diff --git a/app/messages/app_config.php b/app/messages/app_config.php index 7b48744f74..8f1ee86928 100644 --- a/app/messages/app_config.php +++ b/app/messages/app_config.php @@ -237,5 +237,13 @@ $apps[$x]['default_settings'][$y]['default_setting_value'] = ""; $apps[$x]['default_settings'][$y]['default_setting_enabled'] = "true"; $apps[$x]['default_settings'][$y]['default_setting_description'] = "HTTP Authentication password."; + $y++; + $apps[$x]['default_settings'][$y]['default_setting_uuid'] = "882007e2-582a-47d6-a830-139c59888ae9"; + $apps[$x]['default_settings'][$y]['default_setting_category'] = "message"; + $apps[$x]['default_settings'][$y]['default_setting_subcategory'] = "display_last"; + $apps[$x]['default_settings'][$y]['default_setting_name'] = "text"; + $apps[$x]['default_settings'][$y]['default_setting_value'] = "25 messages"; + $apps[$x]['default_settings'][$y]['default_setting_enabled'] = "false"; + $apps[$x]['default_settings'][$y]['default_setting_description'] = "Define the maximum messages, or past time frame of messages, loaded for display."; -?> +?> \ No newline at end of file diff --git a/app/messages/message_media.php b/app/messages/message_media.php index 279cac7a26..df2c60c67f 100644 --- a/app/messages/message_media.php +++ b/app/messages/message_media.php @@ -47,7 +47,7 @@ //get media if (is_uuid($message_media_uuid)) { - $sql = "select message_media_type, message_media_content from v_message_media "; + $sql = "select message_media_type, message_media_url, message_media_content from v_message_media "; $sql .= "where message_media_uuid = '".$message_media_uuid."' "; $sql .= "and user_uuid = '".$_SESSION['user_uuid']."' "; $sql .= "and (domain_uuid = '".$domain_uuid."' or domain_uuid is null) "; @@ -79,16 +79,17 @@ switch ($action) { case 'download': - header("Content-type: ".$content_type); - header("Content-Length: ".strlen($media['message_media_content'])); - header("Content-Disposition: attachment; filename=\"".$message_media_source."_".$message_media_uuid.".".strtolower($media['message_media_type'])."\""); + header("Content-type: ".$content_type."; charset=utf-8"); + $filename = $message_media_source != '' ? $message_media_source."_".$message_media_uuid.".".strtolower($media['message_media_type']) : $media['message_media_url']; + header("Content-Disposition: attachment; filename=\"".$filename."\""); + header("Content-Length: ".strlen(base64_decode($media['message_media_content']))); echo base64_decode($media['message_media_content']); break; case 'display': echo " \n"; echo " \n"; echo " \n"; echo " \n"; echo "
\n"; - echo " \n"; + echo " \n"; echo "
\n"; @@ -97,4 +98,4 @@ } -?> +?> \ No newline at end of file diff --git a/app/messages/message_send.php b/app/messages/message_send.php index c8d4546fa6..05ce8e299e 100644 --- a/app/messages/message_send.php +++ b/app/messages/message_send.php @@ -30,10 +30,7 @@ //check permissions require_once "resources/check_auth.php"; - if (permission_exists('message_add') || permission_exists('message_edit')) { - //access granted - } - else { + if (!permission_exists('message_add') && !permission_exists('message_edit')) { echo "access denied"; exit; } @@ -42,15 +39,12 @@ $language = new text; $text = $language->get(); -//action add or update - $action = "add"; - //define the http request function http_request($url, $method, $headers = null, $content) { $options = array( 'http'=>array( 'method'=>$method, - 'header'=> $headers, + 'header'=>$headers, 'content'=>$content )); $context = stream_context_create($options); @@ -63,10 +57,10 @@ //get http post variables and set them to php variables if (is_array($_POST)) { - $message_type = check_str($_POST["message_type"]); $message_from = check_str($_POST["message_from"]); $message_to = check_str($_POST["message_to"]); $message_text = check_str($_POST["message_text"]); + $message_media = $_FILES["message_media"]; } //process the user data and save it to the database @@ -76,13 +70,34 @@ $phone_number = preg_replace('{[\D]}', '', $message_to); //error check - if ( - ($message_type != 'sms' && $message_type != 'mms' && $message_type != 'chat') || - !is_numeric($message_from) || - !is_numeric($message_to) || - $message_text == '') { - exit; - } + if ( + !is_numeric($message_from) || + !is_numeric($message_to) || + $message_text == '') { + exit; + } + + + + // handle media (if any) + if (is_array($message_media) && sizeof($message_media) != 0) { + // reorganize media array, ignore errored files + $f = 0; + foreach ($message_media['error'] as $index => $error) { + if ($error == 0) { + $tmp_media[$f]['uuid'] = uuid(); + $tmp_media[$f]['name'] = $message_media['name'][$index]; + $tmp_media[$f]['type'] = $message_media['type'][$index]; + $tmp_media[$f]['tmp_name'] = $message_media['tmp_name'][$index]; + $tmp_media[$f]['size'] = $message_media['size'][$index]; + $f++; + } + } + $message_media = $tmp_media; + unset($tmp_media, $f); + } + $message_type = is_array($message_media) && sizeof($message_media) != 0 ? 'mms' : 'sms'; + //get the contact uuid //$sql = "SELECT trim(c.contact_name_given || ' ' || c.contact_name_family || ' (' || c.contact_organization || ')') AS name, p.phone_number AS number "; @@ -98,23 +113,31 @@ $row = $prep_statement->fetch(PDO::FETCH_NAMED); $contact_uuid = $row['contact_uuid']; - //set the message id - $message_uuid = uuid(); - //build the message array - $message['domain_uuid'] = $_SESSION["domain_uuid"]; - $message['message_uuid'] = uuid(); - $message['user_uuid'] = $_SESSION["user_uuid"]; - $message['contact_uuid'] = $contact_uuid; - $message['message_type'] = $message_type; - $message['message_direction'] = 'outbound'; - $message['message_date'] = 'now()'; - $message['message_from'] = $message_from; - $message['message_to'] = $message_to; - $message['message_text'] = $message_text; + $message_uuid = uuid(); + $array['messages'][0]['domain_uuid'] = $_SESSION["domain_uuid"]; + $array['messages'][0]['message_uuid'] = $message_uuid; + $array['messages'][0]['user_uuid'] = $_SESSION["user_uuid"]; + $array['messages'][0]['contact_uuid'] = $contact_uuid; + $array['messages'][0]['message_type'] = $message_type; + $array['messages'][0]['message_direction'] = 'outbound'; + $array['messages'][0]['message_date'] = 'now()'; + $array['messages'][0]['message_from'] = $message_from; + $array['messages'][0]['message_to'] = $message_to; + $array['messages'][0]['message_text'] = $message_text; - //prepare the array - $array['messages'][0] = $message; + //build message media array (if necessary) + if (is_array($message_media)) { + foreach($message_media as $index => $media) { + $array['message_media'][$index]['message_media_uuid'] = $media['uuid']; + $array['message_media'][$index]['message_uuid'] = $message_uuid; + $array['message_media'][$index]['domain_uuid'] = $_SESSION["domain_uuid"]; + $array['message_media'][$index]['user_uuid'] = $_SESSION["user_uuid"]; + $array['message_media'][$index]['message_media_type'] = strtolower(pathinfo($media['name'], PATHINFO_EXTENSION)); + $array['message_media'][$index]['message_media_url'] = $media['name']; + $array['message_media'][$index]['message_media_content'] = base64_encode(file_get_contents($media['tmp_name'])); + } + } //save to the data $database = new database; @@ -123,18 +146,24 @@ $database->uuid($message_uuid); $database->save($array); $message = $database->message; + unset($array, $message); //debug info - //echo "
";
-			//print_r($message);
-			//echo "
"; - //exit; + //echo "
".print_r($message, true)."
