src/Controller/QUserController.php line 120

Open in your IDE?
  1. <?php
  3. namespace App\Controller;
  5. use Knp\Component\Pager\PaginatorInterface;
  6. use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
  7. use Symfony\Component\Mailer\MailerInterface;
  8. use Symfony\Component\Routing\Annotation\Route;
  9. use Symfony\Component\DependencyInjection\ParameterBag\ParameterBagInterface;
  10. use Symfony\Component\HttpFoundation\Request;
  11. use Symfony\Component\HttpFoundation\Cookie;
  12. use Symfony\Component\HttpFoundation\RequestStack;
  13. use Symfony\Contracts\Translation\TranslatorInterface;
  14. use Symfony\Component\HttpFoundation\Session\SessionInterface;
  15. use Symfony\Component\Security\Core\Security;
  16. use Symfony\Component\Security\Core\Authentication\Token\SwitchUserToken;
  17. use Symfony\Component\Validator\Constraints as Assert;
  18. use Symfony\Component\Validator\Validator\ValidatorInterface;
  19. use Symfony\Component\Mime\Email;
  20. use Symfony\Component\Routing\Generator\UrlGeneratorInterface;
  21. use OTPHP\TOTP;
  22. use Endroid\QrCode\Builder\Builder;
  23. use App\Form\LoginHistory;
  24. use App\Form\QUser\AutoresponderForm;
  25. use App\Form\QUser\AutoresponderAdvRulesForm;
  26. use App\Form\QUser\ForwardMailEdit;
  27. use App\Form\QUser\ForwardsMass;
  28. use App\Form\QUser\Imap;
  29. use App\Form\QUser\ImapMass;
  30. use App\Form\QUser\NoticeSMS;
  31. use App\Form\QUser\PasswordChange;
  32. use App\Form\QUser\ForwardMail;
  33. use App\Form\QUser\Procmail;
  34. use App\Form\QUser\ProcmailMass;
  35. use App\Form\QUser\Settings;
  36. use App\Form\QUser\SpamAssassinLists;
  37. use App\Form\QUser\SpamAssassinScore;
  38. use App\Security\User;
  39. use App\Util\AccountTools;
  40. use App\Util\Api;
  41. use App\Util\AppLogger;
  42. use App\Util\TwoFactor;
  43. use App\Model\Autoresponder;
  44. use App\Model\Account;
  45. use App\Form\QUser\SpamAssassinLocales;
  46. use App\Model\LoginMessage;
  47. use App\Model\ProcmailRule;
  48. use App\Model\UserPref;
  49. use App\Model\Qs;
  50. use App\Model\ImapDir;
  51. use App\Form\QUser\SpamAssassinListsMass;
  52. use App\Form\QUser\AutomatedForward;
  53. use App\Twig\AppExtension;
  55. class QUserController extends AbstractController
  56. {
  57.     private $logger;
  58.     private $translator;
  59.     private $security;
  60.     private $params;
  61.     private $session;
  62.     private $mailer;
  63.     private $skin;
  64.     private $requestStack;
  65.     private $appExtension;
  66.     
  67.     public function __construct(AppLogger $logger, TranslatorInterface $translator, Security $security,
  68.         ParameterBagInterface $params, MailerInterface $mailer, RequestStack $requestStack,
  69.         AppExtension $appExtension)
  70.     {
  71.         $this->logger = $logger;
  72.         $this->translator = $translator;
  73.         $this->security = $security;
  74.         $this->params = $params;
  75.         $this->mailer = $mailer;
  76.         $this->requestStack = $requestStack;
  77.         $this->appExtension = $appExtension;
  78.         $this->session = $this->requestStack->getSession();
  79.         $this->_isReloadNeeded();
  80.         
  81.         $defaultSkin = 'raw';
  82.         
  83.         if(isset($_SERVER['DEFAULT_SKIN'])) {
  84.             $defaultSkin = $_SERVER['DEFAULT_SKIN'];
  85.         }
  86.         
  87.         $user = $this->security->getUser();
  88.         $account = $user ? $user->getAccount() : null;
  89.         
  90.         if(!is_null($account)) { // may be null for superadmin
  91.             $this->skin = $account->findSOption('cfgSkin') == null ? $defaultSkin : $account->findSOption('cfgSkin');
  92.         }
  93.         else {
  94.             $this->skin = $defaultSkin;
  95.         }
  96.         
  97.         QUserController::overwriteEnvs();
  98.     }
  99.     
  100.     public static function overwriteEnvs()
  101.     {
  102.         // maybe we need to overwrite some envs
  103.         $license = Api::getLicense();
  105.         if(array_key_exists('envs', $license) && (count($license['envs']) > 0)) {
  106.             foreach($license['envs'] as $e) {
  107.                 $eArr = explode('=', $e);
  108.                 
  109.                 if(count($eArr) != 2) {
  110.                     continue;
  111.                 }
  112.                 
  113.                 $_SERVER[$eArr[0]] = $eArr[1];
  114.             }
  115.         }
  116.     }
  117.     /**
  118.      * @Route("/panel", name="qu_main")
  119.      */
  120.     public function index(Request $request)
  121.     {
  122.         $locale = $this->requestStack->getSession()->get(User::LOCALE_SESSION_NAME);
  123.         $account = $this->security->getUser()->getAccount();
  124.         
  125.         try {
  126.             $version = Api::getVersion();
  127.         }
  128.         catch(\Exception $e) {
  129.             $this->logger->log('Api::getVersion() - exception from API', $request, ['error_code' => $e->getCode(), 'error_message' => $e->getMessage()], 'critical');
  130.             $this->addFlash('error', $this->translator->trans('Critical getting API version, contact administrator.'));
  131.             return $this->redirectToRoute("app_login");
  132.         }
  133.         
  134.         $modal = null;
  135.         $showModal = false;
  136.         
  137.         if(!$this->session->get('modalShown', false)) {
  138.             $msgs = Api::listLoginMessages($account);
  139.             $this->session->set('modalShown', true);
  140.             
  141.             if(count($msgs) > 0) {
  142.                 $showModal = true;
  143.                 $modal = $msgs[0];
  145.                 // dismissing if must be shown only once
  146.                 if($modal->getMessageTrigger() == LoginMessage::MESSAGE_TRIGGER_AT_FIRST_LOGIN) {
  147.                     Api::loginMessageDismiss($account, $modal->getId());
  148.                 }
  149.             }
  150.         }
  151.         
  152.         $showVersionWarning = true;
  153.         
  154.         if(isset($_SERVER['APP_USERPANEL_SHOW_VERSION_WARNING']) && $_SERVER['APP_USERPANEL_SHOW_VERSION_WARNING'] == 'false') {
  155.             $showVersionWarning = false;
  156.         }
  157.         
  158.         $response = $this->render('skins/' . $this->skin . '/q_user/index.html.twig', [
  159.             'apiVersion' => $version,
  160.             'appVersion' => $this->params->get('app.version.panel'),
  161.             'showVersionWarning' => $showVersionWarning,
  162.             'showModal' => $showModal,
  163.             'modal' => $modal,
  164.         ]);
  165.                
  166.         if($locale != null && $locale != "") {
  167.             // save cookie with locales
  168.             $cookie = Cookie::create(User::LOCALE_COOKIE_NAME, $locale, time() + 24*7*3600, '/');
  169.             $response->headers->setCookie($cookie);
  170.         }
  171.         
  172.         return $response;
  173.     }
  174.     
  175.     /**
  176.      * password change
  177.      * @Route("/panel/password", name="qu_password")
  178.      */
  179.     public function password(Request $request)
  180.     {
  181.         $user = $this->security->getUser();
  182.         $account = $user->getAccount();
  183.         
  184.         // access to this module
  185.         $this->denyAccessUnlessGranted('PASSWORD_CHANGE', $account);
  186.         $this->denyAccessUnlessGranted('EDIT', $account);
  187.         
  188.         $form = $this->createForm(PasswordChange::class);
  189.         $form->handleRequest($request);
  190.         
  191.         if($form->isSubmitted() && $form->isValid()) {
  192.             try {
  193.                 // check if provided password matches user current password
  194.                 if(!Api::checkPassword($user->getUserNamePart(), $user->getUserDomainPart(), $form->get('oldPassword')->getData())) {
  195.                     $this->addFlash('error', $this->translator->trans('Wrong current password. Password NOT changed'));
  196.                     
  197.                     return $this->render('skins/' . $this->skin . '/q_user/password.html.twig', [
  198.                         'form' => $form->createView(),
  199.                         'userEmail' => $user->getEmail(),
  200.                     ]);
  201.                 }
  202.                 
  203.                 // check if new password is different than the old one
  204.                 if($form->get('oldPassword')->getData() == $form->get('newPassword')->getData()) {
  205.                     $this->addFlash('error', $this->translator->trans('New password is the same as current password. Password NOT changed'));
  206.                     
  207.                     return $this->render('skins/' . $this->skin . '/q_user/password.html.twig', [
  208.                         'form' => $form->createView(),
  209.                         'userEmail' => $user->getEmail(),
  210.                     ]);
  211.                 }
  212.                         
  213.                 if(Api::changePassword($user->getUserNamePart(), $user->getUserDomainPart(), $form->get('newPassword')->getData())) {
  214.                     $this->addFlash('notice', $this->translator->trans('Password changed'));
  215.                     $this->logger->log('Password change', $request);
  216.                     //$request->getSession()->set('storedPassword', AccountTools::encryptString($form->get('newPassword')->getData()));
  217.                     $this->requestStack->getSession()->set('storedPassword', AccountTools::encryptString($form->get('newPassword')->getData()));
  218.                     
  219.                     if(!AccountTools::callExternalScript($user->getUserNamePart(), $user->getUserDomainPart(), 'quser', 'pwchange', $form->get('newPassword')->getData())) {
  220.                         $this->logger->log('Calling external script failed for changing password for an account', $request, ['accountName' => $user->getUserName()]);
  221.                     }
  222.                     return $this->redirectToRoute('qu_password');
  223.                 }
  224.                 else {
  225.                     $this->addFlash('error', $this->translator->trans('Password NOT changed - error'));
  226.                 }
  227.             }
  228.             catch(\Exception $e) {
  229.                 $this->logger->log('Api::changePassword() - exception from API', $request, ['error_code' => $e->getCode(), 'error_message' => $e->getMessage()], 'critical');
  230.                 $this->addFlash('error', $this->translator->trans('Critical error changing password, contact administrator.'));
  231.                 return $this->redirectToRoute("qu_main");
  232.             }
  233.         }
  234.         elseif($form->isSubmitted() && !$form->isValid()){
  235.             $errorStr = '';
  236.             $num = 1;
  237.             $errorsCnt = count($form->getErrors(true));
  238.             
  239.             foreach($form->getErrors(true) as $e) {
  240.                 $errorStr .= ($errorsCnt > 1 ? $num . '. ' : '') . lcfirst($e->getMessage()) . ' ';
  241.                 $num = $num + 1;
  242.             }
  243.             
  244.             $errorStr = rtrim($errorStr);
  245.             
  246.             $this->addFlash('error', $this->translator->trans('Password NOT changed') . ': '.$errorStr,'');
  247.         }        
  248.             
  249.         return $this->render('skins/' . $this->skin . '/q_user/password.html.twig', [
  250.             'form' => $form->createView(),
  251.         ]);
  252.     }
  253.         
  254.     /**
  255.      * @Route("/panel/forward/{orderDir}", defaults={"orderDir"="asc"}, name="qu_forward", requirements={"orderDir"="asc|desc"})
  256.      */
  257.     public function forwarding($orderDir, Request $request, ValidatorInterface $validator, PaginatorInterface $paginator)
  258.     {        
  259.         $user = $this->security->getUser();
  260.         $account = $user->getAccount();
  261.         $this->denyAccessUnlessGranted('FORWARD', $account);
  262.         $pagination = $account->findSOption('cfgUserPagination') == null ?
  263.         (isset($_SERVER['APP_DEFAULT_PER_PAGE']) ? $_SERVER['APP_DEFAULT_PER_PAGE'] : Account::NUMBER_OF_ITEMS)
  264.         : $account->findSOption('cfgUserPagination');
  265.         
  266.         $formMass = $this->createForm(ForwardsMass::class);
  267.         $formAutomated = $this->createForm(AutomatedForward::class);
  268.         $form = $this->createForm(ForwardMail::class);
  269.         $form->handleRequest($request);
  270.         $forwardsErrors = [];
  271.         
  272.         try {
  273.             $forwards = Api::getForwards($account);
  274.             $automated = Api::listAutomatedForwards($account);
  275.             
  276.             if($orderDir == 'asc') {
  277.                 sort($forwards);
  278.             }
  279.             else {
  280.                 rsort($forwards);
  281.             }
  282.             
  283.             $localForwarding = Api::getForwardLocal($account);
  284.         }
  285.         catch(\Exception $e) {
  286.             $this->logger->log('Api::getForwardLocal() - exception from API', $request, ['error_code' => $e->getCode(), 'error_message' => $e->getMessage()], 'critical');
  287.             $this->addFlash('error', $this->translator->trans('Critical error, contact administrator.'));
  288.             return $this->redirectToRoute('qu_main');
  289.         }
  290.              
  291.         try {
  292.             $disabledForwards = Api::getDisabledForwards($account);
  293.             
  294.             if($orderDir == 'asc') {
  295.                 sort($forwards);
  296.             }
  297.             else {
  298.                 rsort($forwards);
  299.             }
  300.         }
  301.         catch(\Exception $e) {
  302.             $this->logger->log('Api::getDisabledForwards() - exception from API', $request, ['error_code' => $e->getCode(), 'error_message' => $e->getMessage()], 'critical');
  303.             $this->addFlash('error', $this->translator->trans('Critical error, contact administrator.'));
  304.             return $this->redirectToRoute('qu_main');
  305.         }
  306.         
  307.         $maxForwards = $this->_maxForwards($account);
  308.         $maxExternalForwards = $this->_maxExternalForwards($account);
  309.         
  310.         if(($maxForwards == -1) || ($maxExternalForwards == -1)) {
  311.             $this->addFlash('error', $this->translator->trans('Domain settings not available'));
  312.             $this->logger->log('Error while getting domain ' . $account->getUserDomain(), $request, ['accountName' => $account->getUsername()]);
  313.             return $this->redirectToRoute('qp_main');
  314.         }
  315.         
  316.         $procmailRulesCnt = $this->_numberProcmailRulesEmail($account);
  317.         $procmailRulesExternalCnt = $this->_numberProcmailRulesEmailExternal($account);
  318.         
  319.         if($form->isSubmitted() && $form->isValid()) {
  320.             $alreadyExists = false;
  321.             $loopDetected = false;
  322.             
  323.             $addresses = explode(',', $form->get('address')->getData());
  324.             $added = false;
  325.             $affected = [];
  326.             $faultyAddresses = [];
  327.             
  328.             // first - checking existance & loops
  329.             foreach(array_unique($addresses) as $adr) {
  330.                 $adr = trim($adr);
  331.                 
  332.                 foreach($forwards as $f) {
  333.                     if($adr == $f) {
  334.                         $alreadyExists = true;
  335.                         $forwardsErrors[] = $this->translator->trans('Already exists');
  336.                         $faultyAddresses[] = $adr;
  337.                     }
  338.                 }
  339.                 
  340.                 if(!$alreadyExists) {
  341.                     if($adr == $user->getEmail()) {
  342.                         $loopDetected = true;
  343.                         $forwardsErrors[] = $this->translator->trans('Loop detected');
  344.                         $faultyAddresses[] = $adr;
  345.                     }
  346.                     else {
  347.                         $forwardsErrors[] = '';
  348.                     }
  349.                 }                
  350.             }
  351.                 
  352.             if($alreadyExists || $loopDetected) {
  353.                 if($alreadyExists) {
  354.                     $this->addFlash('error', $this->translator->trans('Forwarding NOT set - already exists') . ': ' . implode(', ', $faultyAddresses));
  355.                 }
  356.                 else {
  357.                     $this->addFlash('error', $this->translator->trans('Forwarding NOT set - loop detected') . ': ' . implode(', ', $faultyAddresses));
  358.                 }
  359.                 
  360.                 $mixedForwardsArr = self::_mixForwardsArrays($forwards, $disabledForwards, $orderDir);
  361.                 
  362.                 return $this->_showForwardingTemplate($request, $form, $formMass, $formAutomated,
  363.                     $paginator, $mixedForwardsArr, $pagination, $automated, $forwards, $procmailRulesCnt,
  364.                     $localForwarding, $forwardsErrors, $orderDir, $maxForwards);
  365.             }
  366.                         
  367.             // check if limit of forwards is not exceeded
  368.             if((count($forwards) + count(array_unique($addresses)) + $procmailRulesCnt) > $maxForwards) {
  369.                 $this->addFlash('error', $this->translator->trans('Forwarding NOT set - limit of forwards exceeded') . ' (' . $maxForwards . '). ' . $this->translator->trans('Forwards used in sorting') . ': ' . $procmailRulesCnt . '. ' . $this->translator->trans('Forwards used in forwarding') . ': ' . count($forwards));
  370.                 
  371.                 $mixedForwardsArr = self::_mixForwardsArrays($forwards, $disabledForwards, $orderDir);
  372.                 
  373.                 return $this->_showForwardingTemplate($request, $form, $formMass, $formAutomated,
  374.                     $paginator, $mixedForwardsArr, $pagination, $automated, $forwards, $procmailRulesCnt,
  375.                     $localForwarding, $forwardsErrors, $orderDir, $maxForwards);
  376.             }
  377.             
  378.             // check if limit of external forwards is not exceeded
  379.             $externalForwardsCnt = $this->_externalForwardsCount($forwards, $user->getAccount());
  380.             $externalForwardsCurrentCnt = $externalForwardsCnt;
  381.                         
  382.             foreach(array_unique($addresses) as $adr) {
  383.                 if(AccountTools::isEmailExternal($adr, [$user->getAccount()->getUserDomain()])) {
  384.                     $externalForwardsCurrentCnt++;
  385.                 }
  386.             }
  387.             
  388.             if(($externalForwardsCurrentCnt + $procmailRulesExternalCnt) > $maxExternalForwards) {
  389.                 $this->addFlash('error', $this->translator->trans('Forwarding NOT set - limit of external forwards exceeded') . ' (' . $maxExternalForwards . '). ' . $this->translator->trans('External forwards used in sorting') . ': ' . $procmailRulesExternalCnt . '. ' . $this->translator->trans('External forwards used in forwarding') . ': ' . $externalForwardsCnt);
  390.                 
  391.                 $mixedForwardsArr = self::_mixForwardsArrays($forwards, $disabledForwards, $orderDir);
  392.                 
  393.                 return $this->_showForwardingTemplate($request, $form, $formMass, $formAutomated,
  394.                     $paginator, $mixedForwardsArr, $pagination, $automated, $forwards, $procmailRulesCnt,
  395.                     $localForwarding, $forwardsErrors, $orderDir, $maxForwards);
  396.             }
  397.             
  398.             foreach(array_unique($addresses) as $adr) {
  399.                 $adr = trim($adr);    
  400.                 
  401.                 if(Api::addForward($account, $adr)) {
  402.                     $added = true;
  403.                     $affected[] = $adr;
  404.                 }
  405.             }
  406.             
  407.             if($added) {
  408.                 $this->addFlash('notice', $this->translator->trans('Forwarding set'));
  409.                 $this->addFlash('rowsAffected', implode(':', $affected)); // highlight the last one
  410.                 $this->logger->log('New forward(s) added', $request, ['forward' => implode(', ', $affected)]);
  411.             }
  412.             else {
  413.                 $this->addFlash('error', $this->translator->trans('Forwarding NOT set'));
  414.             }
  415.             
  416.             return $this->redirectToRoute('qu_forward');
  417.         }
  418.         elseif($form->isSubmitted() && !$form->isValid()) {
  419.             $errors = $form['address']->getErrors();
  420.             
  421.             // there are errors in address field
  422.             // check which one is problematic
  423.             if(count($errors)) {
  424.                 $checkAccount = new Account();
  425.                 
  426.                 foreach(explode(',', $form->get('address')->getData()) as $usernameDomain) {
  427.                     $nameDomainArr = explode('@', $usernameDomain);
  428.                     if(count($nameDomainArr) == 1) {
  429.                         // no domain
  430.                         $forwardsErrors[] = $this->translator->trans("No domain");
  431.                     }
  432.                     else {
  433.                         // check against validator
  434.                         $checkAccount->setUserName($nameDomainArr[0]);
  435.                         $checkAccount->setUserDomain($nameDomainArr[1]);
  436.                         
  437.                         // allow 1 character usernames
  438.                         if(strlen($nameDomainArr[0]) == 1) {
  439.                             $checkAccount->setUserName($nameDomainArr[0] . $nameDomainArr[0]);
  440.                         }
  441.                         
  442.                         $validationErrors = $validator->validate($checkAccount);
  443.                         
  444.                         // check existance
  445.                         $alreadyExists = false;
  446.                         
  447.                         foreach($forwards as $f) {
  448.                             if($usernameDomain == $f) {
  449.                                 $alreadyExists = true;
  450.                             }
  451.                         }
  452.                         
  453.                         if(count($validationErrors)) {
  454.                             $veStr = '';
  455.                             
  456.                             foreach($validationErrors as $ve) {
  457.                                 $veStr .= $ve->getMessage() . ' | ';
  458.                             }
  459.                             
  460.                             if($alreadyExists) {
  461.                                 $veStr .= $this->translator->trans(' | Already exists');
  462.                             }
  463.                             
  464.                             $forwardsErrors[] = rtrim($veStr, ' | ');
  465.                         }
  466.                         else {
  467.                             if($alreadyExists) {
  468.                                 $forwardsErrors[] = $this->translator->trans("Already exists");
  469.                             }
  470.                             else {
  471.                                 $forwardsErrors[] = "";
  472.                             }
  473.                         }
  474.                     }
  475.                 }
  476.             }
  477.             
  478.             $this->addFlash('error', $this->translator->trans('Forwarding NOT set'));
  479.         }   
  480.         
  481.         $mixedForwardsArr = self::_mixForwardsArrays($forwards, $disabledForwards, $orderDir);
  482.                 
  483.         return $this->_showForwardingTemplate($request, $form, $formMass, $formAutomated,
  484.             $paginator, $mixedForwardsArr, $pagination, $automated, $forwards, $procmailRulesCnt,
  485.             $localForwarding, $forwardsErrors, $orderDir, $maxForwards);
  487.     }
  488.     
