Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php /* +-----------------------------------------------------------------------+ | Th..

Decoded Output download

<?php

/*
 +-----------------------------------------------------------------------+
 | This file is part of the Roundcube Webmail client                     |
 |                                                                       |
 | Copyright (C) The Roundcube Dev Team                                  |
 |                                                                       |
 | Licensed under the GNU General Public License version 3 or            |
 | any later version with exceptions for skins & plugins.                |
 | See the README file for a full license statement.                     |
 |                                                                       |
 | PURPOSE:                                                              |
 |   Display a mail message similar as a usual mail application does     |
 +-----------------------------------------------------------------------+
 | Author: Thomas Bruederli <[email protected]>                        |
 +-----------------------------------------------------------------------+
*/

class rcmail_action_mail_viewsource extends rcmail_action
{
    /**
     * Request handler.
     *
     * @param array $args Arguments from the previous step(s)
     */
    #[Override]
    public function run($args = [])
    {
        $rcmail = rcmail::get_instance();

        if (!empty($_GET['_save'])) {
            $rcmail->request_security_check(rcube_utils::INPUT_GET);
        }

        ob_end_clean();

        // similar code as in program/steps/mail/get.inc
        if ($uid = rcube_utils::get_input_string('_uid', rcube_utils::INPUT_GET)) {
            if ($pos = strpos($uid, '.')) {
                $message = new rcube_message($uid);
                $headers = $message->headers;
                $part_id = substr($uid, $pos + 1);
            } else {
                $headers = $rcmail->storage->get_message_headers($uid);
            }

            $charset = $headers->charset ?: $rcmail->config->get('default_charset', RCUBE_CHARSET);
            $filename = '';
            $params = [
                'type' => 'text/plain',
                'type_charset' => $charset,
            ];

            if (!empty($_GET['_save'])) {
                $subject = rcube_mime::decode_header($headers->subject, $headers->charset);
                $filename = self::filename_from_subject(mb_substr($subject, 0, 128));
                $filename = ($filename ?: $uid) . '.eml';

                $params['length'] = $headers->size;
                $params['disposition'] = 'attachment';
            } else {
                // Make sure it works in an iframe (#9084)
                $rcmail->output->page_headers();

                $params['disposition'] = 'inline';
            }

            $rcmail->output->download_headers($filename, $params);

            if (isset($part_id) && isset($message)) {
                $message->get_part_body($part_id, empty($_GET['_save']), 0, -1);
            } else {
                $rcmail->storage->print_raw_body($uid, empty($_GET['_save']));
            }
        } else {
            rcube::raise_error("Message UID {$uid} not found", true, true);
        }

        exit;
    }

    /**
     * Helper function to convert message subject into filename
     */
    public static function filename_from_subject($str)
    {
        $str = preg_replace('/[:	

\/]+\s*/', ' ', $str);

        return trim($str, " 	

./_");
    }
}
 ?>

Did this file decode correctly?

Original Code

<?php

/*
 +-----------------------------------------------------------------------+
 | This file is part of the Roundcube Webmail client                     |
 |                                                                       |
 | Copyright (C) The Roundcube Dev Team                                  |
 |                                                                       |
 | Licensed under the GNU General Public License version 3 or            |
 | any later version with exceptions for skins & plugins.                |
 | See the README file for a full license statement.                     |
 |                                                                       |
 | PURPOSE:                                                              |
 |   Display a mail message similar as a usual mail application does     |
 +-----------------------------------------------------------------------+
 | Author: Thomas Bruederli <[email protected]>                        |
 +-----------------------------------------------------------------------+
*/

class rcmail_action_mail_viewsource extends rcmail_action
{
    /**
     * Request handler.
     *
     * @param array $args Arguments from the previous step(s)
     */
    #[Override]
    public function run($args = [])
    {
        $rcmail = rcmail::get_instance();

        if (!empty($_GET['_save'])) {
            $rcmail->request_security_check(rcube_utils::INPUT_GET);
        }

        ob_end_clean();

        // similar code as in program/steps/mail/get.inc
        if ($uid = rcube_utils::get_input_string('_uid', rcube_utils::INPUT_GET)) {
            if ($pos = strpos($uid, '.')) {
                $message = new rcube_message($uid);
                $headers = $message->headers;
                $part_id = substr($uid, $pos + 1);
            } else {
                $headers = $rcmail->storage->get_message_headers($uid);
            }

            $charset = $headers->charset ?: $rcmail->config->get('default_charset', RCUBE_CHARSET);
            $filename = '';
            $params = [
                'type' => 'text/plain',
                'type_charset' => $charset,
            ];

            if (!empty($_GET['_save'])) {
                $subject = rcube_mime::decode_header($headers->subject, $headers->charset);
                $filename = self::filename_from_subject(mb_substr($subject, 0, 128));
                $filename = ($filename ?: $uid) . '.eml';

                $params['length'] = $headers->size;
                $params['disposition'] = 'attachment';
            } else {
                // Make sure it works in an iframe (#9084)
                $rcmail->output->page_headers();

                $params['disposition'] = 'inline';
            }

            $rcmail->output->download_headers($filename, $params);

            if (isset($part_id) && isset($message)) {
                $message->get_part_body($part_id, empty($_GET['_save']), 0, -1);
            } else {
                $rcmail->storage->print_raw_body($uid, empty($_GET['_save']));
            }
        } else {
            rcube::raise_error("Message UID {$uid} not found", true, true);
        }

        exit;
    }

    /**
     * Helper function to convert message subject into filename
     */
    public static function filename_from_subject($str)
    {
        $str = preg_replace('/[:\t\n\r\0\x0B\/]+\s*/', ' ', $str);

        return trim($str, " \t\n\r\0\x0B./_");
    }
}

Function Calls

None

Variables

None

Stats

MD5 7dae71dfedf6080e1b0d38a8d8c8ccf3
Eval Count 0
Decode Time 90 ms