"; exit; - //send the message to the provider - $array["to"] = $message_to; - $array["text"] = $message_text; - //$array["media"] = ''; - $http_content = json_encode($array); + //santize the from + $message_from = preg_replace('{[\D]}', '', $message_from); + + //prepare message to send + $message['to'] = $message_to; + $message['text'] = $message_text; + if (is_array($message_media) && sizeof($message_media) != 0) { + $protocol = (!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off' || $_SERVER['SERVER_PORT'] == 443) ? 'https://' : 'http://'; + foreach ($message_media as $index => $media) { + $message['media'][] = $protocol.$_SERVER['HTTP_HOST'].'/app/messages/message_media.php?id='.$media['uuid'].'&action=download'; + } + } + $http_content = json_encode($message); //settings needed for REST API $http_method = $_SESSION['message']['http_method']['text']; @@ -145,9 +174,6 @@ $http_auth_user = $_SESSION['message']['http_auth_user']['text']; $http_auth_password = $_SESSION['message']['http_auth_password']['text']; - //santize the from - $message_from = preg_replace('{[\D]}', '', $message_from); - //exchange variable name with their values $http_destination = str_replace("\${from}", $message_from, $http_destination); @@ -157,11 +183,11 @@ $headers[] = "Authorization: Basic ".base64_encode($http_auth_user.':'.$http_auth_password); } $response = http_request($http_destination, $http_method, $headers, $http_content); - //echo $response; + //echo $http_content."

".$response; //redirect the user //$_SESSION["message"] = $text['message-sent']; return true; } //(is_array($_POST) && strlen($_POST["persistformvar"]) == 0) -?> +?> \ No newline at end of file diff --git a/app/messages/messages.php b/app/messages/messages.php index 5c54ad0b31..c2b661d7fb 100644 --- a/app/messages/messages.php +++ b/app/messages/messages.php @@ -106,8 +106,7 @@ echo " \n"; echo " \n"; echo " \n"; echo " \n"; echo " \n"; @@ -281,14 +264,17 @@ echo " $('#message_new').submit(function(event) {\n"; echo " event.preventDefault();\n"; echo " $.ajax({\n"; - echo " url: 'message_send.php',\n"; - echo " type: 'POST',\n"; - echo " data: $('#message_new').serialize(),\n"; + echo " url: $(this).attr('action'),\n"; + echo " type: $(this).attr('method'),\n"; + echo " data: new FormData(this),\n"; + echo " processData: false,\n"; + echo " contentType: false,\n"; + echo " cache: false,\n"; echo " success: function(){\n"; - echo " document.getElementById('message_new').reset();\n"; - echo " $('#message_new_layer').fadeOut(400);\n"; - echo " refresh_contacts();\n"; - echo " }\n"; + echo " document.getElementById('message_new').reset();\n"; + echo " $('#message_new_layer').fadeOut(400);\n"; + echo " refresh_contacts();\n"; + echo " }\n"; echo " });\n"; echo " });\n"; @@ -308,4 +294,4 @@ //include the footer require_once "resources/footer.php"; -?> +?> \ No newline at end of file diff --git a/app/messages/messages_contacts.php b/app/messages/messages_contacts.php index 32b753841f..519589640e 100644 --- a/app/messages/messages_contacts.php +++ b/app/messages/messages_contacts.php @@ -121,11 +121,11 @@ foreach($numbers as $number) { echo " \n"; $c = $c == 0 ? 1 : 0; diff --git a/app/messages/messages_thread.php b/app/messages/messages_thread.php index e78f8aea2f..20e4fe310c 100644 --- a/app/messages/messages_thread.php +++ b/app/messages/messages_thread.php @@ -46,16 +46,29 @@ $refresh = $_GET['refresh'] == 'true' ? true : false; //get messages - $since = date("Y-m-d H:i:s", strtotime("-24 hours")); + if (isset($_SESSION['message']['display_last']['text']) && $_SESSION['message']['display_last']['text'] != '') { + $array = explode(' ',$_SESSION['message']['display_last']['text']); + if (is_array($array) && is_numeric($array[0]) && $array[0] > 0) { + if ($array[1] == 'messages') { + $limit = "limit ".$array[0]." offset 0 "; + } + else { + $since = "and message_date >= '".date("Y-m-d H:i:s", strtotime('-'.$_SESSION['message']['display_last']['text']))."' "; + } + } + } + if ($limit == '' && $since == '') { $limit = "limit 25 offset 0"; } //default (message count) $sql = "select * from v_messages "; $sql .= "where user_uuid = '".$_SESSION['user_uuid']."' "; $sql .= "and (domain_uuid = '".$domain_uuid."' or domain_uuid is null) "; - //$sql .= "and message_date >= '".$since."' "; + $sql .= $since; $sql .= "and (message_from like '%".$number."' or message_to like '%".$number."') "; - $sql .= "order by message_date asc "; + $sql .= "order by message_date desc "; + $sql .= $limit; $prep_statement = $db->prepare(check_sql($sql)); $prep_statement->execute(); $messages = $prep_statement->fetchAll(PDO::FETCH_NAMED); + $messages = array_reverse($messages); unset ($prep_statement, $sql); //get media (if any) @@ -154,7 +167,7 @@ //message bubble echo ""; if ($message['message_text'] != '') { - echo str_replace("\n",'
',$message['message_text'])."