  489.     private function _showForwardingTemplate($request, $form, $formMass, $formAutomated,
  490.         $paginator, $mixedForwardsArr, $pagination, $automated, $forwards, $procmailRulesCnt,
  491.         $localForwarding, $forwardsErrors, $orderDir, $maxForwards)
  492.     {
  493.         return $this->render('skins/' . $this->skin . '/q_user/forward.html.twig', [
  494.             'form' => $form->createView(),
  495.             'formMass' => $formMass->createView(),
  496.             'formAutomated' => $formAutomated->createView(),
  497.             'forwards' => $paginator->paginate(
  498.                 $mixedForwardsArr, $request->query->getInt('page', 1), $pagination
  499.                 ),
  500.             'automatedForwards' => $automated,
  501.             'forwardsCount' => count($forwards) + $procmailRulesCnt,
  502.             'localForwarding' => $localForwarding,
  503.             'forwardsErrors' => $forwardsErrors,
  504.             'orderDir' => $orderDir,
  505.             'maxForwards' => $maxForwards,
  506.         ]); 
  507.     }
  508.     /**
  509.      * @Route("/panel/forward/mass", name="qu_forwards_mass")
  510.      */
  511.     public function forwardingMassAction(Request $request) {
  512.         $user = $this->security->getUser();
  513.         $account = $user->getAccount();
  514.         $this->denyAccessUnlessGranted('FORWARD', $account);
  515.         $form = $this->createForm(ForwardsMass::class);
  516.         $form->handleRequest($request);
  517.             
  518.         if($form->isSubmitted() && $form->isValid()) {
  519.             $selected = $request->request->get('forwardMassCheckbox');
  520.             $actionFailed = false;
  521.                 
  522.             foreach($selected as $forward) {
  523.                 if(!Api::deleteForward($account, $forward)) {
  524.                     $actionFailed = true;
  525.                 }
  526.             }
  527.             
  528.             if($actionFailed) {
  529.                 $this->addFlash('error', $this->translator->trans('Forwards NOT deleted'));
  530.                 $this->logger->log('Error while deleting forward(s) (mass action)', $request, ['forward' => implode(', ', $selected)]);
  531.             }
  532.             else {
  533.                 $this->addFlash('notice', $this->translator->trans('All forwards successfuly deleted'));
  534.                 $this->logger->log('Forward(s) deleted (mass action)', $request, ['forward' => implode(', ', $selected)]);
  535.             }
  536.             
  537.             try {
  538.                 $forwards = Api::getForwards($account);
  539.             }
  540.             catch(\Exception $e) {
  541.                 $this->logger->log('Api::getForwardLocal() - exception from API', $request, ['error_code' => $e->getCode(), 'error_message' => $e->getMessage()], 'critical');
  542.                 $this->addFlash('error', $this->translator->trans('Critical error, contact administrator.'));
  543.                 return $this->redirectToRoute('qu_main');
  544.             }
  545.             
  546.             if(count($forwards) == 0) {
  547.                 $this->logger->log('All forwards deleted, local delivery activated', $request);
  548.                 $this->addFlash('notice', $this->translator->trans("You've removed all forwards, local delivery activated"));
  549.             }
  550.         }
  551.         
  552.         return $this->redirectToRoute("qu_forward");
  553.     }
  554.     
  555.     /**
  556.      * @Route("/panel/forward/automated", name="qu_forwards_automated")
  557.      */
  558.     public function automatedForwardingAction(Request $request) {
  559.         $user = $this->security->getUser();
  560.         $account = $user->getAccount();
  561.         $this->denyAccessUnlessGranted('FORWARD', $account);
  562.         $form = $this->createForm(AutomatedForward::class);
  563.         $form->handleRequest($request);
  564.         
  565.         if($form->isSubmitted() && $form->isValid()) {
  566.             $activeFrom = $form->get('activeFrom')->getData();
  567.             $activeFromHour = $form->get('activeFromHour')->getData();
  568.             $activeFromMinute = $form->get('activeFromMinute')->getData();
  569.             
  570.             $activeTo = $form->get('activeTo')->getData();
  571.             $activeToHour = $form->get('activeToHour')->getData();
  572.             $activeToMinute = $form->get('activeToMinute')->getData();
  573.             
  574.             $tsFrom = $activeFrom->getTimestamp() + $activeFromHour * 3600 + $activeFromMinute * 60;
  575.             $tsTo = $activeTo->getTimestamp() + $activeToHour * 3600 + $activeToMinute * 60;
  576.             $address = $form->get('address')->getData();
  577.             $activeOrDisabled = $form->get('settingActiveOrDisabled')->getData();
  578.             $ret = false;
  579.             
  580.             if($activeOrDisabled == 'D') {
  581.                 $ret = Api::addAutomatedForward($account, $address, 0, 0, $tsFrom, $tsTo);
  582.             }
  583.             else {
  584.                 $ret = Api::addAutomatedForward($account, $address, $tsFrom, $tsTo, 0, 0);
  585.             }
  586.             
  587.                         
  588.             if($ret == false) {
  589.                 $this->addFlash('error', $this->translator->trans('Unknown error - automatic forward NOT set'));
  590.                 $this->logger->log('Error while saving automated forward', $request, ['forward' => $address]);
  591.             }
  592.             else {
  593.                 $this->addFlash('notice', $this->translator->trans('Automatic forward successfuly set'));
  594.                 $this->logger->log('Automatic forward set', $request, ['forward' => $address]);
  595.             }
  596.         }
  597.         elseif($form->isSubmitted() && !$form->isValid()) {
  598.             $errors = $form['activeTo']->getErrors();
  599.             $msg = '';
  600.             
  601.             foreach($errors as $e) {
  602.                 $msg .= $e->getMessage();
  603.                 $msg .= ' ';
  604.             }
  605.             
  606.             $this->addFlash('error', $this->translator->trans('Automatic forward NOT set') . ': ' . $msg);
  607.         }
  608.         
  609.         return $this->redirectToRoute("qu_forward");
  610.     }
  611.     
  612.     /**
  613.      * @Route("/panel/forward/edit/{forward}/{page}", defaults={"page"=1}, name="qu_forward_edit")
  614.      */
  615.     public function forwardEdit($forward, Request $request, int $page)
  616.     {
  617.         $user = $this->security->getUser();
  618.         $account = $user->getAccount();
  619.         $this->denyAccessUnlessGranted('FORWARD', $account);
  620.         $form = $this->createForm(ForwardMailEdit::class);
  621.         $form->handleRequest($request);
  622.         
  623.         if(!$form->isSubmitted()) {
  624.             $form->get('address')->setData($forward);
  625.         }
  626.         
  627.         try {
  628.             $forwards = Api::getForwards($account);
  629.         }
  630.         catch(\Exception $e) {
  631.             $this->logger->log('Api::getForwards() - exception from API', $request, ['error_code' => $e->getCode(), 'error_message' => $e->getMessage()], 'critical');
  632.             $this->addFlash('error', $this->translator->trans('Critical error, contact administrator.'));
  633.             return $this->redirectToRoute('qu_main');
  634.         }
  635.         
  636.         if($form->isSubmitted() && $form->isValid()) {
  637.             $alreadyExists = false;
  638.             $loopDetected = false;
  639.             
  640.             if($forward == $form->get('address')->getData()) {
  641.                 $this->addFlash('notice', $this->translator->trans('Forwarding not changed'));
  642.                 return $this->redirectToRoute('qu_forward', ['page' => $page]);
  643.             }
  644.             
  645.             foreach($forwards as $f) {
  646.                 if($form->get('address')->getData() == $f) {
  647.                     $alreadyExists = true;
  648.                 }
  649.             }
  650.             
  651.             if($alreadyExists) {
  652.                 $this->addFlash('error', $this->translator->trans('Forwarding NOT changed - already exists'));
  653.             }
  654.             
  655.             if($form->get('address')->getData() == $user->getEmail()) {
  656.                 $this->addFlash('error', $this->translator->trans('Forwarding NOT set - loop detected'));
  657.                 $loopDetected = true;
  658.             }
  659.             
  660.             // check if limit of external forwards is not exceeded (if edit is from internal to external)
  661.             if(AccountTools::isEmailExternal($form->get('address')->getData(), [$account->getUserDomain()]) &&
  662.                 !AccountTools::isEmailExternal($forward, [$account->getUserDomain()])
  663.                 ) {
  664.                 $maxExternalForwards = $this->_maxExternalForwards($account);
  665.                 
  666.                 if($maxExternalForwards == -1) {
  667.                     $this->addFlash('error', $this->translator->trans('Domain settings not available'));
  668.                     $this->logger->log('Error while getting domain ' . $account->getUserDomain(), $request, ['accountName' => $account->getUsername()]);
  669.                     return $this->redirectToRoute('qp_main');
  670.                 }
  671.                 
  672.                 try {
  673.                     $forwards = Api::getForwards($account);                    
  674.                 }
  675.                 catch(\Exception $e) {
  676.                     $this->logger->log('Api::getForwardLocal() - exception from API', $request, ['error_code' => $e->getCode(), 'error_message' => $e->getMessage()], 'critical');
  677.                     $this->addFlash('error', $this->translator->trans('Critical error, contact administrator.'));
  678.                     return $this->redirectToRoute('qu_main');
  679.                 }
  680.                 
  681.                 $externalForwardsCnt = $this->_externalForwardsCount($forwards, $account);
  682.                 $externalRulesCnt = $this->_numberProcmailRulesEmailExternal($account);
  683.                 
  684.                 if(($externalForwardsCnt + $externalRulesCnt) >= $maxExternalForwards) {
  685.                     $this->addFlash('error', $this->translator->trans('Forwarding NOT changed - limit of maximum external forwards exceeded') . ' ('  . $maxExternalForwards . ')');
  686.                     
  687.                     return $this->render('skins/' . $this->skin . '/q_user/forward_edit.html.twig', [
  688.                         'form' => $form->createView(),
  689.                         'page' => $page,
  690.                     ]);
  691.                 }
  692.             }
  693.             
  694.             if(!$alreadyExists && !$loopDetected) {
  695.                 if(Api::addForward($account, $form->get('address')->getData())) {
  696.                     if(!Api::deleteForward($account, $forward)) {
  697.                         $this->logger->log('error while deleting old forward', $request, ['forward' => urldecode($forward)]);
  698.                         $this->addFlash('error', $this->translator->trans('Forward NOT deleted'));
  699.                     }
  700.                     
  701.                     $this->logger->log('Forward edited', $request, ['forwardOld' => urldecode($forward), 'forwardNew' => $form->get('address')->getData()]);
  702.                     $this->addFlash('notice', $this->translator->trans('Forwarding changed'));
  703.                     $this->addFlash('rowsAffected', $form->get('address')->getData());
  704.                     return $this->redirectToRoute('qu_forward', ['page' => $page]);
  705.                 }
  706.                 else {
  707.                     $this->addFlash('error', $this->translator->trans('Forwarding NOT changed'));
  708.                 }
  709.             }
  710.         }
  711.         elseif($form->isSubmitted() && !$form->isValid()){
  712.             $this->addFlash('error', $this->translator->trans('Forwarding NOT changed'));
  713.         }
  714.         
  715.         return $this->render('skins/' . $this->skin . '/q_user/forward_edit.html.twig', [
  716.             'form' => $form->createView(),
  717.             'page' => $page,
  718.         ]);
  719.     }
  720.     
  721.     /**
  722.      * @Route("/panel/forward/del/{forward}", name="qu_forward_del")
  723.      */
  724.     public function forwardDel($forward, Request $request)
  725.     {
  726.         $user = $this->security->getUser();
  727.         $account = $user->getAccount();
  728.         $this->denyAccessUnlessGranted('FORWARD', $account);
  729.         
  730.         // first enable it to remove from disabled forwards table
  731.         Api::enableForward($account, $forward);
  732.         
  733.         if(Api::deleteForward($account, $forward)) {
  734.             $this->logger->log('Forward deleted', $request, ['forward' => urldecode($forward)]);
  735.             $this->addFlash('notice', $this->translator->trans('Forward deleted'));
  736.         }
  737.         else {
  738.             $this->logger->log('Error while deleting forward', $request, ['forward' => urldecode($forward)]);
  739.             $this->addFlash('error', $this->translator->trans('Forward NOT deleted'));
  740.         }
  741.         
  742.         if(!Api::deleteAutomatedForwardByAddress($account, $forward)) {
  743.             $this->logger->log('Error while deleting automated forwards', $request, ['forward' => urldecode($forward)]);
  744.         }
  745.         
  746.         try {
  747.             $forwards = Api::getForwards($account);
  748.         }
  749.         catch(\Exception $e) {
  750.             $this->logger->log('Api::getForwardLocal() - exception from API', $request, ['error_code' => $e->getCode(), 'error_message' => $e->getMessage()], 'critical');
  751.             $this->addFlash('error', $this->translator->trans('Critical error, contact administrator.'));
  752.             return $this->redirectToRoute('qu_main');
  753.         }
  754.         
  755.         if(count($forwards) == 0) {
  756.             $this->logger->log('Last forward deleted, local delivery activated', $request);
  757.             $this->addFlash('notice', $this->translator->trans("You've removed last existing forward, local delivery activated"));
  758.         }
  759.         
  760.         return $this->redirectToRoute("qu_forward");
  761.     }
  762.     
  763.     /**
  764.      * @Route("/panel/automatedforward/del/{id}", name="qu_automatedforward_del")
  765.      */
  766.     public function automatedForwardDel($id, Request $request)
  767.     {
  768.         $user = $this->security->getUser();
  769.         $account = $user->getAccount();
  770.         $this->denyAccessUnlessGranted('FORWARD', $account);
  771.         
  772.         if(Api::deleteAutomatedForward($account, $id)) {
  773.             $this->logger->log('Automated forward rule deleted', $request, ['id' => $id]);
  774.             $this->addFlash('notice', $this->translator->trans('Automated forward rule deleted'));
  775.         }
  776.         else {
  777.             $this->logger->log('Error while deleting automated forward', $request, ['id' => $id]);
  778.             $this->addFlash('error', $this->translator->trans('Automated forward rule NOT deleted'));
  779.         }
  780.         
  781.         return $this->redirectToRoute("qu_forward");
  782.     }
  783.     
  784.     /**
  785.      * @Route("/panel/forward/disable/{forward}", name="qu_forward_disable")
  786.      */
  787.     public function forwardDisable($forward, Request $request)
  788.     {
  789.         $user = $this->security->getUser();
  790.         $account = $user->getAccount();
  791.         $this->denyAccessUnlessGranted('FORWARD', $account);
  792.         
  793.         if(Api::disableForward($account, $forward)) {
  794.             $this->logger->log('Forward disabled', $request, ['forward' => urldecode($forward)]);
  795.             $this->addFlash('notice', $this->translator->trans('Forward disabled'));
  796.         }
  797.         else {
  798.             $this->logger->log('Error while disabling forward', $request, ['forward' => urldecode($forward)]);
  799.             $this->addFlash('error', $this->translator->trans('Forward NOT disabled'));
  800.         }
  801.         
  802.         try {
  803.             $forwards = Api::getForwards($account);
  804.         }
  805.         catch(\Exception $e) {
  806.             $this->logger->log('Api::getForwardsl() - exception from API', $request, ['error_code' => $e->getCode(), 'error_message' => $e->getMessage()], 'critical');
  807.             $this->addFlash('error', $this->translator->trans('Critical error, contact administrator.'));
  808.             return $this->redirectToRoute('qu_main');
  809.         }
  810.         
  811.         if(count($forwards) == 0) {
  812.             $this->logger->log('Last forward disabled, local delivery activated', $request);
  813.             $this->addFlash('notice', $this->translator->trans("You've removed last existing forward, local delivery activated"));
  814.         }
  815.         
  816.         return $this->redirectToRoute("qu_forward");
  817.     }
  818.     
  819.     /**
  820.      * @Route("/panel/forward/enable/{forward}", name="qu_forward_enable")
  821.      */
  822.     public function forwardEnable($forward, Request $request)
  823.     {
  824.         $user = $this->security->getUser();
  825.         $account = $user->getAccount();
  826.         $this->denyAccessUnlessGranted('FORWARD', $account);
  827.         
  828.         // check limit
  829.         
  830.         try {
  831.             $forwards = Api::getForwards($account);
  832.         }
  833.         catch(\Exception $e) {
  834.             $this->logger->log('Api::forwards() - exception from API', $request, ['error_code' => $e->getCode(), 'error_message' => $e->getMessage()], 'critical');
  835.             $this->addFlash('error', $this->translator->trans('Critical error, contact administrator.'));
  836.             return $this->redirectToRoute('qu_main');
  837.         }
  838.         
  839.         $maxForwards = $this->_maxForwards($account);
  840.         $maxExternalForwards = $this->_maxExternalForwards($account);
  841.         
  842.         if(($maxForwards == -1) || ($maxExternalForwards == -1)) {
  843.             $this->addFlash('error', $this->translator->trans('Domain settings not available'));
  844.             $this->logger->log('Error while getting domain ' . $account->getUserDomain(), $request, ['accountName' => $account->getUsername()]);
  845.             return $this->redirectToRoute('qp_main');
  846.         }
  847.         
  848.         $procmailRulesCnt = $this->_numberProcmailRulesEmail($account);
  849.         
  850.         if((count($forwards) + 1 + $procmailRulesCnt) > $maxForwards) {
  851.             $this->addFlash('error', $this->translator->trans('Forward NOT enabled - limit of forwards exceeded') . ' (' . $maxForwards . '). ' . $this->translator->trans('Forwards used in sorting') . ': ' . $procmailRulesCnt . '. ' . $this->translator->trans('Forwards used in forwarding') . ': ' . count($forwards));
  852.             return $this->redirectToRoute('qu_forward');
  853.         }
  854.         
  855.         if(Api::enableForward($account, $forward)) {
  856.             $this->logger->log('Forward enabled', $request, ['forward' => urldecode($forward)]);
  857.             $this->addFlash('notice', $this->translator->trans('Forward enabled'));
  858.         }
  859.         else {
  860.             $this->logger->log('Error while enabling forward', $request, ['forward' => urldecode($forward)]);
  861.             $this->addFlash('error', $this->translator->trans('Forward NOT enabled'));
  862.         }
  863.         
  864.         return $this->redirectToRoute("qu_forward");
  865.     }
  866.     
  867.     /**
  868.      * @Route("/panel/forward/localon", name="qu_forward_local_on")
  869.      */
  870.     public function forwardLocalOn(Request $request)
  871.     {
  872.         $user = $this->security->getUser();
  873.         $account = $user->getAccount();
  874.         $this->denyAccessUnlessGranted('FORWARD', $account);
  875.         
  876.         if(Api::forwardLocal($account, true)) {
  877.             $this->logger->log('Local forward activated', $request);
  878.             $this->addFlash('notice', $this->translator->trans('Local forward activated'));
  879.         }
  880.         else {
  881.             $this->addFlash('error', $this->translator->trans('Local forward NOT activated'));
  882.         }
  883.         
  884.         // redirect to spamassassin main page or to a specific subpage
  885.         $referer = $request->headers->get('referer');
  886.         
  887.         if(strlen($referer))
  888.             return $this->redirect($referer);
  889.             
  890.         return $this->redirectToRoute("qu_forward");
  891.     }
  892.     
  893.     /**
  894.      * @Route("/panel/forward/localoff", name="qu_forward_local_off")
  895.      */
  896.     public function forwardLocalOff(Request $request)
  897.     {
  898.         $user = $this->security->getUser();
  899.         $account = $user->getAccount();
  900.         $this->denyAccessUnlessGranted('FORWARD', $account);
  901.         
  902.         if(Api::forwardLocal($account, false)) {
  903.             $this->logger->log('Local forward desactivated', $request);
  904.             $this->addFlash('notice', $this->translator->trans('Local forward desactivated'));
  905.         }
  906.         else {
  907.             $this->addFlash('error', $this->translator->trans('Local forward NOT desactivated'));
  908.         }
  909.         
  910.         return $this->redirectToRoute("qu_forward");
  911.     }
  912.     
  913.     /**
  914.      * @Route("/panel/autoresponder", name="qu_autoresponder")
  915.      */
  916.     public function autoresponder(Request $request)
  917.     {
  918.         $areAdvancedRulesAllowed = false;
  920.         if(isset($_SERVER['APP_ADV_AUTORESP_ALLOWED']) && ($_SERVER['APP_ADV_AUTORESP_ALLOWED'] == 'true')) {
  921.             $areAdvancedRulesAllowed = true;
  922.         }
  924.         $user = $this->security->getUser();
  925.         $account = $user->getAccount();
  926.         $this->denyAccessUnlessGranted('AUTORESPONDER', $account);
  927.         $autoresponderStatus = '';
  928.         $autoresponder = $this->_getAutoresponderForUser($account, $autoresponderStatus);
  930.         $advancedRulesNumber = 0;
  932.         if($areAdvancedRulesAllowed) {
  933.             if($autoresponderStatus != 'no') {
  934.                 $rules = Api::getAutoresponderAdvRules($autoresponder->getId(), false);
  935.                 $advancedRulesNumber = count($rules);
  936.             }
  937.         }
  939.         if($autoresponderStatus != 'no') {
  940.             $autorespFromRule = Api::isAutoresponderFromRule($autoresponder->getUserName(), $autoresponder->getUserDomain());
  941.         }
  942.         else {
  943.             $autorespFromRule = false;
  944.         }
  945.         
  946.         
  947.         $form = $this->createForm(AutoresponderForm::class, $autoresponder);
  948.         $form->handleRequest($request);
  949.         $needSetOwnPrefix = false; // do we need to show user's own subject input field
  950.                 
  951.         if(!$form->isSubmitted()) {
  952.             if($autoresponderStatus == 'no') {
  953.                 if(isset($_SERVER['APP_AUTOOPT_TIMELIMIT'])) {
  954.                     $timeLimit = (int)$_SERVER['APP_AUTOOPT_TIMELIMIT'];
  955.                 }
  956.                 else {
  957.                     $timeLimit = 7 * 24 * 3600; // tydzień
  958.                 }
  960.                 $timeLimitArr = Autoresponder::timelimitSplit($timeLimit);
  961.                 $form->get('periodWeeks')->setData($timeLimitArr['weeks']);
  962.                 $form->get('periodDays')->setData($timeLimitArr['days']);
  963.                 $form->get('periodHours')->setData($timeLimitArr['hours']);
  964.                 $form->get('messagesLimit')->setData(isset($_SERVER['APP_AUTOOPT_MSGLIMIT']) ? $_SERVER['APP_AUTOOPT_MSGLIMIT'] : 1);
  965.                 $form->get('copyLines')->setData(isset($_SERVER['APP_AUTOOPT_NUMLINES']) ? $_SERVER['APP_AUTOOPT_NUMLINES'] : 5);
  966.                 
