu_edit_mail_acc.html');
        include($_SERVER['DOCUMENT_ROOT'].'/templates/admin/edit_mail_acc.html');
        unset($_SESSION['error_msg']);
        unset($_SESSION['ok_msg']);
    }
}

// Footer
include($_SERVER['DOCUMENT_ROOT'].'/templates/footer.html');