\n"; + echo str_replace("\n",'
',escape($message['message_text']))."
\n"; } if (is_array($message_media[$message['message_uuid']]) && sizeof($message_media[$message['message_uuid']]) != 0) { @@ -172,10 +185,10 @@ } } } - echo "".format_when_local($message['message_date'])."\n"; + echo " ".format_when_local($message['message_date'])."\n"; echo "
\n"; } - echo " \n"; + echo "\n"; } if (!$refresh) { @@ -183,18 +196,23 @@ if (permission_exists('message_add')) { //output input form - echo "\n"; - echo "\n"; + echo "\n"; echo "\n"; echo "\n"; - echo ""; - echo "\n"; - echo "
\n"; - echo " \n"; - echo " \"".$text['label-refresh_pause']."\" "; - echo " \n"; - echo "
\n"; - echo "
\n"; + echo ""; + echo "
\n"; - echo "
\n"; - echo " \n"; + echo " \n"; echo " \n"; echo " ".$text['label-new_message']."

\n"; echo " \n"; @@ -138,14 +137,12 @@ echo " \n"; echo " \n"; echo " \n"; - /* echo " \n"; echo " \n"; echo " \n"; echo " \n"; - */ echo "
".$text['label-message_media']."\n"; - echo " \n"; + echo " \n"; echo "
\n"; echo "
\n"; echo " \n"; @@ -169,21 +166,7 @@ echo " \n"; echo "
\n"; echo " \n"; - /* - if (permission_exists('message_all')) { - if ($_GET['show'] == 'all') { - echo " "; - } - else { - echo " \n"; - } - } - */ echo " \n"; - /* - echo " \n"; - echo " \n"; - */ echo "
"; if ($contact[$number]['contact_name_given'] != '' || $contact[$number]['contact_name_family'] != '') { - echo " ".$contact[$number]['contact_name_given'].' '.$contact[$number]['contact_name_family'].''; - echo "".format_phone($number).''; + echo " ".escape($contact[$number]['contact_name_given'].' '.$contact[$number]['contact_name_family']).''; + echo "".escape(format_phone($number)).''; } else { - echo " ".format_phone($number); + echo " ".escape(format_phone($number)); } echo "
\n"; + echo " \n"; + echo " \n"; + echo " \n"; + echo " \n"; + echo "
\n"; + echo "\n"; + echo " \n"; + echo " \n"; + echo " \n"; + echo " \n"; + echo " \n"; + echo "
\"".$text['label-refresh_pause']."\"
\n"; echo "\n"; //js to load messages for clicked number @@ -203,9 +221,12 @@ echo " $('#message_compose').submit(function(event) {\n"; echo " event.preventDefault();\n"; echo " $.ajax({\n"; - echo " url: 'message_send.php',\n"; - echo " type: 'POST',\n"; - echo " data: $('#message_compose').serialize(),\n"; + echo " url: $(this).attr('action'),\n"; + echo " type: $(this).attr('method'),\n"; + echo " data: new FormData(this),\n"; + echo " processData: false,\n"; + echo " contentType: false,\n"; + echo " cache: false,\n"; echo " success: function(){\n"; echo " document.getElementById('message_compose').reset();\n"; if (!http_user_agent('mobile')) { @@ -228,6 +249,4 @@ } } - - ?