  967.                 if(isset($_SERVER['APP_AUTOOPT_SUBJECT_PREFIX'])) {
  968.                     // if it doesn't end with space, we need to add it to have a match with the form
  969.                     if(substr($_SERVER['APP_AUTOOPT_SUBJECT_PREFIX'], -1) == ' ') {
  970.                         $prefixToSet = $_SERVER['APP_AUTOOPT_SUBJECT_PREFIX'];
  971.                     }
  972.                     else {
  973.                         $prefixToSet = $_SERVER['APP_AUTOOPT_SUBJECT_PREFIX'] . ' ';
  974.                     }
  975.                     
  976.                     $form->get('subject')->setData($prefixToSet);
  977.                 }
  978.                 
  979.             }
  980.             
  981.             // dd($autoresponder);
  983.             // user's subject and prefix are kept in the same field in GUI (ownSubject) but not in Autoresponder object
  984.             // own subject is in Autoresponder::ownSubject field, own prefix in Autoresponder::subject
  985.             //
  986.             // if subject is empty it means user has his own subject - we have to manually change state of the select in GUI
  987.             if($autoresponder->getSubject() == '' && strlen($autoresponder->getOwnSubject()) > 0) {
  988.                 $form->get('subject')->setData('own');
  989.                 $needSetOwnPrefix = true;
  990.             }
  991.             elseif($autoresponder->getSubject() != '') {
  992.                 $needSetOwnPrefix = true;
  993.                 
  994.                 // if user has his own prefix we have to detect it and manually change state of the select in GUI
  995.                 // so if the object's subject is not one of the choices it must be own prefix 
  996.                 foreach(AutoresponderForm::getSubjectChoices() as $v) {
  997.                     if($autoresponder->getSubject() == $this->translator->trans($v)) {
  998.                         $needSetOwnPrefix = false;
  999.                         break;
  1000.                     }
  1001.                 }
  1002.                 
  1003.                 if($needSetOwnPrefix) {
  1004.                     $form->get('ownSubject')->setData($autoresponder->getSubject());
  1005.                     $form->get('subject')->setData('ownPrefix');
  1006.                 }
  1007.             }
  1008.         }
  1009.         
  1010.         if($form->isSubmitted() && $form->isValid()) {
  1011.             $autoresponder->setUserName($account->getUserName());
  1012.             $autoresponder->setUserDomain($account->getUserDomain());
  1013.             
  1014.             if(Api::addAutoresponder($autoresponder)) {
  1015.                 if($autoresponderStatus == 'no') {
  1016.                     $this->logger->log('New autoresponder added', $request);
  1017.                 }
  1018.                 else {
  1019.                     $this->logger->log('Autoresponder changed', $request);
  1020.                 }
  1021.                 $this->addFlash('notice', $this->translator->trans('Autoresponder set'));
  1022.                 
  1023.                 if($autoresponder->getActivationType() == 'auto') {
  1024.                     $now = new \DateTime("now");
  1025.                     //$now->setTime(0, 0, 0);
  1026.                                         
  1027.                     if(($autoresponderStatus == 'inactive' || $autoresponderStatus == 'no') && 
  1028.                         ($autoresponder->getActiveFromWithMinutes() <= $now) && ($autoresponder->getActiveToWithMinutes() >= $now)) {
  1029.                         return $this->redirectToRoute('qu_autoresponder_activate');
  1030.                     }
  1031.                     
  1032.                     if(($autoresponderStatus == 'active') &&
  1033.                         (($autoresponder->getActiveFromWithMinutes() > $now) || ($autoresponder->getActiveToWithMinutes() < $now))) {
  1034.                         return $this->redirectToRoute('qu_autoresponder_desactivate');
  1035.                     }
  1036.                 }
  1037.                 
  1038.                 return $this->redirectToRoute('qu_autoresponder');
  1039.             }
  1040.             else {
  1041.                 $this->addFlash('error', $this->translator->trans('Autoresponder NOT set'));
  1042.             }
  1043.             
  1044.             return $this->redirectToRoute('qu_autoresponder');
  1045.         }
  1046.         elseif($form->isSubmitted() && !$form->isValid()){
  1047.             if(count($form['ownSubject']->getErrors()) > 0) {
  1048.                 $needSetOwnPrefix = true;
  1049.             }
  1051.             $this->addFlash('error', $this->translator->trans('Autoresponder NOT set'));
  1052.         }
  1053.         
  1054.         return $this->render('skins/' . $this->skin . '/q_user/autoresponder.html.twig', [
  1055.             'form' => $form->createView(),
  1056.             'autoresponderStatus' => $autoresponderStatus,
  1057.             'autoresponder' => $autoresponder,
  1058.             'setOwnPrefix' => $needSetOwnPrefix,
  1059.             'autoresponderFromRule' => $autorespFromRule,
  1060.             'advancedRulesNumber' => $advancedRulesNumber,
  1061.         ]);
  1062.         
  1063.     }
  1064.     
  1065.     /**
  1066.      * @Route("/panel/autoresponder/activate", name="qu_autoresponder_activate")
  1067.      */
  1068.     public function autoresponderActivate(Request $request)
  1069.     {
  1070.         $user = $this->security->getUser();
  1071.         $account = $user->getAccount();
  1072.         $this->denyAccessUnlessGranted('AUTORESPONDER', $account);
  1073.                 
  1074.         try {
  1075.             $autoresponder = Api::getAutoresponder(Autoresponder::NOT_ACTIVE_PREFIX . $account->getUserName(),
  1076.                 Autoresponder::NOT_ACTIVE_PREFIX . $account->getUserDomain());
  1077.         }
  1078.         catch(\Exception $e) {
  1079.             $this->logger->log('Trying to set active not existing autoresponder', $request);
  1080.             $this->addFlash('error', $this->translator->trans('Autoresponder NOT set active'));
  1081.             return $this->redirectToRoute('qu_autoresponder');
  1082.         }
  1084.         try {
  1085.             Api::activateAutoresponder($autoresponder);
  1086.             $this->logger->log('Autoresponder activated', $request);
  1087.         }
  1088.         catch(\Exception $e) {
  1089.             $this->logger->log('Error while setting autoresponder active', $request);
  1090.             $this->addFlash('error', $this->translator->trans('Autoresponder NOT set active'));
  1091.             return $this->redirectToRoute('qu_autoresponder');
  1092.         }
  1093.         
  1094.         $this->addFlash('notice', $this->translator->trans('Autoresponder set active'));
  1095.         return $this->redirectToRoute('qu_autoresponder');
  1096.     }
  1098.     /**
  1099.      * @Route("/panel/autoresponder/desactivate", name="qu_autoresponder_desactivate")
  1100.      */
  1101.     public function autoresponderDesactivate(Request $request)
  1102.     {
  1103.         $user = $this->security->getUser();
  1104.         $account = $user->getAccount();
  1105.         $this->denyAccessUnlessGranted('AUTORESPONDER', $account);
  1106.         
  1107.         try {
  1108.             $autoresponder = Api::getAutoresponder($account->getUserName(), $account->getUserDomain());
  1109.         }
  1110.         catch(\Exception $e) {
  1111.             $this->logger->log('Trying to set inactive not existing autoresponder', $request);
  1112.             $this->addFlash('error', $this->translator->trans('Autoresponder NOT set inactive'));
  1113.             return $this->redirectToRoute('qu_autoresponder');
  1114.         }
  1115.         
  1116.         try {
  1117.             Api::desactivateAutoresponder($autoresponder);
  1118.             $this->logger->log('Autoresponder desactivated', $request);
  1119.         }
  1120.         catch(\Exception $e) {
  1121.             $this->logger->log('Error while setting autoresponder inactive', $request);
  1122.             $this->addFlash('error', $this->translator->trans('Autoresponder NOT set inactive'));
  1123.             return $this->redirectToRoute('qu_autoresponder');
  1124.         }
  1125.         
  1126.         $this->addFlash('notice', $this->translator->trans('Autoresponder set inactive'));
  1127.         return $this->redirectToRoute('qu_autoresponder');
  1128.     }
  1129.     
  1130.     /**
  1131.      * @Route("/panel/autoresponder/del", name="qu_autoresponder_del")
  1132.      */
  1133.     public function autoresponderDelete(Request $request)
  1134.     {
  1135.         $user = $this->security->getUser();
  1136.         $account = $user->getAccount();
  1137.         $this->denyAccessUnlessGranted('AUTORESPONDER', $account);
  1138.         $autoresponderStatus = 'no';
  1139.         
  1140.         $autoresponder = $this->_getAutoresponderForUser($account, $autoresponderStatus);
  1141.         
  1142.         if($autoresponderStatus == 'active') {
  1143.             // we should first make the autoresponder inactive
  1144.         
  1145.             if(!Api::desactivateAutoresponder($autoresponder)) {
  1146.                 $this->logger->log('Error while trying to delete autoresponder - deactivation failed', $request, [], 'critical');
  1147.                 $this->addFlash('error', $this->translator->trans('Autoresponder NOT deleted'));
  1148.                 return $this->redirectToRoute('qu_autoresponder');
  1149.             }
  1150.         }
  1151.          
  1152.         if($autoresponderStatus != 'no') {
  1153.             if(Api::deleteAutoresponder($account)) {
  1154.                 $this->logger->log('Autoresponder deleted', $request);
  1156.                 // delete also advanced rules
  1157.                 Api::deleteAutoresponderAdvRulesForUser($account);
  1158.                 // delete copy of the autoresponder
  1159.                 Api::deleteAutoresponderCopy($account);
  1161.                 $this->addFlash('notice', $this->translator->trans('Autoresponder deleted'));
  1162.             }
  1163.             else {
  1164.                 $this->logger->log('Error while trying to delete autoresponder', $request, [], 'critical');
  1165.                 $this->addFlash('error', $this->translator->trans('Autoresponder NOT deleted'));
  1166.             }
  1167.         }
  1168.         else {
  1169.             $this->logger->log('Error while trying to delete not existing autoresponder', $request, [], 'critical');
  1170.             $this->addFlash('error', $this->translator->trans('Autoresponder NOT deleted'));
  1171.         }
  1172.         
  1173.         return $this->redirectToRoute('qu_autoresponder');
  1174.     }
  1176.     /**
  1177.      * @Route("/panel/autoresponder/recipients", name="qu_autoresponder_recipients")
  1178.      */
  1179.     public function autoresponderRecipients(Request $request)
  1180.     {
  1181.         $user = $this->security->getUser();
  1182.         $account = $user->getAccount();
  1183.         $this->denyAccessUnlessGranted('AUTORESPONDER', $account);
  1184.         
  1185.         $autoresponderStatus = '';
  1186.         $autoresponder = $this->_getAutoresponderForUser($account, $autoresponderStatus);
  1187.         
  1188.         $recipients = [];
  1189.             
  1190.         if($autoresponderStatus != 'no') {
  1191.             try {
  1192.                 $recipients = Api::getAutoresponderRecipients($autoresponder->getId(), $autoresponder->timeLimit());
  1193.             }
  1194.             catch(\Exception $e) {
  1195.                 $this->logger->log('Error while getting autoresponder recipients', $request);
  1196.                 $this->addFlash('error', $this->translator->trans('Error while loading autoresponder recipients'));
  1197.                 return $this->redirectToRoute('qu_autoresponder');
  1198.             }
  1199.         }
  1200.         
  1201.         return $this->render('skins/' . $this->skin . '/q_user/autoresponder_recipients.html.twig', [
  1202.             'recipients' => $recipients,
  1203.             'autoresponder' => $autoresponder,
  1204.         ]);
  1205.     }
  1206.     
  1207.     /**
  1208.      * @Route("/panel/autoresponder/delrcpt/{rcpt}", name="qu_autoresponder_del_rcpt")
  1209.      */
  1210.     public function autoresponderDeleteRecipient(String $rcpt, Request $request)
  1211.     {
  1212.         $user = $this->security->getUser();
  1213.         $account = $user->getAccount();
  1214.         $this->denyAccessUnlessGranted('AUTORESPONDER', $account);
  1215.         $autoresponderStatus = '';
  1216.         $autoresponder = $this->_getAutoresponderForUser($account, $autoresponderStatus);
  1217.         
  1218.         if($autoresponderStatus == 'no') {
  1219.             $this->logger->log('Error while getting autoresponder for deleting recipient', $request, ['rcpt' => $rcpt]);
  1220.             $this->addFlash('error', $this->translator->trans('Error while loading autoresponder'));
  1221.             return $this->redirectToRoute('qu_autoresponder');
  1222.         }
  1223.         
  1224.         if(Api::deleteAutoresponderRecipients($autoresponder->getId(), $rcpt)) {
  1225.             $this->logger->log('Autoresponder recipient deleted', $request, ['rcpt' => $rcpt]);
  1226.             $this->addFlash('notice', $this->translator->trans('Autoresponder\'s recipient deleted'));
  1227.         }
  1228.         else {
  1229.             $this->logger->log('Error while trying to delete autoresponder\'s recipient', $request, ['rcpt' => $rcpt], 'critical');
  1230.             $this->addFlash('error', $this->translator->trans('Autoresponder\'s recipient NOT deleted'));
  1231.         }
  1232.         
  1233.         return $this->redirectToRoute('qu_autoresponder_recipients');
  1234.     }
  1235.     
  1236.     /**
  1237.      * @Route("/panel/autoresponder/advrules", name="qu_autoresponder_adv_rules")
  1238.      */
  1239.     public function autoresponderAdvancedRules(Request $request)
  1240.     {
  1241.         if(!isset($_SERVER['APP_ADV_AUTORESP_ALLOWED'])) {
  1242.             exit;
  1243.         }
  1245.         if(isset($_SERVER['APP_ADV_AUTORESP_ALLOWED']) && ($_SERVER['APP_ADV_AUTORESP_ALLOWED'] == 'false')) {
  1246.             exit;
  1247.         }
  1248.         
  1249.         $user = $this->security->getUser();
  1250.         $account = $user->getAccount();
  1251.         $this->denyAccessUnlessGranted('AUTORESPONDER', $account);
  1253.         $autoresponderStatus = '';
  1254.         $autoresponder = $this->_getAutoresponderForUser($account, $autoresponderStatus);
  1256.         if($autoresponderStatus == 'no') {
  1257.             return $this->redirectToRoute('qu_autoresponder');
  1258.         }
  1259.         
  1260.         $needSetOwnPrefix = false; // do we need to show user's own subject input field
  1261.         $needSetOwnPrefixes = [];
  1263.         $form = $this->createForm(AutoresponderAdvRulesForm::class, $autoresponder);
  1264.         $form->handleRequest($request);                
  1266.         if(!$form->isSubmitted()) {
  1267.             $rules = Api::getAutoresponderAdvRules($autoresponder->getId(), false);
  1268.             $form->get('advRules')->setData($rules);
  1270.             // now own subject / own prefix for each rule
  1272.             foreach($rules as $rIdx => $r) {
  1273.                 // user's subject and prefix are kept in the same field in GUI (ownSubject) but not in Autoresponder object
  1274.                 // own subject is in Autoresponder::ownSubject field, own prefix in Autoresponder::subject
  1275.                 //
  1276.                 // if subject is empty it means user has his own subject - we have to manually change state of the select in GUI
  1277.                 if($r['subject'] == '' && strlen($r['ownSubject']) > 0) {
  1278.                     foreach($form->get('advRules')->all() as $childName => $childForm) {
  1279.                         if($childName == $rIdx) {
  1280.                             $childForm->get('subject')->setData('own');
  1281.                         }    
  1282.                     }
  1283.                     
  1284.                     $needSetOwnPrefix = true;
  1285.                 }
  1286.                 elseif($r['subject'] != '') {
  1287.                     $needSetOwnPrefix = true;
  1288.                     
  1289.                     // if user has his own prefix we have to detect it and manually change state of the select in GUI
  1290.                     // so if the object's subject is not one of the choices it must be own prefix 
  1291.                     foreach(AutoresponderForm::getSubjectChoices() as $v) {
  1292.                         if($r['subject'] == $this->translator->trans($v)) {
  1293.                             $needSetOwnPrefix = false;
  1294.                             break;
  1295.                         }
  1296.                     }
  1298.                     if($needSetOwnPrefix) {
  1299.                         foreach($form->get('advRules')->all() as $childName => $childForm) {
  1300.                             if($childName == $rIdx) {
  1301.                                 $childForm->get('ownSubject')->setData($r['subject']);
  1302.                                 $childForm->get('subject')->setData('ownPrefix');
  1303.                             }    
  1304.                         }
  1305.                     }
  1306.                 }
  1308.                 $needSetOwnPrefixes[$rIdx] = $needSetOwnPrefix;
  1309.             }
  1310.         }
  1311.         else {
  1312.             if($form->isValid()) {
  1313.                 $autoresponder->setUserName($account->getUserName());
  1314.                 $autoresponder->setUserDomain($account->getUserDomain());
  1316.                 // delete rules that are no longer in form
  1318.                 $formData = $form->get('advRules')->getData();
  1319.                 $formDataIds = [];
  1320.                 
  1321.                 foreach($formData as $row) {
  1322.                     $formDataIds[] = $row['id'];
  1323.                 }
  1325.                 $rules = Api::getAutoresponderAdvRules($autoresponder->getId(), false);
  1327.                 foreach($rules as $rule) {
  1328.                     if(!in_array($rule['id'], $formDataIds)) {
  1329.                         Api::deleteAutoresponderRule($rule['id']);
  1330.                     }
  1331.                 }
  1333.                 if(Api::addAutoresponderRules($autoresponder, $form->get('advRules')->getData())) {
  1334.                     if($autoresponderStatus == 'no') {
  1335.                         $this->logger->log('New autoresponder rule(s) added', $request);
  1336.                     }
  1337.                     else {
  1338.                         $this->logger->log('Autoresponder rule(s) changed', $request);
  1339.                     }
  1341.                     $this->addFlash('notice', $this->translator->trans('Autoresponder rules set'));
  1343.                     // check if there is no conflict in rules
  1344.                     $rules = Api::getAutoresponderAdvRules($autoresponder->getId(), false);
  1346.                     $activationTimeArr = [];
  1347.                     
  1348.                     for($i = 0; $i < count($rules); $i++) {
  1349.                         if($rules[$i]['activeOnceConsumed']) {
  1350.                             continue;
  1351.                         }
  1353.                         $activationTime = $rules[$i]['activationHour'] * 60 + $rules[$i]['activationMinute'];
  1355.                         foreach($activationTimeArr as $k => $v) {
  1356.                             if($activationTime == $v) {
  1357.                                 // time is the same
  1358.                                 // now check the date
  1360.                                 $theSameDay = false;
  1362.                                 if(!$rules[$i]['activeOnce']) {
  1363.                                     if($rules[$k]['activeOnce']) {
  1364.                                         $dayOfWeekNumeric = $rules[$k]['activeOnceDate']->format('w');
  1365.                                         // dd($dayOfWeekNumeric);
  1367.                                         
  1369.                                         $activeDayVar = 'activeDay' . $dayOfWeekNumeric;
  1371.                                         if($rules[$i][$activeDayVar] == true) {
  1372.                                             $theSameDay = true;
  1373.                                         }
  1374.                                     }
  1375.                                     else {
  1376.                                         for($j = 1; $j < 8; $j++) {
  1377.                                             $activeDayVar = 'activeDay' . $j;
  1378.         
  1379.                                             if(($rules[$i][$activeDayVar] == true) && ($rules[$k][$activeDayVar] == true)) {
  1380.                                                 $theSameDay = true;
  1381.                                             }
  1382.                                         }
  1383.                                     }
  1384.                                 }
  1385.                                 else {
  1386.                                     // previous rule is activeOnce, checking one day of week
  1387.                                     if($rules[$k]['activeOnce']) {
  1388.                                         // is the same date?
  1389.                                         if ($rules[$i]['activeOnceDate']->format('Y-m-d') === $rules[$k]['activeOnceDate']->format('Y-m-d')) {
  1390.                                             $theSameDay = true;
  1391.                                         }
  1392.                                     }
  1393.                                     else { // previous rule is not activeOnce
  1395.                                         $dayOfWeekNumeric = $rules[$i]['activeOnceDate']->format('w');
  1396.                                         $activeDayVar = 'activeDay' . $dayOfWeekNumeric;
  1398.                                         if($rules[$k][$activeDayVar] == true) {
  1399.                                             $theSameDay = true;
  1400.                                         }
  1401.                                     }
  1402.                                 }
  1404.                                 if($theSameDay) {
  1405.                                     $this->addFlash('error', $this->translator->trans('Warning! Rules conflict. Rule number') . ' ' . ($i + 1) . ' ' . $this->translator->trans('with rule number') . ' ' . ($k + 1));
  1406.                                     break;
  1407.                                 }                                
  1408.                             }
  1409.                         
  1411.                         }
  1413.                         $activationTimeArr[$i] = $activationTime;
  1414.                     }
  1415.                     
  1416.                     return $this->redirectToRoute('qu_autoresponder_adv_rules');
  1417.                 }
  1418.                 else {
  1419.                     $this->addFlash('error', $this->translator->trans('Autoresponder NOT set'));
  1420.                 }
  1421.                 
  1422.                 return $this->redirectToRoute('qu_autoresponder_adv_rules');
  1423.             }
  1424.             else {
  1425.                 echo "not valid"; exit;
  1426.             }
  1427.             
  1429.         }
  1430.         
  1431.         return $this->render('skins/' . $this->skin . '/q_user/autoresponder_adv_rules.html.twig', [
  1432.             'form' => $form->createView(),
  1433.             'autoresponderStatus' => $autoresponderStatus,
  1434.             'autoresponder' => $autoresponder,
  1435.             'setOwnPrefixes' => $needSetOwnPrefixes,
  1436.             // 'rules' -> $rules,
  1437.         ]);
  1438.         
  1439.     }
  1442.     /**
  1443.      * @Route("/panel/spamassassin", name="qu_sa")
  1444.      */
  1445.     public function spamAssassin(Request $request)
  1446.     {        
  1447.         $user = $this->security->getUser();
  1448.         $account = $user->getAccount();
  1449.         $this->denyAccessUnlessGranted('SPAMASSASSIN', $account);
  1451.         $antispamOn = $this->_isAntispamOn($account);
  1452.         
  1453.         return $this->render('skins/' . $this->skin . '/q_user/spamassassin.html.twig', [
  1454.             'antispamOn' => $antispamOn,
  1455.         ]);
  1456.         
  1457.     }
  1459.     /**
  1460.      * @Route("/panel/spamassassin/change_activity", name="qu_sa_change_activity")
  1461.      */
  1462.     public function spamAssassinChangeActivity(Request $request)
  1463.     {
  1464.         $user = $this->security->getUser();
  1465.         $account = $user->getAccount();
  1466.         $this->denyAccessUnlessGranted('SPAMASSASSIN', $account);
  1467.         
  1468.         if(Api::getSAProtection($account)) {
  1469.             Api::saProtection($account, false);
  1470.             $this->logger->log('Antispam protection desactivated', $request);
  1471.         }
  1472.         else {
  1473.             Api::saProtection($account, true);
  1474.             $this->logger->log('Antispam protection activated', $request);
  1475.         }
  1476.         
  1477.         // redirect to spamassassin main page or to a specific subpage
  1478.         $referer = $request->headers->get('referer');
  1479.         
  1480.         if(strlen($referer))
  1481.             return $this->redirect($referer);
  1482.         
  1483.         return $this->redirectToRoute('qu_sa');
  1484.     }
  1485.     
  1486.     /**
  1487.      * @Route("/panel/spamassassin/score", name="qu_sa_score")
  1488.      */
  1489.     public function spamAssassinScore(Request $request)
  1490.     {
  1491.         $user = $this->security->getUser();
  1492.         $account = $user->getAccount();
  1493.         $this->denyAccessUnlessGranted('SPAMASSASSIN', $account);
  1494.         
  1495.         $antispamOn = $this->_isAntispamOn($account);
  1496.         
  1497.         $form = $this->createForm(SpamAssassinScore::class);
  1498.         $form->handleRequest($request);
  1499.         
  1500.         $saPref = null;
  1501.         $qsPref = null;
  1502.         
  1503.         try {
  1504.             foreach(Api::getSAPrefVal($account, 'required_score') as $pref) {
  1505.                 $saPref = $pref;
  1506.                 break;
  1507.             }
  1508.             
  1509.             foreach(Api::getQS($account) as $pref) {
  1510.                 $qsPref = $pref;
  1511.                 break;
  1512.             }
  1513.         }
  1514.         catch(\Exception $e) {}
  1515.         
  1516.         if($saPref) {
  1517.             $sliderRangeScoreVal = $saPref->getValue();
  1518.         }
  1519.         else {
  1520.             $sliderRangeScoreVal = UserPref::DEFAULT_SPAM_SCORE;
  1521.         }
  1522.         
  1523.         $saMaxScore = $account->findSOption('cfgSAMaxScore') == null ? UserPref::SA_MAX_SCORE : $account->findSOption('cfgSAMaxScore');
  1524.         
  1525.         $neverDelete = false;
  1526.         
  1527.         if($qsPref) {
  1528.             // these values are stored as delta - we have to add them to user's "score" value
  1529.             $sliderRangeValMin = $qsPref->getQuarantine() + $sliderRangeScoreVal;
  1530.             $prefix = $qsPref->getSubject();
  1531.             
  1532.             // if getDel() is 0, it means "never delete" is enabled
  1533.             if($qsPref->getDel() == 0) {
  1534.                 $neverDelete = true;
  1535.                 // don't set sliderRangeValMax, use max value instead
  1536.                 $sliderRangeValMax = $saMaxScore;
  1537.             }
  1538.             else {
  1539.                 $sliderRangeValMax = $qsPref->getDel() + $sliderRangeScoreVal;
  1540.             }
  1541.             
  1542.             // if given value is exactly less by 0.05 it means it is 0 but was written to the database this way
  1543.             // because setting 0 switches off given funcionality completely
  1544.             if($sliderRangeValMin + 0.05 == $sliderRangeScoreVal) {
  1545.                 $sliderRangeValMin = $sliderRangeScoreVal;
  1546.             }
  1547.             
  1548.             if(!$neverDelete && $sliderRangeValMax + 0.05 == $sliderRangeScoreVal) {
  1549.                 $sliderRangeValMax = $sliderRangeScoreVal;
  1550.             }            
  1551.         }
  1552.         else {
  1553.             $sliderRangeValMin = UserPref::DEFAULT_QUARANTINE_THRESHOLD + $sliderRangeScoreVal;
  1554.             $sliderRangeValMax = UserPref::DEFAULT_DELETE_THRESHOLD + $sliderRangeScoreVal;
  1555.             $prefix = null;
  1556.         }
  1557.          
  1558.         if(!$form->isSubmitted()) {
  1559.             $form->get('score')->setData($sliderRangeScoreVal);
  1560.             $form->get('ok')->setData($sliderRangeScoreVal . ' - ' . $sliderRangeValMin);
  1561.             $form->get('quarantine')->setData($sliderRangeValMin . ' - ' . $sliderRangeValMax);
  1562.             $neverDeleteText = $this->translator->trans('NIGDY');
  1563.             $form->get('delete')->setData($neverDelete ? $neverDeleteText : $sliderRangeValMax);
  1564.             $form->get('neverDelete')->setData($neverDelete);
  1565.             
  1566.             if($prefix != null) {
  1567.                 $form->get('prefix')->setData($prefix);
  1568.             }
  1569.         }
  1570.         
  1571.         if($form->isSubmitted() && $form->isValid()) {
  1572.             if($saPref == null) {
  1573.                 $saPref = new UserPref();
  1574.             }
  1575.             
  1576.             $saPref->setUsername($account->userAddress());
  1577.             $saPref->setPreference('required_score');
  1578.             $saPref->setValue($form->get('score')->getData());
  1579.             
  1580.             try {
  1581.                 Api::saveUserPref($saPref);
  1582.             }
  1583.             catch(\Exception $e) {
  1584.                 $this->logger->log('Api::saveUserPref() - exception from API', $request, ['error_code' => $e->getCode(), 'error_message' => $e->getMessage()], 'critical');
  1585.                 $this->addFlash('error', $this->translator->trans('Critical error, contact administrator.'));
  1586.                 return $this->redirectToRoute('qu_sa_score');
  1587.             }
  1588.             
  1589.             if($qsPref == null) {
  1590.                 $qsPref = new Qs();
  1591.             }
  1592.             
  1593.             $qsPref->setAddress($account->userAddress());
  1594.             $valOK = explode(' - ', $form->get('ok')->getData());
  1595.             $qsPref->setQuarantine($valOK[1] - $form->get('score')->getData());
  1596.             
  1597.             // if "never delete" checkbox is checked, set del to 0
  1598.             if($form->get('neverDelete')->getData()) {
  1599.                 $qsPref->setDel(0);
  1600.             }
  1601.             else {
  1602.                 $deleteValue = $form->get('delete')->getData();
  1603.                 $neverDeleteText = $this->translator->trans('NIGDY');
  1604.                 // if delete value is "NIGDY" (translated) or not numeric, use max value
  1605.                 if($deleteValue === $neverDeleteText || !is_numeric($deleteValue)) {
  1606.                     $deleteValue = $saMaxScore;
  1607.                 }
  1608.                 $qsPref->setDel($deleteValue - $form->get('score')->getData());
  1609.             }
  1610.             
  1611.             if($form->get('prefix')->getData() == null) {
  1612.                 $qsPref->setSubject('');
  1613.             }
  1614.             else {
  1615.                 $qsPref->setSubject($form->get('prefix')->getData());
  1616.             }
  1617.             
  1618.             // Qs default values
  1619.             $scanners = 'clamdscan_scanner,sa,perlscan_scanner';
  1620.             
  1621.             if(isset($_SERVER['APP_QS_SCANNERS'])) {
  1622.                 $scanners = $_SERVER['APP_QS_SCANNERS'];
  1623.             }
  1624.             
  1625.             $qsPref->setScanners($scanners);
  1626.             $qsPref->setDelta(0);
  1627.             $qsPref->setReject(0);
  1628.             $qsPref->setForward('none');
  1629.             $qsPref->setForwardVerbose(0);
  1630.             $qsPref->setHdrReport(0);
  1631.             $qsPref->setSpamdir('spam');
  1632.             
  1633.             try {
  1634.                 Api::saveQs($qsPref);
  1635.             }
  1636.             catch(\Exception $e) {
  1637.                 $this->logger->log('Api::saveQs() - exception from API', $request, ['error_code' => $e->getCode(), 'error_message' => $e->getMessage()], 'critical');
  1638.                 $this->addFlash('error', $this->translator->trans('Critical error, contact administrator.'));
  1639.                 return $this->redirectToRoute('qu_sa_score');
  1640.             }
  1641.             
  1642.             $this->addFlash('notice', $this->translator->trans('Antispam score saved'));
  1643.             $this->logger->log('Autoresponder score settings saved', $request, ['prefix' => $form->get('prefix')->getData(),
  1644.                 'spam_threshold' => $form->get('score')->getData(), 'inbox_deliver_threshold' => $form->get('ok')->getData(),
  1645.                 'delete_threshold' => $form->get('delete')->getData()]);
  1646.             return $this->redirectToRoute('qu_sa_score');
  1647.         }
  1648.         elseif($form->isSubmitted() && !$form->isValid()){
  1649.             $this->addFlash('error', $this->translator->trans('Antispam score NOT saved'));
  1650.         }
  1651.         
  1652.         $neverDeleteText = $this->translator->trans('NIGDY');
  1653.         
  1654.         return $this->render('skins/' . $this->skin . '/q_user/spamassassin_score.html.twig', [
  1655.             'form' => $form->createView(),
  1656.             'antispamOn' => $antispamOn,
  1657.             'sliderRangeScoreVal' => $sliderRangeScoreVal,
  1658.             'sliderRangeValMin' => $sliderRangeValMin,
  1659.             'sliderRangeValMax' => $sliderRangeValMax,
  1660.             'sliderMaxConfig' => $saMaxScore,
  1661.             'neverDelete' => $neverDelete,
  1662.             'neverDeleteText' => $neverDeleteText,
  1663.         ]);
  1664.         
  1665.     }
  1667.     /**
  1668.      * @Route("/panel/spamassassin/bwlists/{orderBy}/{orderDir}", defaults={"orderBy"="listType", "orderDir"="asc"}, name="qu_sa_bwlists", requirements={"orderBy"="listType|enableStatus|address|session"})
  1669.      */
  1670.     public function spamAssassinLists($orderBy, $orderDir, Request $request, PaginatorInterface $paginator)
  1671.     {
  1672.         $user = $this->security->getUser();
  1673.         $account = $user->getAccount();
  1674.         $this->denyAccessUnlessGranted('SPAMASSASSIN', $account);
  1675.         $antispamOn = $this->_isAntispamOn($account);
  1676.         $pagination = $account->findSOption('cfgUserPagination') == null ?
  1677.         (isset($_SERVER['APP_DEFAULT_PER_PAGE']) ? $_SERVER['APP_DEFAULT_PER_PAGE'] : Account::NUMBER_OF_ITEMS)
  1678.         : $account->findSOption('cfgUserPagination');
  1679.         
  1680.         $form = $this->createForm(SpamAssassinLists::class);
  1681.         $formMass = $this->createForm(SpamAssassinListsMass::class,
  1682.             null, [
  1683.                 'action' => $this->generateUrl('qu_sa_bwlists_mass'),
  1684.         ]);
  1685.             
  1686.         $form->handleRequest($request);
  1687.         $prefs = [];
  1688.         
  1689.         try {
  1690.             foreach(Api::getSAPrefVal($account, 'whitelist_from') as $pref) {
  1691.                 $prefs[$pref->getPrefid()] = $pref;
  1692.             }
  1693.             
  1694.             foreach(Api::getSAPrefVal($account, '_NA_whitelist_from') as $pref) {
  1695.                 $prefs[$pref->getPrefid()] = $pref;
  1696.             }
  1697.             
  1698.             foreach(Api::getSAPrefVal($account, 'blacklist_from') as $pref) {
  1699.                 $prefs[$pref->getPrefid()] = $pref;
  1700.             }
  1701.             
  1702.             foreach(Api::getSAPrefVal($account, '_NA_blacklist_from') as $pref) {
  1703.                 $prefs[$pref->getPrefid()] = $pref;
  1704.             }
  1705.         }
  1706.         catch(\Exception $e) {}
  1708.         if($orderBy == 'listType' || $orderBy == 'enableStatus' || $orderBy == 'address') {
  1709.             $this->session->set('app_user_sa_lists_order_by', $orderBy);
  1710.             $this->session->set('app_user_sa_lists_order_dir', $orderDir);
  1711.         }
  1712.         
  1713.         if($orderBy == 'session') {
  1714.             if($this->session->has('app_user_sa_lists_order_by')) {
  1715.                 $orderBy = $this->session->get('app_user_sa_lists_order_by');
  1716.                 $orderDir = $this->session->get('app_user_sa_lists_order_dir');
  1717.             }
  1718.             else {
  1719.                 $orderBy = 'listType';
  1720.                 $orderDir = 'asc';
  1721.             }
  1722.         }
  1723.         
  1724.         if($orderBy == 'listType') {
  1725.             if($orderDir == 'asc') {
  1726.                 uasort($prefs, '\App\Model\UserPref::cmpObjectsByPreference');
  1727.             }
  1728.             else {
  1729.                 uasort($prefs, '\App\Model\UserPref::cmpObjectsByPreferenceDesc');
  1730.             }
  1731.         }
  1732.         else if($orderBy == 'enableStatus'){
  1733.             if($orderDir == 'asc') {
  1734.                 uasort($prefs, '\App\Model\UserPref::cmpObjectsByEnableStatus');
  1735.             }
  1736.             else {
  1737.                 uasort($prefs, '\App\Model\UserPref::cmpObjectsByEnableStatusDesc');
  1738.             }
  1739.         }
  1740.         else {
  1741.             if($orderDir == 'asc') {
  1742.                 uasort($prefs, '\App\Model\UserPref::cmpObjectsByVal');
  1743.             }
  1744.             else {
  1745.                 uasort($prefs, '\App\Model\UserPref::cmpObjectsByValDesc');
  1746.             }
  1747.         }
  1748.         
  1749.         
  1750.         if($form->isSubmitted() && $form->isValid()) {
  1751.             // check if this entry 
  1752.             
  1753.             $saPref = new UserPref();
  1754.             $saPref->setUsername($account->userAddress());
  1755.             
  1756.             if($form->get('type')->getData() == 'w') {
  1757.                 $saPref->setPreference('whitelist_from');    
  1758.             }
  1759.             else {
  1760.                 $saPref->setPreference('blacklist_from');
  1761.             }
  1762.             
  1763.             $saPref->setValue($form->get('address')->getData());
  1764.             
  1765.             try {
  1766.                 if(Api::checkListExists($saPref)) {
  1767.                     $this->addFlash('error', $this->translator->trans('List item NOT added - already exists'));
  1768.                     
  1769.                     return $this->render('skins/' . $this->skin . '/q_user/spamassassin_bwlists.html.twig', [
  1770.                         'form' => $form->createView(),
  1771.                         'formMass' => $formMass->createView(),
  1772.                         'antispamOn' => $antispamOn,
  1773.                         'prefs' => $prefs,
  1774.                         'orderDir' => $orderDir,
  1775.                         'orderBy' => $orderBy,
  1776.                         /*'prefs' => $paginator->paginate(
  1777.                             $prefs, $request->query->getInt('page', 1), $pagination
  1778.                             ),*/
  1779.                     ]);
  1780.                 }
  1781.             }
  1782.             catch(\Exception $e) {
  1783.                 $this->logger->log('Api::checkListExists() - exception from API', $request, ['error_code' => $e->getCode(), 'error_message' => $e->getMessage()], 'critical');
  1784.                 $this->addFlash('error', $this->translator->trans('Critical error, contact administrator.'));
  1785.             }
  1786.             
  1787.             try {
  1788.                 Api::saveUserPref($saPref);
  1789.             }
  1790.             catch(\Exception $e) {
  1791.                 $this->logger->log('Api::saveUserPref() - exception from API', $request, ['error_code' => $e->getCode(), 'error_message' => $e->getMessage()], 'critical');
  1792.                 $this->addFlash('error', $this->translator->trans('Critical error, contact administrator.'));
  1793.                 return $this->redirectToRoute('qu_sa_bwlists');
  1794.             }
  1795.             
  1796.             if($form->get('type')->getData() == 'w') {
  1797.                 $this->logger->log('Whitelist added ', $request, ['value' => $saPref->getValue()]);
  1798.             }
  1799.             else {
  1800.                 $this->logger->log('Blacklist added ', $request, ['value' => $saPref->getValue()]);
  1801.             }
  1802.             
  1803.             $this->addFlash('notice', $this->translator->trans('List item added'));
  1804.             $this->addFlash('rowsAffected', -1); // highlight the last one
  1805.             return $this->redirectToRoute('qu_sa_bwlists');
  1806.         }
  1807.         elseif($form->isSubmitted() && !$form->isValid()){
  1808.             $this->addFlash('error', $this->translator->trans('List item NOT added'));
  1809.         }
  1810.             
  1811.         return $this->render('skins/' . $this->skin . '/q_user/spamassassin_bwlists.html.twig', [
  1812.             'form' => $form->createView(),
  1813.             'formMass' => $formMass->createView(),
  1814.             'antispamOn' => $antispamOn,
  1815.             'prefs' => 
  1816.                 $prefs,
  1817.             'orderDir' => $orderDir,
  1818.             'orderBy' => $orderBy,
  1819.             /*'prefs' => $paginator->paginate(
  1820.                 $prefs, $request->query->getInt('page', 1), $pagination
  1821.                 ),*/
  1822.         ]);
  1823.     }
  1824.     
  1825.     /**
  1826.      * @Route("/panel/spamassassin/massbwlists", name="qu_sa_bwlists_mass")
  1827.      */
  1828.     public function spamAssassinListsMassAction(Request $request) {
  1829.         $user = $this->security->getUser();
  1830.         $account = $user->getAccount();
  1831.         $this->denyAccessUnlessGranted('SPAMASSASSIN', $account);
  1832.         $form = $this->createForm(SpamAssassinListsMass::class,
  1833.             null, [
  1834.                 'action' => $this->generateUrl('qu_sa_bwlists_mass'),
  1835.         ]);
  1836.         
  1837.         $form->handleRequest($request);
  1838.         
  1839.         if($form->isSubmitted() && $form->isValid()) {
  1840.             $actionType = $form->get('actionType')->getData();
  1841.             $selected = $request->request->get('listsMassCheckbox');
  1842.             $actionFailed = false;
  1843.             
  1844.             $affectedArr = [];
  1845.             
  1846.             foreach($selected as $id) {
  1847.                 try {
  1848.                     $pref = Api::getSAPrefById($id);
  1849.                 }
  1850.                 catch(\Exception $e) {
  1851.                     $this->logger->log('Error while trying to delete not existent SA list entry', $request, ['id' => $id], 'critical');
  1852.                     $actionFailed = true;
  1853.                     continue;
  1854.                 }
  1855.                 
  1856.                 $this->denyAccessUnlessGranted('SPAMASSASSIN', $pref);
  1857.                 
  1858.                 switch($actionType) {
  1859.                     case 'delete':
  1860.                         if(Api::deleteSAPref($pref->getPrefid())) {
  1861.                             $this->logger->log('Deleted SA list entry', $request, ['value' => $pref->getValue()]);
  1862.                         }
  1863.                         else {
  1864.                             $this->logger->log('Error while trying to delete SA list entry', $request, [], 'critical');
  1865.                             $actionFailed = true;
  1866.                         }
  1867.                         break;
  1868.                         
  1869.                     case 'towhite':
  1870.                         if($pref->isEnabled()) {
  1871.                             $pref->setPreference('whitelist_from');
  1872.                         }
  1873.                         else {
  1874.                             $pref->setPreference('_NA_whitelist_from');
  1875.                         }
  1876.                         break;
  1877.                         
  1878.                     case 'toblack':
  1879.                         if($pref->isEnabled()) {
  1880.                             $pref->setPreference('blacklist_from');
  1881.                         }
  1882.                         else {
  1883.                             $pref->setPreference('_NA_blacklist_from');
  1884.                         }
  1885.                         break;
  1886.                         
  1887.                     case 'disable':
  1888.                         if(Api::disableSAPref($pref->getPrefid())) {
  1889.                             $this->logger->log('Disabled SA list entry', $request, ['value' => $pref->getValue()]);
  1890.                         }
  1891.                         else {
  1892.                             $this->logger->log('Error while trying to disable SA list entry', $request, [], 'critical');
  1893.                             $actionFailed = true;
  1894.                         }
  1895.                         break;
  1896.                     case 'enable':
  1897.                         if(Api::enableSAPref($pref->getPrefid())) {
  1898.                             $this->logger->log('Enabled SA list entry', $request, ['value' => $pref->getValue()]);
  1899.                         }
  1900.                         else {
  1901.                             $this->logger->log('Error while trying to enable SA list entry', $request, [], 'critical');
  1902.                             $actionFailed = true;
  1903.                         }
  1904.                         break;
  1905.                 }
  1906.                 
  1907.                 if($actionType == 'towhite' || $actionType == 'toblack') {
  1908.                     try {
  1909.                         Api::saveUserPref($pref);
  1910.                         
  1911.                         if($actionType == 'towhite') {
  1912.                             $this->logger->log('Changed SA list entry to whitelist', $request, ['value' => $pref->getValue()]);
  1913.                         }
  1914.                         else {
  1915.                             $this->logger->log('Changed SA list entry to blacklist', $request, ['value' => $pref->getValue()]);
  1916.                         }
  1917.                     }
  1918.                     catch(\Exception $e) {
  1919.                         $this->logger->log('Api::saveUserPref() - exception from API', $request, ['error_code' => $e->getCode(), 'error_message' => $e->getMessage()], 'critical');
  1920.                         $actionFailed = true;
  1921.                     }
  1922.                 }
  1923.                 
  1924.                 $affectedArr[] = $id;
  1925.             }
  1926.             
  1927.             switch($actionType) {
  1928.                 case 'delete':
  1929.                     if($actionFailed) {
  1930.                         $this->addFlash('error', $this->translator->trans('NOT ALL entries deleted'));
  1931.                     }
  1932.                     else {
  1933.                         $this->addFlash('notice', $this->translator->trans('All entries successfuly deleted'));
  1934.                     }
  1935.                     break;
  1936.                     
  1937.                 case 'towhite':
  1938.                 case 'toblack':
  1939.                     if($actionFailed) {
  1940.                         $this->addFlash('error', $this->translator->trans('NOT ALL entries changed'));
  1941.                     }
  1942.                     else {
  1943.                         $this->addFlash('notice', $this->translator->trans('All entries successfuly changed'));
  1944.                     }
  1945.                     break;
  1946.                 case 'enable':
  1947.                     if($actionFailed) {
  1948.                         $this->addFlash('error', $this->translator->trans('NOT ALL entries enabled'));
  1949.                     }
  1950.                     else {
  1951.                         $this->addFlash('notice', $this->translator->trans('All entries successfuly enabled'));
  1952.                     }
  1953.                     break;
  1954.                 case 'disable':
  1955.                     if($actionFailed) {
  1956.                         $this->addFlash('error', $this->translator->trans('NOT ALL entries disabled'));
  1957.                     }
  1958.                     else {
  1959.                         $this->addFlash('notice', $this->translator->trans('All entries successfuly disabled'));
  1960.                     }
  1961.                     break;
  1962.             }
  1963.             