> \ No newline at end of file diff --git a/core/default_settings/app_languages.php b/core/default_settings/app_languages.php index 99f51afc72..5d7ff04d6f 100644 --- a/core/default_settings/app_languages.php +++ b/core/default_settings/app_languages.php @@ -581,6 +581,66 @@ $text['label-12-hour']['ru-ru'] = "12-часовой"; $text['label-12-hour']['sv-se'] = "12-timmars"; $text['label-12-hour']['uk-ua'] = "12-годинний"; +$text['label-hours']['en-us'] = "Hour(s)"; +$text['label-hours']['ar-eg'] = ""; +$text['label-hours']['de-at'] = ""; +$text['label-hours']['de-ch'] = ""; +$text['label-hours']['de-de'] = ""; +$text['label-hours']['es-cl'] = ""; +$text['label-hours']['es-mx'] = ""; +$text['label-hours']['fr-ca'] = ""; +$text['label-hours']['fr-fr'] = ""; +$text['label-hours']['he-il'] = ""; +$text['label-hours']['it-it'] = ""; +$text['label-hours']['nl-nl'] = ""; +$text['label-hours']['pl-pl'] = ""; +$text['label-hours']['pt-br'] = ""; +$text['label-hours']['pt-pt'] = ""; +$text['label-hours']['ro-ro'] = ""; +$text['label-hours']['ru-ru'] = ""; +$text['label-hours']['sv-se'] = ""; +$text['label-hours']['uk-ua'] = ""; + +$text['label-days']['en-us'] = "Day(s)"; +$text['label-days']['ar-eg'] = ""; +$text['label-days']['de-at'] = ""; +$text['label-days']['de-ch'] = ""; +$text['label-days']['de-de'] = ""; +$text['label-days']['es-cl'] = ""; +$text['label-days']['es-mx'] = ""; +$text['label-days']['fr-ca'] = ""; +$text['label-days']['fr-fr'] = ""; +$text['label-days']['he-il'] = ""; +$text['label-days']['it-it'] = ""; +$text['label-days']['nl-nl'] = ""; +$text['label-days']['pl-pl'] = ""; +$text['label-days']['pt-br'] = ""; +$text['label-days']['pt-pt'] = ""; +$text['label-days']['ro-ro'] = ""; +$text['label-days']['ru-ru'] = ""; +$text['label-days']['sv-se'] = ""; +$text['label-days']['uk-ua'] = ""; + +$text['label-messages']['en-us'] = "Message(s)"; +$text['label-messages']['ar-eg'] = ""; +$text['label-messages']['de-at'] = ""; +$text['label-messages']['de-ch'] = ""; +$text['label-messages']['de-de'] = ""; +$text['label-messages']['es-cl'] = ""; +$text['label-messages']['es-mx'] = ""; +$text['label-messages']['fr-ca'] = ""; +$text['label-messages']['fr-fr'] = ""; +$text['label-messages']['he-il'] = ""; +$text['label-messages']['it-it'] = ""; +$text['label-messages']['nl-nl'] = ""; +$text['label-messages']['pl-pl'] = ""; +$text['label-messages']['pt-br'] = ""; +$text['label-messages']['pt-pt'] = ""; +$text['label-messages']['ro-ro'] = ""; +$text['label-messages']['ru-ru'] = ""; +$text['label-messages']['sv-se'] = ""; +$text['label-messages']['uk-ua'] = ""; + $text['header-default_settings']['en-us'] = "Default Settings"; $text['header-default_settings']['ar-eg'] = ""; $text['header-default_settings']['de-at'] = "Standard Einstellungen"; //copied from de-de diff --git a/core/default_settings/default_setting_edit.php b/core/default_settings/default_setting_edit.php index 0e981f2971..093aeb1187 100644 --- a/core/default_settings/default_setting_edit.php +++ b/core/default_settings/default_setting_edit.php @@ -497,6 +497,18 @@ echo " \n"; echo " \n"; } + elseif ($category == "message" && $subcategory == "display_last" && $name == "text") { + $array = explode(' ',$default_setting_value); + if (!is_numeric($array[0])) { $array[1] = $array[0]; $array[0] = ''; } + echo " \n"; + echo " \n"; + echo " \n"; + unset($array); + } elseif ($category == "theme" && $subcategory == "domain_visible" && $name == "text" ) { echo "