  1964.             $this->addFlash('rowsAffected', implode(':', $affectedArr));
  1965.         }
  1966.         
  1967.         return $this->redirectToRoute("qu_sa_bwlists");
  1968.     }
  1969.     
  1970.     /**
  1971.      * @Route("/panel/spamassassin/bwlists/del/{id}", name="qu_sa_bwlists_del")
  1972.      */
  1973.     public function spamassassinListsDelete(int $id, Request $request)
  1974.     {
  1975.         $user = $this->security->getUser();
  1976.         $account = $user->getAccount();
  1977.         $this->denyAccessUnlessGranted('SPAMASSASSIN', $account);
  1978.         
  1979.         try {
  1980.             $pref = Api::getSAPrefById($id);
  1981.         }
  1982.         catch(\Exception $e) {
  1983.             $this->logger->log('Error while trying to delete not existent SA list entry', $request, ['id' => $id], 'critical');
  1984.             $this->addFlash('error', $this->translator->trans('Critical error, contact administrator.'));
  1985.             return $this->redirectToRoute('qu_sa_bwlists');
  1986.         }
  1987.         
  1988.         $this->denyAccessUnlessGranted('SPAMASSASSIN', $pref);
  1989.         
  1990.         if(Api::deleteSAPref($pref->getPrefid())) {
  1991.             $this->logger->log('Deleted SA list entry', $request, ['value' => $pref->getValue(), 'type' => $pref->getPreference()]);
  1992.             $this->addFlash('notice', $this->translator->trans('List item deleted'));
  1993.         }
  1994.         else {
  1995.             $this->logger->log('Error while trying to delete SA list entry', $request, [], 'critical');
  1996.             $this->addFlash('error', $this->translator->trans('List item NOT deleted'));
  1997.         }
  1998.         
  1999.         return $this->redirectToRoute('qu_sa_bwlists');
  2000.     }
  2001.     
  2002.     /**
  2003.      * @Route("/panel/spamassassin/bwlists/enable/{id}", name="qu_sa_bwlists_enable")
  2004.      */
  2005.     public function spamassassinListsEnable(int $id, Request $request)
  2006.     {
  2007.         $user = $this->security->getUser();
  2008.         $account = $user->getAccount();
  2009.         $this->denyAccessUnlessGranted('SPAMASSASSIN', $account);
  2010.         
  2011.         try {
  2012.             $pref = Api::getSAPrefById($id);
  2013.         }
  2014.         catch(\Exception $e) {
  2015.             $this->logger->log('Error while trying to enable not existent SA list entry', $request, ['id' => $id], 'critical');
  2016.             $this->addFlash('error', $this->translator->trans('Critical error, contact administrator.'));
  2017.             return $this->redirectToRoute('qu_sa_bwlists');
  2018.         }
  2019.         
  2020.         $this->denyAccessUnlessGranted('SPAMASSASSIN', $pref);
  2021.         
  2022.         if(Api::enableSAPref($pref->getPrefid())) {
  2023.             $this->logger->log('Enabled SA list entry', $request, ['value' => $pref->getValue(), 'type' => $pref->getPreference()]);
  2024.             $this->addFlash('notice', $this->translator->trans('List item enabled'));
  2025.             $this->addFlash('rowsAffected', $pref->getPrefid());
  2026.         }
  2027.         else {
  2028.             $this->logger->log('Error while trying to enable SA list entry', $request, [], 'critical');
  2029.             $this->addFlash('error', $this->translator->trans('List item NOT enabled'));
  2030.         }
  2031.         
  2032.         return $this->redirectToRoute('qu_sa_bwlists');
  2033.     }
  2034.     
  2035.     
  2036.     /**
  2037.      * @Route("/panel/spamassassin/bwlists/disable/{id}", name="qu_sa_bwlists_disable")
  2038.      */
  2039.     public function spamassassinListsDisable(int $id, Request $request)
  2040.     {
  2041.         $user = $this->security->getUser();
  2042.         $account = $user->getAccount();
  2043.         $this->denyAccessUnlessGranted('SPAMASSASSIN', $account);
  2044.         
  2045.         try {
  2046.             $pref = Api::getSAPrefById($id);
  2047.         }
  2048.         catch(\Exception $e) {
  2049.             $this->logger->log('Error while trying to disable not existent SA list entry', $request, ['id' => $id], 'critical');
  2050.             $this->addFlash('error', $this->translator->trans('Critical error, contact administrator.'));
  2051.             return $this->redirectToRoute('qu_sa_bwlists');
  2052.         }
  2053.         
  2054.         $this->denyAccessUnlessGranted('SPAMASSASSIN', $pref);
  2055.         
  2056.         if(Api::disableSAPref($pref->getPrefid())) {
  2057.             $this->logger->log('Disabled SA list entry', $request, ['value' => $pref->getValue(), 'type' => $pref->getPreference()]);
  2058.             $this->addFlash('notice', $this->translator->trans('List item disabled'));
  2059.             $this->addFlash('rowsAffected', $pref->getPrefid());
  2060.         }
  2061.         else {
  2062.             $this->logger->log('Error while trying to disable SA list entry', $request, [], 'critical');
  2063.             $this->addFlash('error', $this->translator->trans('List item NOT disabled'));
  2064.         }
  2065.         
  2066.         return $this->redirectToRoute('qu_sa_bwlists');
  2067.     }
  2068.     
  2069.     /**
  2070.      * @Route("/panel/spamassassin/bwlists/edit/{id}/{page}/{orderBy}/{orderDir}", defaults={"page"=1, "orderBy"="listType", "orderDir"="asc"}, name="qu_sa_bwlists_edit")
  2071.      */
  2072.     public function spamassassinListsEdit(int $id, Request $request, int $page, $orderBy, $orderDir)
  2073.     {
  2074.         $user = $this->security->getUser();
  2075.         $account = $user->getAccount();
  2076.         $this->denyAccessUnlessGranted('SPAMASSASSIN', $account);
  2077.         
  2078.         $form = $this->createForm(SpamAssassinLists::class);
  2079.         $form->handleRequest($request);
  2080.         
  2081.         try {
  2082.             $pref = Api::getSAPrefById($id);
  2083.         }
  2084.         catch(\Exception $e) {
  2085.             $this->logger->log('Error while trying to edit not existent SA list entry', $request, ['id' => $id], 'critical');
  2086.             $this->addFlash('error', $this->translator->trans('Critical error, contact administrator.'));
  2087.             return $this->redirectToRoute('qu_sa_bwlists');
  2088.         }
  2089.         
  2090.         $this->denyAccessUnlessGranted('SPAMASSASSIN', $pref);
  2091.         
  2092.         if(!$form->isSubmitted()) {
  2093.             if($pref->getPreference() == 'whitelist_from') {
  2094.                 $form->get('type')->setData('w');
  2095.             }
  2096.             else {
  2097.                 $form->get('type')->setData('b');
  2098.             }
  2099.             
  2100.             $form->get('address')->setData($pref->getValue());
  2101.         }
  2102.                
  2103.         if($form->isSubmitted() && $form->isValid()) {
  2104.             $pref->setValue($form->get('address')->getData());
  2105.             $pref->setPreference(($form->get('type')->getData() == 'w') ? 'whitelist_from' : 'blacklist_from');
  2106.             
  2107.             try {
  2108.                 Api::saveUserPref($pref);
  2109.             }
  2110.             catch(\Exception $e) {
  2111.                 $this->logger->log('Api::saveUserPref() - exception from API', $request, ['error_code' => $e->getCode(), 'error_message' => $e->getMessage()], 'critical');
  2112.                 $this->addFlash('error', $this->translator->trans('Critical error, contact administrator.'));
  2113.                 return $this->redirectToRoute('qu_sa_bwlists');
  2114.             }
  2115.                         
  2116.             $this->addFlash('notice', $this->translator->trans('List item edited successfully'));
  2117.             $this->addFlash('rowsAffected', $pref->getPrefid());
  2118.             return $this->redirectToRoute('qu_sa_bwlists', ['page' => $page, 'orderBy' => $orderBy, 'orderDir' => $orderDir]);            
  2119.         }
  2120.         elseif($form->isSubmitted() && !$form->isValid()){
  2121.             $this->addFlash('error', $this->translator->trans('Procmail rule NOT saved'));
  2122.         }
  2123.         
  2124.         return $this->render('skins/' . $this->skin . '/q_user/spamassassin_bwlists_edit.html.twig', [
  2125.             'form' => $form->createView(),
  2126.             'page' => $page,
  2127.             'orderBy' => $orderBy,
  2128.             'orderDir' => $orderDir,
  2129.         ]);
  2130.     }
  2131.     
  2132.     /**
  2133.      * @Route("/panel/spamassassin/langs", name="qu_sa_langs")
  2134.      */
  2135.     public function spamAssassinLangs(Request $request)
  2136.     {
  2137.         $user = $this->security->getUser();
  2138.         $account = $user->getAccount();
  2139.         $this->denyAccessUnlessGranted('SPAMASSASSIN', $account);
  2140.         
  2141.         $antispamOn = $this->_isAntispamOn($account);
  2142.         
  2143.         $form = $this->createForm(SpamAssassinLocales::class);
  2144.         $form->handleRequest($request);
  2145.         $saPref = new UserPref();
  2146.         $saPref->setPreference('ok_locales');
  2147.         $saPref->setUsername($account->useraddress());
  2148.         
  2149.         try {
  2150.             foreach(Api::getSAPrefVal($account, 'ok_locales') as $pref) {
  2151.                 $saPref = $pref;
  2152.                 break;
  2153.             }
  2154.         }
  2155.         catch(\Exception $e) {}
  2156.         
  2157.         if(!$form->isSubmitted()) {
  2158.             if($saPref->getPrefid() == 0 || strpos($saPref->getValue(), 'all') !== false) {
  2159.                 $form->get('locale')->setData(['l_all', 'l_en', 'l_ja', 'l_ru', 'l_ko', 'l_th', 'l_zh']);
  2160.             }
  2161.             else {
  2162.                 $localeArr = [];
  2163.                 
  2164.                 if(strpos($saPref->getValue(), 'en') !== false) {
  2165.                     $localeArr[] = 'l_en';
  2166.                 }
  2167.                 
  2168.                 if(strpos($saPref->getValue(), 'ja') !== false) {
  2169.                     $localeArr[] = 'l_ja';
  2170.                 }
  2171.                 
  2172.                 if(strpos($saPref->getValue(), 'ru') !== false) {
  2173.                     $localeArr[] = 'l_ru';
  2174.                 }
  2175.                 
  2176.                 if(strpos($saPref->getValue(), 'ko') !== false) {
  2177.                     $localeArr[] = 'l_ko';
  2178.                 }
  2179.                 
  2180.                 if(strpos($saPref->getValue(), 'th') !== false) {
  2181.                     $localeArr[] = 'l_th';
  2182.                 }
  2183.                 
  2184.                 if(strpos($saPref->getValue(), 'zh') !== false) {
  2185.                     $localeArr[] = 'l_zh';
  2186.                 }
  2187.                 
  2188.                 $form->get('locale')->setData($localeArr);
  2189.             }
  2190.         }
  2191.         
  2192.         if($form->isSubmitted() && $form->isValid()) {
  2193.             $localeStr = '';
  2194.             
  2195.             foreach($form->get('locale')->getData() as $l) {
  2196.                 $localeStr .= str_replace('l_', '', $l) . ' ';
  2197.             }
  2198.             
  2199.             $localeStr = trim($localeStr);
  2200.             
  2201.             if(strpos($localeStr, 'all') !== false) {
  2202.                 $localeStr = 'all';
  2203.             }
  2204.             
  2205.             $saPref->setValue($localeStr);
  2206.             
  2207.             try {
  2208.                 Api::saveUserPref($saPref);
  2209.             }
  2210.             catch(\Exception $e) {
  2211.                 $this->logger->log('Api::saveUserPref() - exception from API', $request, ['error_code' => $e->getCode(), 'error_message' => $e->getMessage()], 'critical');
  2212.                 $this->addFlash('error', $this->translator->trans('Critical error, contact administrator.'));
  2213.                 return $this->redirectToRoute('qu_sa_langs');
  2214.             }
  2215.             
  2216.             $this->logger->log('Spamassassin languages set', $request, []);
  2217.             $this->addFlash('notice', $this->translator->trans('Antispam languages set'));
  2218.             return $this->redirectToRoute('qu_sa_langs');            
  2219.         }
  2220.         elseif($form->isSubmitted() && !$form->isValid()){
  2221.             $this->addFlash('error', $this->translator->trans('Antispam languages NOT set'));
  2222.         }
  2223.         
  2224.         return $this->render('skins/' . $this->skin . '/q_user/spamassassin_langs.html.twig', [
  2225.             'form' => $form->createView(),
  2226.             'antispamOn' => $antispamOn,
  2227.         ]);
  2228.         
  2229.     }
  2230.     
  2231.     /**
  2232.      * @Route("/panel/spamassassin/setdefaults/{type}", name="qu_sa_set_defaults", requirements={"type"="^(lang|score)$"})
  2233.      * @param type - lang or score
  2234.      */
  2235.     public function spamAssassinSetDefaults(String $type, Request $request)
  2236.     {
  2237.         $user = $this->security->getUser();
  2238.         $account = $user->getAccount();
  2239.         $this->denyAccessUnlessGranted('SPAMASSASSIN', $account);
  2240.         
  2241.         $saPref = null;
  2242.         $qsPref = null;
  2243.         
  2244.         if($type == "lang") {
  2245.             try {
  2246.                 foreach(Api::getSAPrefVal($account, 'ok_locales') as $pref) {
  2247.                     $saPref = $pref;
  2248.                     break;
  2249.                 }
  2250.             }
  2251.             catch(\Exception $e) {}
  2252.         }
  2253.         else {            
  2254.             try {
  2255.                 foreach(Api::getSAPrefVal($account, 'required_score') as $pref) {
  2256.                     $saPref = $pref;
  2257.                     break;
  2258.                 }
  2259.                 
  2260.                 foreach(Api::getQS($account) as $pref) {
  2261.                     $qsPref = $pref;
  2262.                     break;
  2263.                 }
  2264.             }
  2265.             catch(\Exception $e) {}
  2266.         }
  2267.         
  2268.         
  2269.         if(is_null($saPref) || Api::deleteSAPref($saPref->getPrefid())) {
  2270.             $this->logger->log('Antispam/Antispam ' . $type . ' - default settings set', $request);
  2271.             $this->addFlash('notice', $this->translator->trans('Default settings set'));
  2272.         }
  2273.         else {
  2274.             $this->logger->log('Error while trying to set default settings', $request, [], 'critical');
  2275.             $this->addFlash('error', $this->translator->trans('Default settings NOT set'));
  2276.         }
  2277.         
  2278.         if($qsPref != null) {
  2279.             Api::deleteQs($qsPref->getId());
  2280.         }
  2281.         
  2282.         // redirect to spamassassin main page or to a specific subpage
  2283.         $referer = $request->headers->get('referer');
  2284.         
  2285.         if(strlen($referer)) {
  2286.             return $this->redirect($referer);
  2287.         }
  2288.         
  2289.         return $this->redirectToRoute('qu_sa');
  2290.     }
  2291.     
  2292.     /**
  2293.      * @Route("/panel/procmail", name="qu_procmail")
  2294.      */
  2295.     public function procmail(Request $request)
  2296.     {
  2297.         $user = $this->security->getUser();
  2298.         $account = $user->getAccount();
  2299.         $this->denyAccessUnlessGranted('PROCMAIL', $account);
  2300.         $headers = ProcmailRule::mailHeaders();
  2301.         
  2302.         $form = $this->createForm(Procmail::class);
  2303.         $formMass = $this->createForm(ProcmailMass::class);
  2304.         $form->handleRequest($request);
  2305.         
  2306.         try {
  2307.             $rules = Api::getProcmailRules($account);
  2308.             $localForwarding = Api::getForwardLocal($account);
  2309.         }
  2310.         catch(\Exception $e) {
  2311.             $this->logger->log('Api::getProcmailRules() - exception from API', $request, ['error_code' => $e->getCode(), 'error_message' => $e->getMessage()], 'critical');
  2312.             $this->addFlash('error', $this->translator->trans('Critical error, contact administrator.'));
  2313.             return $this->redirectToRoute('qu_main');
  2314.         }
  2315.         
  2316.         foreach($rules as &$r) {
  2317.             if(!$r->isDestEmail()) {
  2318.                 $r->setDestExist(Api::checkImapDir($account, mb_convert_encoding($r->getDest(), 'UTF7-imap', 'utf8')));
  2319.             }
  2320.         }
  2321.         
  2322.         if($form->isSubmitted() && $form->isValid()) {
  2323.             $rule = new ProcmailRule();
  2324.             $rule->setOwner($account->userAddress());
  2325.             $rule->setNo(-1);
  2326.             $rule->setType($form->get('src')->getData());
  2327.             
  2328.             // if src is "header" we need to set header-type
  2329.             if($rule->getType() == 'header') {
  2330.                 $rule->setHeaderType($form->get('headerTypeVal')->getData());
  2331.                 //$pattern = $form->get('header_type_val')->getData() . ': ' . $pattern;
  2332.             }
  2333.             
  2334.             $rule->setValue($form->get('pattern')->getData());
  2335.             
  2336.             $dest = $form->get('dest')->getData();
  2337.             
  2338.             // if dest is '...email' save value of destEmail 
  2339.             if($dest == '...email') {
  2340.                 $dest = '...' . str_replace(' ', '', $form->get('destEmail')->getData());
  2341.                 
  2342.                 // check if number of forwards is not exceeded
  2343.                 try {
  2344.                     $forwards = Api::getForwards($account);                    
  2345.                 }
  2346.                 catch(\Exception $e) {
  2347.                     $this->logger->log('Api::getForwardLocal() - exception from API', $request, ['error_code' => $e->getCode(), 'error_message' => $e->getMessage()], 'critical');
  2348.                     $this->addFlash('error', $this->translator->trans('Critical error, contact administrator.'));
  2349.                     return $this->redirectToRoute('qu_main');
  2350.                 }
  2351.                 
  2352.                 $maxForwards = $this->_maxForwards($account);
  2353.                 $maxExternalForwards = $this->_maxExternalForwards($account);
  2354.                 
  2355.                 $forwardsCnt = count($forwards);
  2356.                 $externalForwardsCnt = $this->_externalForwardsCount($forwards, $user->getAccount());
  2357.                 $externalRulesCnt = $this->_numberProcmailRulesEmailExternal($account);
  2358.                 $rulesCnt = $this->_numberProcmailRulesEmail($account);
  2359.                 
  2360.                 if(($forwardsCnt + $rulesCnt + 1) > $maxForwards) {
  2361.                     $this->addFlash('error', $this->translator->trans('Rule NOT added - limit of forwards exceeded') . ' (' . $maxForwards . '). ' . $this->translator->trans('Forwards used in forwarding') . ': ' . $forwardsCnt . '. ' . $this->translator->trans('Forwards used in sorting') . ': ' . $rulesCnt);
  2362.                     
  2363.                     return $this->render('skins/' . $this->skin . '/q_user/procmail.html.twig', [
  2364.                         'form' => $form->createView(),
  2365.                         'formMass' => $formMass->createView(),
  2366.                         'rules' => $rules,
  2367.                         'headers' => $headers,
  2368.                         'localForwarding' => $localForwarding,
  2369.                     ]); 
  2370.                 }
  2371.                 
  2372.                 // check if limit of external forwards is not exceeded
  2373.                 $externalForwardsCnt = $this->_externalForwardsCount($forwards, $user->getAccount());
  2374.                 $currentExternalRules = 0;
  2375.                 
  2376.                 if(AccountTools::isEmailExternal($form->get('destEmail')->getData(), [$user->getAccount()->getUserDomain()])) {
  2377.                     $currentExternalRules = 1;
  2378.                 }
  2379.                 
  2380.                 if(($externalForwardsCnt + $externalRulesCnt + $currentExternalRules) > $maxExternalForwards) {
  2381.                     $this->addFlash('error', $this->translator->trans('Rule NOT added - limit of external forwards exceeded') . ' (' . $maxExternalForwards . '). ' . $this->translator->trans('External forwards used in forwards') . ': ' . $externalForwardsCnt. '. ' . $this->translator->trans('External forwards used in sorting') . ': ' . $externalRulesCnt);
  2382.                     
  2383.                     return $this->render('skins/' . $this->skin . '/q_user/procmail.html.twig', [
  2384.                         'form' => $form->createView(),
  2385.                         'formMass' => $formMass->createView(),
  2386.                         'rules' => $rules,
  2387.                         'headers' => $headers,
  2388.                         'localForwarding' => $localForwarding,
  2389.                     ]);
  2390.                 }
  2391.             }
  2392.             else {
  2393.                 $dest = mb_convert_encoding(urldecode($dest), 'UTF7-imap', 'utf8');
  2394.             }
  2395.             
  2396.             
  2397.             $rule->setDest($dest);
  2398.             $rule->setFinal($form->get('last')->getData());
  2399.             
  2400.             
  2401.             try {
  2402.                 Api::addProcmailRule($rule);
  2403.             }
  2404.             catch(\Exception $e) {
  2405.                 $this->logger->log('Api::addProcmailRule() - exception from API', $request, ['error_code' => $e->getCode(), 'error_message' => $e->getMessage()], 'critical');
  2406.                 $this->addFlash('error', $this->translator->trans('Critical error, contact administrator.'));
  2407.             }
  2408.             
  2409.             $this->logger->log('New rule added', $request, ['rule' => $rule->getValue()]);
  2410.             $this->addFlash('notice', $this->translator->trans('Rule added'));
  2411.             $this->addFlash('rowsAffected', -1); // highlight the last one
  2412.             return $this->redirectToRoute('qu_procmail');            
  2413.         }
  2414.         elseif($form->isSubmitted() && !$form->isValid()){
  2415.             $dest = $form->get('dest')->getData();
  2416.             $this->addFlash('error', $this->translator->trans('Procmail rule NOT added'));
  2417.         }
  2418.         
  2419.         return $this->render('skins/' . $this->skin . '/q_user/procmail.html.twig', [
  2420.             'form' => $form->createView(),
  2421.             'formMass' => $formMass->createView(),
  2422.             'rules' => $rules,
  2423.             'headers' => $headers,
  2424.             'localForwarding' => $localForwarding,
  2425.         ]);
  2426.         
  2427.     }
  2428.     
  2429.     /**
  2430.      * @Route("/panel/procmail/mass", name="qu_procmail_mass")
  2431.      */
  2432.     public function procmailMassAction(Request $request) {
  2433.         $user = $this->security->getUser();
  2434.         $account = $user->getAccount();
  2435.         $this->denyAccessUnlessGranted('PROCMAIL', $account);
  2436.         $form = $this->createForm(ProcmailMass::class);
  2437.         $form->handleRequest($request);
  2438.         
  2439.         if($form->isSubmitted() && $form->isValid()) {
  2440.             $actionType = $form->get('actionType')->getData();
  2441.             $selected = $request->request->get('rulesMassCheckbox');
  2442.             $actionFailed = false;
  2443.             $affected = [];
  2444.             
  2445.             foreach($selected as $id) {
  2446.                 try {
  2447.                     $rule = Api::getProcmailRule($id);
  2448.                 }
  2449.                 catch(\Exception $e) {
  2450.                     $this->logger->log('Api::getProcmailRule() - exception from API', $request, ['error_code' => $e->getCode(), 'error_message' => $e->getMessage()], 'critical');
  2451.                     $actionFailed = true;
  2452.                     continue;
  2453.                 }
  2454.                 
  2455.                 $this->denyAccessUnlessGranted('PROCMAIL', $rule);
  2456.                 
  2457.                 switch($actionType) {
  2458.                     case 'delete':
  2459.                         try {
  2460.                             if(Api::deleteProcmailRule($id)) {
  2461.                                 $this->logger->log('Procmail rule deleted', $request, ['rule' => $rule->getValue()]);
  2462.                             }
  2463.                             else {
  2464.                                 $this->logger->log('Error deleting procmail rule, id = ' . $id, $request, ['rule' => $rule->getValue()]);
  2465.                                 $actionFailed = true;
  2466.                             }
  2467.                         }
  2468.                         catch(\Exception $e) {
  2469.                             $this->logger->log('Api::deleteProcmailRule() - exception from API, id = ' . $id, $request, ['error_code' => $e->getCode(), 'error_message' => $e->getMessage()], 'critical');
  2470.                             $actionFailed = true;
  2471.                         }
  2472.                         break;
  2473.                         
  2474.                     case 'enable':
  2475.                         if(Api::enableProcmailRule($id)) {
  2476.                             $this->logger->log('Procmail rule enabled', $request, ['rule' => $rule->getValue()]);
  2477.                             $affected[] = $id;
  2478.                         }
  2479.                         else {
  2480.                             $this->logger->log('Error enabling procmail rule', $request, ['rule' => $rule->getValue()]);
  2481.                             $actionFailed = true;
  2482.                         }
  2483.                         break;
  2484.                         
  2485.                     case 'disable':
  2486.                         if(Api::disableProcmailRule($id)) {
  2487.                             $this->logger->log('Procmail rule disabled', $request, ['rule' => $rule->getValue()]);
  2488.                             $affected[] = $id;
  2489.                         }
  2490.                         else {
  2491.                             $this->logger->log('Error disabling procmail rule', $request, ['rule' => $rule->getValue()]);
  2492.                             $actionFailed = true;
  2493.                         }
  2494.                         break;
  2495.                 }
  2496.             }
  2497.             
  2498.             switch($actionType) {
  2499.                 case 'delete':
  2500.                     if($actionFailed) {
  2501.                         $this->addFlash('error', $this->translator->trans('NOT ALL rules deleted'));
  2502.                     }
  2503.                     else {
  2504.                         $this->addFlash('notice', $this->translator->trans('All rules successfuly deleted'));
  2505.                     }
  2506.                     break;
  2507.                     
  2508.                 case 'enable':
  2509.                     if($actionFailed) {
  2510.                         $this->addFlash('error', $this->translator->trans('NOT ALL rules enabled'));
  2511.                     }
  2512.                     else {
  2513.                         $this->addFlash('notice', $this->translator->trans('All rules successfuly enabled'));
  2514.                     }
  2515.                     break;
  2516.                     
  2517.                     
  2518.                 case 'disable':
  2519.                     if($actionFailed) {
  2520.                         $this->addFlash('error', $this->translator->trans('NOT ALL rules disabled'));
  2521.                     }
  2522.                     else {
  2523.                         $this->addFlash('notice', $this->translator->trans('All rules successfuly disabled'));
  2524.                     }
  2525.                     break;
  2526.             }
  2527.          
  2528.             $this->addFlash('rowsAffected', implode(':', $affected));
  2529.         }
  2530.         
  2531.         return $this->redirectToRoute("qu_procmail");
  2532.     }
  2533.     
  2534.     /**
  2535.      * @Route("/panel/procmail/edit/{id}", name="qu_procmail_edit")
  2536.      */
  2537.     public function procmailEdit(int $id, Request $request)
  2538.     {
  2539.         $user = $this->security->getUser();
  2540.         $account = $user->getAccount();
  2541.         $this->denyAccessUnlessGranted('PROCMAIL', $account);
  2542.         $headers = ProcmailRule::mailHeaders();
  2543.         
  2544.         $form = $this->createForm(Procmail::class);
  2545.         $form->handleRequest($request);
  2546.         
  2547.         $rule = Api::getProcmailRule($id);
  2548.         
  2549.         $this->denyAccessUnlessGranted('PROCMAIL', $rule);
  2550.         
  2551.         if(!$form->isSubmitted()) {
  2552.             $form->get('src')->setData($rule->getType());
  2553.             
  2554.             if($rule->getType() == 'header') {
  2555.                 $form->get('headerType')->setData($rule->getHeaderType());
  2556.                 $form->get('headerTypeVal')->setData($rule->getHeaderType());
  2557.             }
  2558.             
  2559.             $form->get('pattern')->setData($rule->getValue());
  2560.             $dest = $rule->getDest();
  2561.             
  2562.             if(substr($dest, 0, 3) == '...') {
  2563.                 $form->get('dest')->setData('...email');
  2564.                 $form->get('destEmail')->setData(substr($dest, 3));                
  2565.             }
  2566.             else {
  2567.                 $form->get('dest')->setData(urlencode($dest));
  2568.             }
  2569.             
  2570.             $form->get('last')->setData($rule->getFinal());
  2571.         }
  2572.         
  2573.         
  2574.         if($form->isSubmitted() && $form->isValid()) {
  2575.             $newRule = new ProcmailRule();
  2576.             $newRule->setId($rule->getId());
  2577.             $newRule->setOwner($account->userAddress());
  2578.             $newRule->setNo($rule->getNo());
  2579.             $newRule->setType($form->get('src')->getData());
  2580.             
  2581.             
  2582.             if($newRule->getType() == 'header') {
  2583.                 $newRule->setHeaderType($form->get('headerTypeVal')->getData());
  2584.             }
  2585.             
  2586.             $newRule->setValue($form->get('pattern')->getData());
  2587.             
  2588.             $dest = $form->get('dest')->getData();
  2589.             
  2590.             // if dest is '...email' save value of destEmail
  2591.             if($dest == '...email') {
  2592.                 $dest = '...' . str_replace(' ', '', $form->get('destEmail')->getData());
  2593.                 
  2594.                 // check if we don't exceed limits of forwards
  2595.                 try {
  2596.                     $forwards = Api::getForwards($account);
  2597.                 }
  2598.                 catch(\Exception $e) {
  2599.                     $this->logger->log('Api::getForwardLocal() - exception from API', $request, ['error_code' => $e->getCode(), 'error_message' => $e->getMessage()], 'critical');
  2600.                     $this->addFlash('error', $this->translator->trans('Critical error, contact administrator.'));
  2601.                     return $this->redirectToRoute('qu_main');
  2602.                 }
  2603.                 
  2604.                 $maxForwards = $this->_maxForwards($account);
  2605.                 $maxExternalForwards = $this->_maxExternalForwards($account);
  2606.                 
  2607.                 $forwardsCnt = count($forwards);
  2608.                 $externalForwardsCnt = $this->_externalForwardsCount($forwards, $user->getAccount());
  2609.                 $externalRulesCnt = $this->_numberProcmailRulesEmailExternal($account);
  2610.                 $rulesCnt = $this->_numberProcmailRulesEmail($account);
  2611.                 
  2612.                 if(($forwardsCnt + $rulesCnt + 1) > $maxForwards) {
  2613.                     $this->addFlash('error', $this->translator->trans('Procmail rule NOT saved - limit of forwards exceeded') . ' (' . $maxForwards . '). ' . $this->translator->trans('Forwards used in forwarding') . ': ' . $forwardsCnt . '. ' . $this->translator->trans('Forwards used in sorting') . ': ' . $rulesCnt);
  2614.                     
  2615.                     return $this->render('skins/' . $this->skin . '/q_user/procmail_edit.html.twig', [
  2616.                         'form' => $form->createView(),
  2617.                         'headers' => $headers,
  2618.                     ]);
  2619.                 }
  2620.                 
  2621.                 // check if limit of external forwards is not exceeded
  2622.                 $externalForwardsCnt = $this->_externalForwardsCount($forwards, $user->getAccount());
  2623.                 $currentExternalRules = 0;
  2624.                 
  2625.                 if(AccountTools::isEmailExternal($form->get('destEmail')->getData(), [$user->getAccount()->getUserDomain()])) {
  2626.                     $currentExternalRules = 1;
  2627.                 }
  2628.                 
  2629.                 if(($externalForwardsCnt + $externalRulesCnt + $currentExternalRules) > $maxExternalForwards) {
  2630.                     $this->addFlash('error', $this->translator->trans('Rule NOT added - limit of external forwards exceeded') . ' (' . $maxExternalForwards . '). ' . $this->translator->trans('External forwards used in forwards') . ': ' . $externalForwardsCnt. '. ' . $this->translator->trans('External forwards used in sorting') . ': ' . $externalRulesCnt);
  2631.                     
  2632.                     return $this->render('skins/' . $this->skin . '/q_user/procmail_edit.html.twig', [
  2633.                         'form' => $form->createView(),
  2634.                         'headers' => $headers,
  2635.                     ]);
  2636.                 }
  2637.             }
  2638.             else {
  2639.                 $dest = mb_convert_encoding(urldecode($dest), 'UTF7-imap', 'utf8');
  2640.             }
  2641.             
  2642.             $newRule->setDest($dest);
  2643.             $newRule->setFinal($form->get('last')->getData());
  2644.             
  2645.             try {
  2646.                 Api::saveProcmailRule($newRule);
  2647.             }
  2648.             catch(\Exception $e) {
  2649.                 $this->logger->log('Api::saveProcmailRule() - exception from API', $request, ['error_code' => $e->getCode(), 'error_message' => $e->getMessage()], 'critical');
  2650.                 $this->addFlash('error', $this->translator->trans('Critical error, contact administrator.'));
  2651.                 
  2652.             }
  2653.             
  2654.             $this->addFlash('notice', $this->translator->trans('Rule saved'));
  2655.             $this->addFlash('rowsAffected', $rule->getId());
  2656.             return $this->redirectToRoute('qu_procmail');
  2657.         }
  2658.         elseif($form->isSubmitted() && !$form->isValid()){
  2659.             $this->addFlash('error', $this->translator->trans('Procmail rule NOT saved'));
  2660.         }
  2661.         
  2662.         return $this->render('skins/' . $this->skin . '/q_user/procmail_edit.html.twig', [
  2663.             'form' => $form->createView(),
  2664.             'headers' => $headers,
  2665.         ]);
  2666.         
  2667.     }
  2668.     
  2669.     /**
  2670.      * @Route("/panel/procmail/del/{id}", name="qu_procmail_del")
  2671.      */
  2672.     public function procmailDel(int $id, Request $request)
  2673.     {
  2674.         $user = $this->security->getUser();
  2675.         $account = $user->getAccount();
  2676.         $this->denyAccessUnlessGranted('PROCMAIL', $account);
  2677.         
  2678.         try {
  2679.             $rule = Api::getProcmailRule($id);
  2680.         }
  2681.         catch(\Exception $e) {
  2682.             $this->logger->log('Api::getProcmailRule() - exception from API', $request, ['error_code' => $e->getCode(), 'error_message' => $e->getMessage()], 'critical');
  2683.             $this->addFlash('error', $this->translator->trans('Critical error, contact administrator.'));
  2684.             return $this->redirectToRoute('qu_procmail');
  2685.         }
  2686.         
  2687.         $this->denyAccessUnlessGranted('PROCMAIL', $rule);
  2688.         
  2689.         try {
  2690.             if(Api::deleteProcmailRule($id)) {
  2691.                 $this->logger->log('Procmail rule deleted', $request, ['rule' => $rule->getValue()]);
  2692.                 $this->addFlash('notice', $this->translator->trans('Rule deleted'));
  2693.             }
  2694.         }
  2695.         catch(\Exception $e) {
  2696.             $this->addFlash('error', $this->translator->trans('Rule NOT deleted'));
  2697.         }
  2698.         
  2699.         return $this->redirectToRoute("qu_procmail");
  2700.     }
  2701.     
  2702.     /**
  2703.      * @Route("/panel/procmail/disable/{id}", name="qu_procmail_disable")
  2704.      */
  2705.     public function procmailDisable(int $id, Request $request)
  2706.     {
  2707.         $user = $this->security->getUser();
  2708.         $account = $user->getAccount();
  2709.         $this->denyAccessUnlessGranted('PROCMAIL', $account);
  2710.         
  2711.         try {
  2712.             $rule = Api::getProcmailRule($id);
  2713.         }
  2714.         catch(\Exception $e) {
  2715.             $this->logger->log('Api::getProcmailRule() - exception from API', $request, ['error_code' => $e->getCode(), 'error_message' => $e->getMessage()], 'critical');
  2716.             $this->addFlash('error', $this->translator->trans('Critical error, contact administrator.'));
  2717.             return $this->redirectToRoute('qu_procmail');
  2718.         }
  2719.         
  2720.         $this->denyAccessUnlessGranted('PROCMAIL', $rule);
  2721.         
  2722.         if(Api::disableProcmailRule($id)) {
  2723.             $this->logger->log('Procmail rule disabled', $request, ['rule' => $rule->getValue()]);
  2724.             $this->addFlash('notice', $this->translator->trans('Rule disabled'));
  2725.             $this->addFlash('rowsAffected', $id);
  2726.         }
  2727.         else {
  2728.             $this->addFlash('error', $this->translator->trans('Rule NOT disabled'));
  2729.         }
  2730.         
  2731.         return $this->redirectToRoute("qu_procmail");
  2732.     }
  2733.     
  2734.     /**
  2735.      * @Route("/panel/procmail/enable/{id}", name="qu_procmail_enable")
  2736.      */
  2737.     public function procmailEnable(int $id, Request $request)
  2738.     {
  2739.         $user = $this->security->getUser();
  2740.         $account = $user->getAccount();
  2741.         $this->denyAccessUnlessGranted('PROCMAIL', $account);
  2742.         
  2743.         try {
  2744.             $rule = Api::getProcmailRule($id);
  2745.         }
  2746.         catch(\Exception $e) {
  2747.             $this->logger->log('Api::getProcmailRule() - exception from API', $request, ['error_code' => $e->getCode(), 'error_message' => $e->getMessage()], 'critical');
  2748.             $this->addFlash('error', $this->translator->trans('Critical error, contact administrator.'));
  2749.             return $this->redirectToRoute('qu_procmail');
  2750.         }
  2751.         
  2752.         $this->denyAccessUnlessGranted('PROCMAIL', $rule);
  2753.             
  2754.         if(Api::enableProcmailRule($id)) {
  2755.             $this->logger->log('Procmail rule disabled', $request, ['rule id' => $id]);
  2756.             $this->addFlash('notice', $this->translator->trans('Rule enabled'));
  2757.             $this->addFlash('rowsAffected', $id);
  2758.         }
  2759.         else {
  2760.             $this->addFlash('error', $this->translator->trans('Rule NOT enabled'));
  2761.         }
  2762.         
  2763.         return $this->redirectToRoute("qu_procmail");
  2764.     }    
  2765.     
  2766.     /**
  2767.      * @Route("/panel/procmail/ruleup/{id}", name="qu_procmail_ruleup")
  2768.      */
  2769.     public function procmailUp(int $id, Request $request)
  2770.     {
  2771.        return $this->_procmailMove($id, 'up', $request); 
  2772.     }
  2773.     
  2774.     /**
  2775.      * @Route("/panel/procmail/ruledown/{id}", name="qu_procmail_ruledown")
  2776.      */
  2777.     public function procmailDown(int $id, Request $request)
  2778.     {
  2779.         return $this->_procmailMove($id, 'down', $request);
  2780.     }
  2781.        
  2782.     /**
  2783.      * 
  2784.      */
  2785.     private function _procmailMove(int $id, string $direction, Request $request)
  2786.     {
  2787.         $user = $this->security->getUser();
  2788.         $account = $user->getAccount();
  2789.         $this->denyAccessUnlessGranted('PROCMAIL', $account);
  2790.         
  2791.         try {
  2792.             $rule = Api::getProcmailRule($id);
  2793.         }
  2794.         catch(\Exception $e) {
  2795.             $this->logger->log('Api::getProcmailRule() - exception from API', $request, ['error_code' => $e->getCode(), 'error_message' => $e->getMessage()], 'critical');
  2796.             $this->addFlash('error', $this->translator->trans('Critical error, contact administrator.'));
  2797.             return $this->redirectToRoute('qu_procmail');
  2798.         }
  2799.         
  2800.         $this->denyAccessUnlessGranted('PROCMAIL', $rule);
  2801.         
  2802.         if($direction == 'up') {
  2803.             if(Api::procmailRuleMoveUp($id)) {
  2804.                 $this->addFlash('notice', $this->translator->trans('Rule moved up'));
  2805.                 $this->addFlash('rowsAffected', $id);
  2806.             }
  2807.             else {
  2808.                 $this->addFlash('error', $this->translator->trans('Rule NOT moved up'));
  2809.             }
  2810.         }
  2811.         else {
  2812.             if(Api::procmailRuleMoveDown($id)) {
  2813.                 $this->addFlash('notice', $this->translator->trans('Rule moved down'));
  2814.                 $this->addFlash('rowsAffected', $id);
  2815.             }
  2816.             else {
  2817.                 $this->addFlash('error', $this->translator->trans('Rule NOT moved down'));
  2818.             }
  2819.         }
  2820.             
  2821.         return $this->redirectToRoute("qu_procmail");
  2822.     }
  2823.     
  2824.     
  2825.     /**
  2826.      * @Route("/panel/dirs", name="qu_imap")
  2827.      */
  2828.     public function imapDirs(Request $request)
  2829.     {        
  2830.         $user = $this->security->getUser();
  2831.         $account = $user->getAccount();
  2832.         $this->denyAccessUnlessGranted('IMAP', $account);
  2833.         
  2834.         $form = $this->createForm(Imap::class);
  2835.         $form->get('path')->setData('delete');
  2836.         
  2837.         $formMass = $this->createForm(ImapMass::class);
  2838.         $form->handleRequest($request);
  2839.         
  2840.         try {
  2841.             $folders = Api::getImapDirs($account);
  2842.         }
  2843.         catch(\Exception $e) {
  2844.             $this->logger->log('Api::getImapDirs() - exception from API', $request, ['error_code' => $e->getCode(), 'error_message' => $e->getMessage()], 'critical');
  2845.             $this->addFlash('error', $this->translator->trans('Critical error, contact administrator.'));
  2846.             return $this->redirectToRoute('qu_main');
  2847.         }
  2848.         
  2849.         $imapUserDomainArr = $this->_getImapUserDomain($account);
  2850.         
  2851.         try {
  2852.             $subscribedFolders = Api::getImapSubscribedDirs($imapUserDomainArr[0], $imapUserDomainArr[1], AccountTools::decryptString($this->requestStack->getSession()->get('storedPassword')));
  2853.         }
  2854.         catch(\Exception $e) {
  2855.             $this->logger->log('Api::getImapSubscribedDirs() - exception from API', $request, ['error_code' => $e->getCode(), 'error_message' => $e->getMessage()], 'critical');
  2856.             $this->addFlash('error', $this->translator->trans('Critical error, contact administrator.'));
  2857.             return $this->redirectToRoute('qu_main');
  2858.         }
  2859.         
  2860.         usort($folders, '\App\Model\ImapDir::cmpObjects');
  2861.         $inbox = new ImapDir();
  2862.         $inbox->setName('INBOX');
  2863.         
  2864.         try {
  2865.             $inbox->setCount(Api::getImapCount($account, 'INBOX'));
  2866.         }
  2867.         catch(\Exception $e) {
  2868.             $this->logger->log('Api::getImapCount() - exception from API', $request, ['error_code' => $e->getCode(), 'error_message' => $e->getMessage()], 'critical');
  2869.             $this->addFlash('error', $this->translator->trans('Critical error, contact administrator.'));
  2870.             return $this->redirectToRoute('qu_main');
  2871.         }
  2872.             
  2873.         array_unshift($folders, $inbox);
  2874.         $folders = AccountTools::dirsChildren($folders, "", 0);        
  2875.         
  2876.         if(!$form->isSubmitted()) {
  2877.             $form->get('path')->setData('.');
  2878.         }
  2879.         
  2880.         if($form->isSubmitted() && $form->isValid()) {
  2881.             $folderToAdd = mb_convert_encoding($form->get('folder')->getData(), 'UTF7-imap', 'utf8');
  2882.             $path = mb_convert_encoding($form->get('path')->getData(), 'UTF7-imap', 'utf8');
  2883.              
  2884.             if(strlen($path) > 0) {
  2885.                 if($path != '.') {
  2886.                     $folderToAdd = $path . '.' . $folderToAdd;
  2887.                 }
  2888.             }
  2889.             
  2890.             try {    
  2891.                 Api::addImapDir($account, $folderToAdd);
  2892.             }
  2893.             catch(\Exception $e) {
  2894.                 if(strstr($e->getMessage(), 'already exists')) {
  2895.                     $this->addFlash('error', $this->translator->trans('Folder already exists. New folder NOT added.'));
  2896.                 }
  2897.                 else {
  2898.                     $this->logger->log('Api::addImapDir() - exception from API', $request, ['error_code' => $e->getCode(), 'error_message' => $e->getMessage()], 'critical');
  2899.                     $this->addFlash('error', $this->translator->trans('Critical error, contact administrator.'));
  2900.                 }
  2901.                 
  2902.                 return $this->redirectToRoute('qu_imap');
  2903.             }
  2904.             
  2905.              $this->logger->log('New folder added', $request, ['folder' => $form->get('folder')->getData()]);
  2906.              $this->addFlash('notice', $this->translator->trans('New folder added'));
  2907.              $this->addFlash('rowsAffected', $folderToAdd); // highlight the new one
  2908.              return $this->redirectToRoute('qu_imap');
  2909.         }
  2910.         elseif($form->isSubmitted() && !$form->isValid()){
  2911.             $this->addFlash('error', $this->translator->trans('New folder NOT added'));
  2912.         }
  2913.         
  2914.         return $this->render('skins/' . $this->skin . '/q_user/imap_dirs.html.twig', [
  2915.             'form' => $form->createView(),
  2916.             'formMass' => $formMass->createView(),
  2917.             'folders' => $folders,
  2918.             'subscribedFolders' => $subscribedFolders,
  2919.         ]);
  2920.         
  2921.     }
  2922.     
  2923.     /**
  2924.      * @Route("/panel/dirs/mass", name="qu_imap_mass")
  2925.      */
  2926.     public function imapDirsMassAction(Request $request) {
  2927.         $user = $this->security->getUser();
  2928.         $account = $user->getAccount();
  2929.         $this->denyAccessUnlessGranted('IMAP', $account);
  2930.         $form = $this->createForm(ImapMass::class);
  2931.         $form->handleRequest($request);
  2932.         
  2933.         if($form->isSubmitted() && $form->isValid()) {
  2934.             $selected = $request->request->get('foldersMassCheckbox');
  2935.             $actionFailed = false;
  2936.             
  2937.             foreach($selected as $dir) {
  2938.                 // we have to url-decode, than encode from UTF-8 to UTF-7
  2939.                 $dir = urldecode($dir);
  2940.                 $dir = mb_convert_encoding($dir, 'UTF7-imap', 'utf8');
  2941.                 
  2942.                 if(Api::deleteImapDir($account, $dir)) {
  2943.                     $this->logger->log('Imap directory deleted', $request, ['dir' => urldecode($dir)]);
  2944.                 }
  2945.                 else {
  2946.                     $actionFailed = true;
  2947.                 }
  2948.             }
  2949.             
  2950.             if($actionFailed) {
  2951.                 $this->addFlash('error', $this->translator->trans('NOT ALL folders deleted'));
  2952.             }
  2953.             else {
  2954.                 $this->addFlash('notice', $this->translator->trans('All folders successfuly deleted'));
  2955.             }
  2956.         }
  2957.         
  2958.         return $this->redirectToRoute("qu_imap");
  2959.     }
  2960.     
  2961.     
  2962.     /**
  2963.      * @Route("/panel/dirs/del/{dir}", name="qu_imap_del")
  2964.      */
  2965.     public function imapDirsDel(String $dir, Request $request)
  2966.     {
  2967.         $user = $this->security->getUser();
  2968.         $account = $user->getAccount();
  2969.         $this->denyAccessUnlessGranted('IMAP', $account);
  2970.         
  2971.         if($dir == 'INBOX') {
  2972.             $this->logger->log('Try to delete INBOX', $request, ['dir' => urldecode($dir)], 'critical');
  2973.             return $this->redirectToRoute("qu_imap");
  2974.         }
  2975.         
  2976.         $dir = urldecode($dir);
  2977.         $dir = mb_convert_encoding($dir, 'UTF7-imap', 'utf8');
  2978.         
  2979.         if(Api::deleteImapDir($account, $dir)) {
  2980.             $this->logger->log('Imap directory deleted', $request, ['dir' => urldecode($dir)]);
  2981.             $this->addFlash('notice', $this->translator->trans('Folder deleted'));
  2982.         }
  2983.         else {
  2984.             $this->logger->log('Imap directory NOT deleted - error', $request, ['dir' => urldecode($dir)]);
  2985.             $this->addFlash('error', $this->translator->trans('Folder NOT deleted'));
  2986.         }
  2987.         
  2988.         return $this->redirectToRoute("qu_imap");
  2989.     }
  2990.     
  2991.     /**
  2992.      * @Route("/panel/dirs/edit/{dir}", name="qu_imap_edit")
  2993.      */
  2994.     public function imapDirsEdit(String $dir, Request $request)
  2995.     {
  2996.         $user = $this->security->getUser();
  2997.         $account = $user->getAccount();
  2998.         $this->denyAccessUnlessGranted('IMAP', $account);
  2999.         
  3000.         if($dir == 'INBOX') {
  3001.             $this->logger->log('Try to edit INBOX', $request, ['dir' => urldecode($dir)], 'critical');
  3002.             return $this->redirectToRoute("qu_imap");
  3003.         }
  3004.         
  3005.         // we have to url-decode, than encode from UTF-8 to UTF-7 and url-encode again
  3006.         $dir = urldecode($dir);
  3007.         
  3008.         $form = $this->createForm(Imap::class);
  3009.         $form->handleRequest($request);
  3010.         $whitespaceWarning = false;
  3011.         
  3012.         if(!$form->isSubmitted()) {
  3013.             // we need to split $dir - last part is a folder name, previous part - path
  3014.             $dirArr = explode('.', $dir);
  3015.             $form->get('folder')->setData($dirArr[sizeof($dirArr) -  1]);
  3016.             $folder = $form->get('folder')->getData();
  3017.             
  3018.             if($folder != trim($folder)) {
  3019.                 $whitespaceWarning = true;
  3020.             }
  3021.             
  3022.             unset($dirArr[sizeof($dirArr) -  1]);
  3023.             $path = implode('.', $dirArr);
  3024.             
  3025.             if($path == "") {
  3026.                 $path = ".";
  3027.             }
  3028.             
  3029.             $form->get('path')->setData($path);
  3030.         }
  3031.         
  3032.         if($form->isSubmitted() && $form->isValid()) {
  3033.             $from = mb_convert_encoding($dir, 'UTF7-imap', 'utf8');
  3034.             $to = mb_convert_encoding($form->get('folder')->getData(), 'UTF7-imap', 'utf8');
  3035.             $path = mb_convert_encoding($form->get('path')->getData(), 'UTF7-imap', 'utf8');
  3036.             
  3037.             if(strlen($path) > 0) {
  3038.                 if($path != '.') {
  3039.                     $to = $path . '.' . $to;
  3040.                 }
  3041.             }
  3042.                         
  3043.             if(Api::renameImapDir($account, $from, $to)) {
  3044.                 $this->logger->log('Imap directory renamed', $request, [
  3045.                         'dirOld' => $from, 'dirNew' => $to]);
  3046.                 $this->addFlash('notice', $this->translator->trans('Folder renamed'));
  3047.                 $this->addFlash('rowsAffected', $to);
  3048.                 return $this->redirectToRoute('qu_imap');
  3049.             }
  3050.             else {
  3051.                 $this->addFlash('error', $this->translator->trans('Folder NOT renamed'));
  3052.             }
  3053.         }
  3054.         elseif($form->isSubmitted() && !$form->isValid()){
  3055.             $this->addFlash('error', $this->translator->trans('Folder NOT renamed'));
  3056.         }
  3057.         
  3058.         return $this->render('skins/' . $this->skin . '/q_user/imap_dirs_edit.html.twig', [
  3059.             'form' => $form->createView(),
  3060.             'whitespaceWarning' => $whitespaceWarning,
  3061.         ]);
  3062.     }
  3063.     
  3064.     /**
  3065.      * @Route("/panel/dirs/subscribe/{dir}", name="qu_imap_subscribe")
  3066.      * dir in UTF7-imap, urlencoded
  3067.      */
  3068.     public function imapDirsSubscribe(String $dir, Request $request)
  3069.     {
  3070.         $user = $this->security->getUser();
  3071.         $account = $user->getAccount();
  3072.         $this->denyAccessUnlessGranted('IMAP', $account);
  3073.         
  3074.         if($dir == 'INBOX') {
  3075.             $this->logger->log('Try to subscribe INBOX', $request, ['dir' => urldecode($dir)], 'critical');
  3076.             return $this->redirectToRoute("qu_imap");
  3077.         }
  3078.         
  3079.         $imapUserDomainArr = $this->_getImapUserDomain($account);
  3080.         
  3081.         try {
  3082.             Api::subscribeImapDir($imapUserDomainArr[0], $imapUserDomainArr[1], AccountTools::decryptString($this->requestStack->getSession()->get('storedPassword')), $dir);
  3083.         }
  3084.         catch(\Exception $e) {
  3085.             $this->logger->log('Api::imapDirsSubscribe() - exception from API', $request, ['error_code' => $e->getCode(), 'error_message' => $e->getMessage()], 'critical');
  3086.             $this->addFlash('error', $this->translator->trans('Critical error, contact administrator.'));
  3087.         }
  3089.         return $this->redirectToRoute('qu_imap');
  3090.     }
  3091.     
  3092.     /**
  3093.      * @Route("/panel/dirs/unsubscribe/{dir}", name="qu_imap_unsubscribe")
  3094.      * dir in UTF7-imap, urlencoded
  3095.      */
  3096.     public function imapDirsUnsubscribe(String $dir, Request $request)
  3097.     {
  3098.         $user = $this->security->getUser();
  3099.         $account = $user->getAccount();
  3100.         $this->denyAccessUnlessGranted('IMAP', $account);
  3101.         
  3102.         if($dir == 'INBOX') {
  3103.             $this->logger->log('Try to subscribe INBOX', $request, ['dir' => urldecode($dir)], 'critical');
  3104.             return $this->redirectToRoute("qu_imap");
  3105.         }
  3106.         
  3107.         $imapUserDomainArr = $this->_getImapUserDomain($account);
  3108.         
  3109.         try {
  3110.             Api::unsubscribeImapDir($imapUserDomainArr[0], $imapUserDomainArr[1], AccountTools::decryptString($this->requestStack->getSession()->get('storedPassword')), $dir);
  3111.         }
  3112.         catch(\Exception $e) {
  3113.             $this->logger->log('Api::imapDirsUnsubscribe() - exception from API', $request, ['error_code' => $e->getCode(), 'error_message' => $e->getMessage()], 'critical');
  3114.             $this->addFlash('error', $this->translator->trans('Critical error, contact administrator.'));
  3115.         }
  3116.         
  3117.         return $this->redirectToRoute('qu_imap');
  3118.     }
  3119.     
  3120.     /**
  3121.      * @Route("/panel/noticesms", name="qu_noticesms")
  3122.      */
  3123.     public function noticeSms(Request $request)
  3124.     {        
  3125.         $user = $this->security->getUser();
  3126.         $account = $user->getAccount();
  3127.         $this->denyAccessUnlessGranted('NOTICESMS', $account);
  3128.         
  3129.         $form = $this->createForm(NoticeSMS::class);
  3130.         $form->handleRequest($request);
  3131.         
  3132.         try {
  3133.             $rule = Api::getSMSRule($account);
  3134.         }
  3135.         catch(\Exception $e) { 
  3136.             $rule = new ProcmailRule();
  3137.             $rule->setId(-1);
  3138.             $rule->setType('sms');
  3139.             $rule->setDest('NA');
  3140.             $rule->setOwner($account->userAddress());
  3141.             $rule->setNo(0);
  3142.             $rule->setFinal(0);
  3143.         }
  3144.         
  3145.         try {
  3146.             $localForwarding = Api::getForwardLocal($account);
  3147.         }
  3148.         catch(\Exception $e) {
  3149.             $this->logger->log('Api::getForwardLocal() - exception from API', $request, ['error_code' => $e->getCode(), 'error_message' => $e->getMessage()], 'critical');
  3150.             $this->addFlash('error', $this->translator->trans('Critical error, contact administrator.'));
  3151.             return $this->redirectToRoute('qu_main');
  3152.         }
  3153.                 
  3154.         if(!$form->isSubmitted()) {
  3155.             if(strlen($rule->getValue()) > 0) {
  3156.                 $form->get('address')->setData($rule->getValue());
  3157.             }
  3158.         }
  3159.         
  3160.         if($form->isSubmitted() && $form->isValid()) {
  3161.             // check if given address is not user's address on alias pointing to it
  3162.             // to prevent email loops
  3163.             if(strcmp($form->get('address')->getData(), $account->userAddress()) == 0) {
  3164.                 $this->logger->log("noticeSMS - prevented saving user's own email address as a notification address", $request, ['accountName' => $account->userAddress()]);
  3165.                 $this->addFlash('error', $this->translator->trans('You cannot add your own email address as a notification address'));
  3166.                 
  3167.                 return $this->render('skins/' . $this->skin . '/q_user/noticesms.html.twig', [
  3168.                     'form' => $form->createView(),
  3169.                     'localForwarding' => $localForwarding,
  3170.                 ]);
  3171.             }
  3172.             
  3173.             $aliasFilter = [];
  3174.             $aliasFilter['target_alias'] = $account->userAddress();
  3175.             
  3176.             try {
  3177.                 $aliases = Api::listAliases($aliasFilter);
  3178.             }
  3179.             catch(\Exception $e) {
  3180.                 $this->logger->log('Api::listAliases() - exception from API', $request, ['error_code' => $e->getCode(), 'error_message' => $e->getMessage()], 'critical');
  3181.                 $this->addFlash('error', $this->translator->trans('Critical error, contact administrator.'));
  3182.                 return $this->redirectToRoute('qu_noticesms');
  3183.             }
  3184.             
  3185.             foreach($aliases as $alias) {
  3186.                 if(strcmp($alias->getSrc(), $form->get('address')->getData()) == 0) {
  3187.                     $this->logger->log("noticeSMS - prevented saving user's own alias as a notification address", $request, ['accountName' => $account->userAddress()]);
  3188.                     $this->addFlash('error', $this->translator->trans('You cannot add your own alias as a notification address'));
  3189.                     
  3190.                     return $this->render('skins/' . $this->skin . '/q_user/noticesms.html.twig', [
  3191.                         'form' => $form->createView(),
  3192.                         'localForwarding' => $localForwarding,
  3193.                     ]);
  3194.                 }
  3195.             }
  3196.             
  3197.             $rule->setValue($form->get('address')->getData());
  3198.             
  3199.             if($rule->getId() != -1) {
  3200.                 try {
  3201.                     Api::saveProcmailRule($rule);
  3202.                 }
  3203.                 catch(\Exception $e) {
  3204.                     $this->logger->log('Api::saveProcmailRule() - exception from API', $request, ['error_code' => $e->getCode(), 'error_message' => $e->getMessage()], 'critical');
  3205.                     $this->addFlash('error', $this->translator->trans('Critical error, contact administrator.'));
  3206.                     return $this->redirectToRoute('qu_noticesms');
  3207.                 }
  3208.             }
  3209.             else {
  3210.                 try {
  3211.                     Api::addProcmailRule($rule);
  3212.                 }
  3213.                 catch(\Exception $e) {
  3214.                     $this->logger->log('Api::addProcmailRule() - exception from API', $request, ['error_code' => $e->getCode(), 'error_message' => $e->getMessage()], 'critical');
  3215.                     $this->addFlash('error', $this->translator->trans('Critical error, contact administrator.'));
  3216.                     return $this->redirectToRoute('qu_noticesms');
  3217.                 }
  3218.             }
  3219.             
  3220.             $this->addFlash('notice', $this->translator->trans('Mobile notification added'));
  3221.             $this->logger->log('Mobile notification added', $request, ['address' => $rule->getValue()]);
  3222.             return $this->redirectToRoute('qu_noticesms');
  3223.         }
  3224.         elseif($form->isSubmitted() && !$form->isValid()){
  3225.             $this->addFlash('error', $this->translator->trans('SMS notice NOT set'));
  3226.         }
  3227.         
  3228.         return $this->render('skins/' . $this->skin . '/q_user/noticesms.html.twig', [
  3229.             'form' => $form->createView(),
  3230.             'localForwarding' => $localForwarding,
  3231.         ]);
  3232.         
  3233.     }
  3234.     
  3235.     /**
  3236.      * @Route("/panel/noticesms/del", name="qu_noticesms_del")
  3237.      */
  3238.     public function noticeSmsDel(Request $request)
  3239.     {
  3240.         $user = $this->security->getUser();
  3241.         $account = $user->getAccount();
  3242.         $this->denyAccessUnlessGranted('NOTICESMS', $account);
  3243.         
  3244.         try {
  3245.             $rule = Api::getSMSRule($account);
  3246.         }
  3247.         catch(\Exception $e) {
  3248.             $this->logger->log('trying to delete non-existante SMS notice', $request, ['error_code' => $e->getCode(), 'error_message' => $e->getMessage()], 'warning');
  3249.             $this->addFlash('error', $this->translator->trans('Deleting SMS notification not possible.'));
  3250.             return $this->redirectToRoute('qu_noticesms');
  3251.         }
  3252.         
  3253.         try {
  3254.             if(Api::deleteProcmailRule($rule->getId())) {
  3255.                 $this->logger->log('Mobile notification deleted', $request);
  3256.                 $this->addFlash('notice', $this->translator->trans('Mobile notification deleted'));
  3257.             }
  3258.         }
  3259.         catch(\Exception $e) {
  3260.             $this->logger->log('Api::deleteProcmailRule() - exception from API', $request, ['error_code' => $e->getCode(), 'error_message' => $e->getMessage()], 'critical');
  3261.             $this->addFlash('error', $this->translator->trans('Critical error, contact administrator.'));
  3262.             return $this->redirectToRoute('qu_noticesms');
  3263.         }
  3264.         
  3265.         return $this->redirectToRoute("qu_noticesms");
  3266.     }
  3267.     
  3268.     
  3269.     /**
  3270.      * @Route("/panel/stats", name="qu_stats")
  3271.      */
  3272.     public function stats(Request $request)
  3273.     {
  3274.         $stats = [];
  3275.         
  3276.         $user = $this->security->getUser();
  3277.         $account = $user->getAccount();
  3278.         $this->denyAccessUnlessGranted('STATS', $account);
  3279.         $autoresponderStatus = '';
  3280.         
  3281.         try {
  3282.             $forwards = Api::getForwards($account);
  3283.             $localForwarding = Api::getForwardLocal($account);
  3284.             $folders = Api::getImapDirs($account);
  3285.             $rules = Api::getProcmailRules($account);
  3286.             $this->_getAutoresponderForUser($account, $autoresponderStatus);
  3287.             $saStatus = Api::getSAProtection($account);
  3288.         }
  3289.         catch(\Exception $e) {
  3290.             $this->logger->log('Api - get functions - exception from API', $request, ['error_code' => $e->getCode(), 'error_message' => $e->getMessage()], 'critical');
  3291.             $this->addFlash('error', $this->translator->trans('Critical error, contact administrator.'));
  3292.             return $this->redirectToRoute('qu_main');
  3293.         }
  3294.         
  3295.         try {
  3296.             $smsRule = Api::getSMSRule($account);
  3297.             
  3298.             if($smsRule != null) {
  3299.                 $smsStatus = true;
  3300.             }
  3301.         }
  3302.         catch(\Exception $e) {
  3303.             $smsStatus = false;
  3304.         }
  3305.             
  3306.         
  3307.         $stats['forwards'] = sizeof($forwards);
  3308.         $stats['folders'] = sizeof($folders);
  3309.         $stats['filters'] = sizeof($rules);
  3310.         $stats['autoresponderStatus'] = $autoresponderStatus; // string, because can have 3 different states
  3311.         $stats['antispamStatus'] = $saStatus;
  3312.         $stats['smsStatus'] = $smsStatus;
  3313.         $stats['deliveryStatus'] = $localForwarding;
  3314.         
  3315.         return $this->render('skins/' . $this->skin . '/q_user/user_stats.html.twig', [
  3316.             'stats' => $stats,
  3317.         ]);
  3318.     }
  3319.     
  3320.     /**
  3321.      * @Route("/panel/settings", name="qu_settings")
  3322.      */
  3323.     public function settings(Request $request)
  3324.     {
  3325.         $user = $this->security->getUser();
  3326.         $user->loadAccount();
  3327.         $account = $user->getAccount();
  3328.         $this->denyAccessUnlessGranted('SETTINGS', $account);
  3330.         $twoFactorAllowed = false;
  3331.         $twoFactorGoogleAllowed = false;
  3332.         $twoFactorMethod = 'email';
  3333.         $qrCodeDataUri = null;
  3334.         $serviceDomain = $request->getHost();
  3336.         if(isset($_SERVER['APP_2FA_ALLOWED'])) {
  3337.             if($_SERVER['APP_2FA_ALLOWED'] == 'true') {
  3338.                 $twoFactorAllowed = true;
  3339.             }
  3340.         }
  3342.         if(isset($_SERVER['APP_2FA_GOOGLE_ALLOWED'])) {
  3343.             if($_SERVER['APP_2FA_GOOGLE_ALLOWED'] == 'true') {
  3344.                 $twoFactorGoogleAllowed = true;
  3345.             }
  3346.         }
  3348.         try {
  3349.             $d = Api::getDomain($account->getUserDomain());
  3350.         }
  3351.         catch(\Exception $e) {
  3352.             $this->addFlash('error', $this->translator->trans('Domain settings not available'));
  3353.             $this->logger->log('Error while getting domain ' . $account->getUserDomain(), $request, ['accountName' => $account->getUsername()]);
  3354.             return $this->redirectToRoute('qp_main');
  3355.         }
  3356.         
  3357.         $domainMaxForwards = $d->findOption('cfgMaxForwards') == null ? (isset($_SERVER['APP_DEFAULT_MAX_FORWARDS']) ? $_SERVER['APP_DEFAULT_MAX_FORWARDS'] : 10) : $d->findOption('cfgMaxForwards');
  3358.         $domainMaxExternalForwards = $d->findOption('cfgMaxExternalForwards') == null ? 0 : $d->findOption('cfgMaxExternalForwards');
  3359.         $form = $this->createForm(Settings::class);
  3360.         $form->handleRequest($request);
  3361.         
  3362.         $confirmKeys = ['Forward', 'Autoresponder', 'AutoresponderRcpt', 'SpamassassinReset',
  3363.             'SpamassassinList', 'SpamassassinLangs', 'Imap', 'ImapMails', 'Procmail', 'Mobile' 
  3364.         ];
  3365.         
  3366.         $forceLoginTarget = false;
  3367.         
  3368.         if(isset($_SERVER['APP_LOGIN_TARGET'])) {
  3369.             $forceLoginTarget = true;
  3370.         }
  3371.         
  3372.         if(!$form->isSubmitted()) {
  3373.             $sessionTime = $account->findSOption('cfgSessionTime') == null ? $this->params->get('session_max_idle_time') : $account->findSOption('cfgSessionTime');
  3374.             $loginTarget = $account->findSOption('cfgLoginTarget') == null ? 'form' : $account->findSOption('cfgLoginTarget');
  3375.             
  3376.             // pagination from user's config. If not set - from env. If not set - from Account const
  3377.             $historyPagination = $account->findSOption('cfgUserHistoryPagination') == null ?
  3378.             (isset($_SERVER['APP_DEFAULT_PER_PAGE']) ? $_SERVER['APP_DEFAULT_PER_PAGE'] : Account::NUMBER_OF_ITEMS)
  3379.             : $account->findSOption('cfgUserHistoryPagination');
  3380.             
  3381.             // pagination from user's config. If not set - from env. If not set - from Account const
  3382.             $pagination = $account->findSOption('cfgUserPagination') == null ?
  3383.             (isset($_SERVER['APP_DEFAULT_PER_PAGE']) ? $_SERVER['APP_DEFAULT_PER_PAGE'] : Account::NUMBER_OF_ITEMS)
  3384.             : $account->findSOption('cfgUserPagination');
  3385.             
  3386.             $saMaxScore = $account->findSOption('cfgSAMaxScore') == null ? UserPref::SA_MAX_SCORE : $account->findSOption('cfgSAMaxScore');
  3387.             $forceWebmailLang = $account->findSOption('cfgForceWebmailLang') == null ? 'yes' : $account->findSOption('cfgForceWebmailLang');
  3388.             $maxForwards = $account->findSOption('cfgMaxForwards') == null ? $domainMaxForwards : $account->findSOption('cfgMaxForwards');
  3389.             $maxExternalForwards = $account->findSOption('cfgMaxExternalForwards') == null ? $domainMaxExternalForwards : $account->findSOption('cfgMaxExternalForwards');
  3390.             $skin = $account->findSOption('cfgSkin') == null ? 'standard' : $account->findSOption('cfgSkin');
  3391.             $emailForAuth = $account->findSOption('cfgEmailForAuth') == null ? '' : $account->findSOption('cfgEmailForAuth');
  3392.             $twoFactorEnabled = $account->findSOption('cfgTwoFactorEnabled') == null ? false : ($account->findSOption('cfgTwoFactorEnabled') == '1' ? true : false);
  3393.             $emailForAuthConfirmed = $account->findSOption('emailForAuthConfirmed') == null ? false : ($account->findSOption('emailForAuthConfirmed') == '1' ? true : false);
  3394.             $twoFactorMethod = $account->findSOption('cfgTwoFactorMethod') == null ? 'email' : $account->findSOption('cfgTwoFactorMethod');
  3395.             $confirms = [];
  3396.             
  3397.             foreach($confirmKeys as $opt) {
  3398.                 if($account->findSOption('cfgDontConfirm' . $opt) == null) {
  3399.                     $confirms[] = $opt;
  3400.                 }
  3401.             }
  3402.             
  3403.             $form->get('sessionTime')->setData($sessionTime);
  3404.             $form->get('loginTarget')->setData($loginTarget);
  3405.             $form->get('confirms')->setData($confirms);
  3406.             $form->get('historyPagination')->setData($historyPagination);
  3407.             $form->get('pagination')->setData($pagination);
  3408.             $form->get('saMaxScore')->setData($saMaxScore);
  3409.             $form->get('forceWebmailLang')->setData($forceWebmailLang);
  3410.             $form->get('maxForwards')->setData($maxForwards);
  3411.             $form->get('maxExternalForwards')->setData($maxExternalForwards);
  3412.             $form->get('skin')->setData($skin);
  3413.             $form->get('emailForAuth')->setData($emailForAuth);
  3414.             $form->get('twoFactorEnabled')->setData($twoFactorEnabled);
  3415.             $form->get('twoFactorMethod')->setData($twoFactorMethod);
  3416.         }
  3417.         
  3418.         if($form->isSubmitted() && $form->isValid()) {
  3419.             // wykrywanie zmiany metody 2FA na google
  3420.             $prevTwoFactorMethod = $account->findSOption('cfgTwoFactorMethod') ?? 'email';
  3421.             $prevTwoFactorEnabled = $account->findSOption('cfgTwoFactorEnabled') == '1';
  3422.             $newTwoFactorMethod = $form->get('twoFactorMethod')->getData();
  3423.             $newTwoFactorEnabled = $form->get('twoFactorEnabled')->getData();
  3424.             if (
  3425.                 ($prevTwoFactorMethod !== 'google' && $newTwoFactorMethod === 'google') ||
  3426.                 (!$prevTwoFactorEnabled && $newTwoFactorEnabled && $newTwoFactorMethod === 'google')
  3427.             ) {
  3428.                 $request->getSession()->set('showQrAfterSave', true);
  3429.             }
  3431.             
  3433.             $account->setSOption('cfgUserHistoryPagination', $form->get('historyPagination')->getData());
  3434.             $account->setSOption('cfgUserPagination', $form->get('pagination')->getData());
  3435.             $account->setSOption('cfgSAMaxScore', $form->get('saMaxScore')->getData());
  3436.             $account->setSOption('cfgSessionTime', $form->get('sessionTime')->getData());
  3437.             $account->setSOption('cfgLoginTarget', $form->get('loginTarget')->getData());
  3438.             $account->setSOption('cfgForceWebmailLang', $form->get('forceWebmailLang')->getData());
  3439.             $account->setSOption('cfgSkin', $form->get('skin')->getData());
  3441.             $emailForAuth = $account->findSOption('cfgEmailForAuth') == null ? '' : $account->findSOption('cfgEmailForAuth');
  3442.             $showInfoAbout2FA = false;
  3444.             if($twoFactorAllowed) {
  3445.                 $saveEmailForAuth = true;
  3446.                 
  3447.                 if($emailForAuth != $form->get('emailForAuth')->getData()) {
  3448.                     // new email address for auth confirmations
  3449.                     $account->setSOption('emailForAuthConfirmed', '');
  3450.                     $account->setSOption('cfgTwoFactorEnabled', '');
  3451.                     $showInfoAbout2FA = true;
  3453.                     $tf = new TwoFactor($this->translator);
  3455.                     $newAuthToken = $tf->generateNewAuthToken($account);
  3457.                     $emailText = $tf->createEmailForNewAuthConnection($newAuthToken, $this->generateUrl('check-two-factor', ['token' => $newAuthToken], UrlGeneratorInterface::ABSOLUTE_URL));
  3458.                     $from = $tf->getFromAddress();
  3459.                     $subject = $tf->getNewEmailForAuthSubject();
  3461.                     $emailTo = $form->get('emailForAuth')->getData();
  3463.                     if(!is_null($emailTo)) {
  3464.                         $email = (new Email())
  3465.                             ->subject($subject)
  3466.                             ->from($from)
  3467.                             ->to($emailTo)
  3468.                             ->text($emailText)
  3469.                         ;
  3471.                         try {
  3472.                             $this->mailer->send($email);
  3473.                         }
  3474.                         catch(\Exception $e) {
  3475.                             $this->logger->log('Error while sending email for 2FA', $request, ['error_code' => $e->getCode(), 'error_message' => $e->getMessage()], 'critical');
  3476.                             $this->addFlash('error', $this->translator->trans('Error while sending email for 2FA'));
  3477.                             $showInfoAbout2FA = false;
  3478.                             $saveEmailForAuth = false;
  3479.                         }
  3480.                     }
  3481.                     else {
  3482.                         $showInfoAbout2FA = false;
  3483.                     }
  3484.                 }
  3485.                 else {
  3486.                     if($form->get('twoFactorEnabled')->getData()) {
  3487.                         $account->setSOption('cfgTwoFactorEnabled', '1');
  3488.                     }
  3489.                     else {
  3490.                         $account->setSOption('cfgTwoFactorEnabled', '');
  3491.                     }
  3492.                 }
  3494.                 // jeśli zmieniamy metodę 2FA, to ustawiamy cfgTwoFactorEnabled na false
  3495.                 if ($prevTwoFactorMethod !== $newTwoFactorMethod) {
  3496.                     $account->setSOption('cfgTwoFactorEnabled', '');
  3497.                 }
  3499.                 if($form->get('emailForAuth')->getData() == null) {
  3500.                     $account->setSOption('cfgEmailForAuth', '');    
  3501.                 }
  3502.                 else {
  3503.                     if($saveEmailForAuth) {
  3504.                         $account->setSOption('cfgEmailForAuth', $form->get('emailForAuth')->getData());
  3505.                     }   
  3506.                 }
  3508.                 // jeśli już jest secret w account, to nie tworzymy nowego
  3509.                 if($twoFactorGoogleAllowed) {
  3510.                     if ($form->get('twoFactorMethod')->getData() == 'google' && $account->findSOption('google2fa_secret') == null) {
  3511.                         $totp = TOTP::create();
  3512.                         $totp->setIssuer($serviceDomain);
  3513.                         $totp->setLabel($account->getUserName().'@'.$account->getUserDomain());
  3514.                         $secret = $totp->getSecret();
  3515.                         // secret do logu
  3516.                         $this->logger->log('Google Authenticator newly created secret: ' . $secret, $request);
  3517.                         $account->setSOption('google2fa_secret', $secret);
  3518.                         Api::saveAccountParameters($account);
  3519.                     
  3520.                         //$qrContent = $totp->getProvisioningUri();
  3521.                         //$qrResult = Builder::create()->data($qrContent)->size(300)->build();
  3522.                         //$qrCodeDataUri = $qrResult->getDataUri();
  3523.                         
  3524.                         $account->setSOption('cfgTwoFactorMethod', 'google');
  3525.                         Api::saveAccountParameters($account);
  3526.                     }
  3529.                     if ($request->get('google2fa_code')) {
  3530.                         $this->logger->log('Google Authenticator secret z account: ' . $account->findSOption('google2fa_secret'), $request);
  3531.                         $this->logger->log('Google Authenticator code: ' . $request->get('google2fa_code'), $request);
  3532.                         $totp = TOTP::create($account->findSOption('google2fa_secret'));
  3533.                         if ($totp->verify($request->get('google2fa_code'))) {
  3534.                             $account->setSOption('google2fa_confirmed', '1');
  3535.                             $account->setSOption('cfgTwoFactorEnabled', '1');
  3536.                             Api::saveAccountParameters($account);
  3537.                             $this->addFlash('notice', 'Google Authenticator activated!');
  3538.                         } else {
  3539.                             $this->addFlash('error', 'Incorrect Google Authenticator code');
  3540.                             $account->setSOption('cfgTwoFactorEnabled', '');
  3541.                             $request->getSession()->set('showQrAfterSave', true);
  3542.                         }
  3543.                     }
  3544.                 }
  3546.                 $account->setSOption('cfgTwoFactorMethod', $form->get('twoFactorMethod')->getData());
  3547.             }
  3549.             
  3550.             if($this->security->isGranted('IS_IMPERSONATOR')) {
  3551.                 $account->setSOption('cfgMaxForwards', $form->get('maxForwards')->getData());
  3552.                 $account->setSOption('cfgMaxExternalForwards', $form->get('maxExternalForwards')->getData());
  3553.             }
  3554.             
  3555.             $confirms = $form->get('confirms')->getData();
  3556.             
  3557.             foreach($confirmKeys as $opt) {
  3558.                 if(!in_array($opt, $confirms)) {
  3559.                     $account->setSOption('cfgDontConfirm' . $opt, true);
  3560.                 }
  3561.                 else {
  3562.                     $account->deleteOption('cfgDontConfirm' . $opt);
  3563.                 }
  3564.             }
  3565.             
  3566.             if(Api::saveAccountParameters($account)) {
  3567.                 if($showInfoAbout2FA) {
  3568.                     $this->addFlash('notice', $this->translator->trans('Your additional address for 2FA was changed. Click on the link we\'ve just sent you to confirm the change.'));
  3569.                 }
  3570.                 else {
  3571.                     $this->addFlash('notice', $this->translator->trans('Settings saved'));
  3572.                 }
  3574.                 $this->logger->log('Settings for account saved', $request);
  3575.             }
  3576.             else {
  3577.                 $this->addFlash('error', $this->translator->trans('Settings NOT saved'));
  3578.                 $this->logger->log('Error while saving settings for account', $request);
  3579.             }
  3580.             
  3581.             return $this->redirectToRoute('qu_settings');
  3582.         }
  3583.         elseif($form->isSubmitted() && !$form->isValid()){
  3584.             $this->addFlash('error', $this->translator->trans('Settings NOT saved'));
  3585.         }
  3586.         
  3587.         $showQr = false;
  3588.         $qrCodeDataUri = null;
  3590.         // wymuszenie wyświetlenia QR po zmianie metody lub włączeniu 2FA ---
  3591.         if ($request->getSession()->has('showQrAfterSave')) {
  3592.             $showQr = true;
  3593.             $request->getSession()->remove('showQrAfterSave');
  3594.             $secret = $account->findSOption('google2fa_secret');
  3596.             if ($secret) {
  3597.                 $totp = TOTP::create($secret);
  3598.                 $totp->setIssuer($serviceDomain);
  3599.                 $totp->setLabel($account->getUserName().'@'.$account->getUserDomain());
  3600.                 $qrContent = $totp->getProvisioningUri();
  3601.                 $qrResult = Builder::create()->data($qrContent)->size(300)->build();
  3602.                 $qrCodeDataUri = $qrResult->getDataUri();
  3603.             }
  3605.         }
  3607.         /*if ($form->get('twoFactorMethod')->getData() === 'google' && $account->findSOption('google2fa_confirmed') != '1') {
  3608.             
  3609.             $this->logger->log('Google Authenticator secret z account przy wyświetlaniu: ' . $secret, $request);
  3611.             
  3612.         }*/
  3613.         
  3614.         return $this->render('skins/' . $this->skin . '/q_user/settings.html.twig', [
  3615.             'form' => $form->createView(),
  3616.             'forceLoginTarget' => $forceLoginTarget,
  3617.             'emailForAuthConfirmed' => $emailForAuthConfirmed,
  3618.             'twoFactorAllowed' => $twoFactorAllowed,
  3619.             'twoFactorGoogleAllowed' => $twoFactorGoogleAllowed,
  3620.             'qrCodeDataUri' => $showQr ? $qrCodeDataUri : null,
  3621.             'showQr' => $showQr,
  3622.         ]);
  3623.     }
  3624.     
  3625.     /**
  3626.      * @Route("/panel/login-history/{orderBy}/{orderDir}", defaults={"orderBy"="created_at", "orderDir"="desc"}, name="qu_login_history")
  3627.      */
  3628.     public function loginHistory($orderBy, $orderDir, Request $request, PaginatorInterface $paginator)
  3629.     {        
  3630.         $account = $this->security->getUser()->getAccount();
  3631.         $this->denyAccessUnlessGranted('LOGIN_HISTORY', $account);
  3632.         $form = $this->createForm(LoginHistory::class);
  3633.         $form->handleRequest($request);
  3634.         $filter = [];
  3635.         $options = [];
  3636.         
  3637.         $options["limit"] = Account::NUMBER_OF_LOGINS;
  3638.         
  3639.         if($this->security->isGranted('IS_IMPERSONATOR')) {
  3640.             // for user limitation is always on last Account::NUMBER_OF_LOGINS records
  3641.             $options["orderBy"] = $orderBy;
  3642.             $options["orderDir"] = $orderDir;
  3643.             $options["limit"] = Account::NUMBER_OF_LOGINS * 100;
  3644.         }
  3645.         else {
  3646.             $options["orderBy"] = "created_at";
  3647.             $options["orderDir"] = "desc";
  3648.         }
  3649.         
  3650.         if($form->isSubmitted() && $form->isValid()) {
  3651.             if($form->get('status')->getData() != '') {
  3652.                 $filter['success'] = (int)$form->get('status')->getData();
  3653.             }
  3654.             
  3655.             if($form->get('ip')->getData() != '') {
  3656.                 $filter['ip'] = $form->get('ip')->getData();
  3657.             }
  3658.         }
  3659.         
  3660.         $loginData = Api::getLoginHistory($this->security->getUser()->getEmail(), $filter, $options);
  3661.         $qpostmasterController = new QPostmasterController($this->logger, $this->translator, $this->security,
  3662.             $this->params, $this->mailer, $this->requestStack, $this->appExtension);
  3663.         $tagsArr = $qpostmasterController->loginHistoryTagsFromFilters($filter);
  3664.                 
  3665.         if(!$this->security->isGranted('IS_IMPERSONATOR')) {
  3666.             // order data for non-impersonificated user
  3667.             // possible value - created_at / ip / success
  3668.             if($orderBy == 'created_at' || $orderBy == 'ip' || $orderBy == 'success') {
  3669.                 $this->session->set('app_user_lhistory_order_by', $orderBy);
  3670.                 $this->session->set('app_user_lhistory_order_dir', $orderDir);
  3671.             }
  3672.             
  3673.             if($orderBy == 'session') {
  3674.                 if($this->session->has('app_user_lhistory_order_by')) {
  3675.                     $orderBy = $this->session->get('app_user_lhistory_order_by');
  3676.                     $orderDir = $this->session->get('app_user_lhistory_order_dir');
  3677.                 }
  3678.                 else {
  3679.                     $orderBy = 'created_at';
  3680.                     $orderDir = 'desc';
  3681.                 }
  3682.             }
  3683.             
  3684.             switch($orderBy) {
  3685.                 case "created_at":
  3686.                     if($orderDir == "asc") {
  3687.                         usort($loginData, "App\Controller\QUserController::_sortByCreatedByAsc");
  3688.                     }
  3689.                     break;
  3690.                 case "ip":
  3691.                     if($orderDir == "asc") {
  3692.                         usort($loginData, "App\Controller\QUserController::_sortByIpAsc");
  3693.                     }
  3694.                     else {
  3695.                         usort($loginData, "App\Controller\QUserController::_sortByIpDesc");
  3696.                     }
  3697.                     break;
  3698.                     
  3699.                 case "success":
  3700.                     if($orderDir == "asc") {
  3701.                         usort($loginData, "App\Controller\QUserController::_sortByStatusAsc");
  3702.                     }
  3703.                     else {
  3704.                         usort($loginData, "App\Controller\QUserController::_sortByStatusDesc");
  3705.                     }
  3706.                     break;
  3707.             }
  3708.         }
  3709.         
  3710.         return $this->render('skins/' . $this->skin . '/q_user/login_history.html.twig', [
  3711.             'form' => $form->createView(),
  3712.             'loginData' => $paginator->paginate(
  3713.                 $loginData, $request->query->getInt('page', 1), Account::NUMBER_OF_LOGINS
  3714.                 ),
  3715.             'filterTags' => $tagsArr,
  3716.             'orderDir' => $orderDir,
  3717.             'orderBy' => $orderBy,
  3718.             
  3719.         ]);
  3720.     }
  3721.     
  3722.     /**
  3723.      * @Route("/panel/loginhistorytag/del/{tag}", name="qu_loginhistorytag_del")
  3724.      */
  3725.     public function loginHistoryTagDelete($tag, Request $request)
  3726.     {
  3727.         return $this->redirectToRoute('qu_login_history');
  3728.     }
  3729.     
  3730.     
  3731.     /**
  3732.      * @Route("/panel/operation-history/{orderBy}/{orderDir}", defaults={"orderBy"="time", "orderDir"="desc"}, name="qu_operation_history")
  3733.      */
  3734.     public function operationHistory($orderBy, $orderDir, Request $request, PaginatorInterface $paginator)
  3735.     {
  3736.         //         $form = $this->createForm(OperationHistory::class);
  3737.         //         $form->handleRequest($request);
  3738.         $account = $this->security->getUser()->getAccount();
  3739.         $this->denyAccessUnlessGranted('OPERATION_HISTORY', $account);
  3740.         $filter = [];
  3741.         $limit = $account->findSOption('cfgUserHistoryPagination') == null ? Account::NUMBER_OF_OPERATIONS : $account->findSOption('cfgUserHistoryPagination');
  3742.         $filter["limit"] = (int)$limit;
  3743.         
  3744.         if($this->security->isGranted('IS_IMPERSONATOR')) {
  3745.             // for user limitation is always on last Account::NUMBER_OF_LOGINS records
  3746.             $filter["order"] = $orderBy;
  3747.             $filter["order_dir"] = $orderDir;
  3748.             $filter["limit"] = Account::NUMBER_OF_OPERATIONS * 100;
  3749.         }
  3750.         else {
  3751.             $filter["order"] = "time";
  3752.             $filter["order_dir"] = "desc";
  3753.         }
  3754.         
  3755.         $filter["module"] = 'qu_*';
  3756.         
  3757.         $opDataPresent = true;
  3758.         
  3759.         try {
  3760.             $opData = Api::getOperationsHistory($this->security->getUser()->getEmail(), $filter);
  3761.         }
  3762.         catch(\Exception $ex) {
  3763.             $opData = [];
  3764.             $opDataPresent = false;
  3765.         }
  3766.         
  3767.         if($opDataPresent && (!$this->security->isGranted('IS_IMPERSONATOR'))) {
  3768. //             echo "wewn previous"; exit();
  3769.             // order data for non-impersonificated user
  3770.             // possible value - time / msg
  3771.             
  3772.             if($orderBy == 'time' || $orderBy == 'msg') {
  3773.                 $this->session->set('app_user_ohistory_order_by', $orderBy);
  3774.                 $this->session->set('app_user_ohistory_order_dir', $orderDir);
  3775.             }
  3776.             
  3777.             if($orderBy == 'session') {
  3778.                 if($this->session->has('app_user_ohistory_order_by')) {
  3779.                     $orderBy = $this->session->get('app_user_ohistory_order_by');
  3780.                     $orderDir = $this->session->get('app_user_ohistory_order_dir');
  3781.                 }
  3782.                 else {
  3783.                     $orderBy = 'time';
  3784.                     $orderDir = 'desc';
  3785.                 }
  3786.             }
  3787.             
  3788.             switch($orderBy) {
  3789.                 case "time":
  3790.                     if($orderDir == "asc") {
  3791.                         usort($opData, "App\Controller\QUserController::_sortByTimeAsc");
  3792.                     }
  3793.                     break;
  3794.                 case "msg":
  3795.                     if($orderDir == "asc") {
  3796.                         usort($opData, "App\Controller\QUserController::_sortByMsgAsc");
  3797.                     }
  3798.                     else {
  3799.                         usort($opData, "App\Controller\QUserController::_sortByMsgDesc");
  3800.                     }
  3801.                     break;
  3802.                     
  3803.             }
  3804.         }
  3805.         
  3806.         return $this->render('skins/' . $this->skin . '/q_user/operation_history.html.twig', [
  3807.             'opData' => $paginator->paginate(
  3808.                 $opData, $request->query->getInt('page', 1), Account::NUMBER_OF_OPERATIONS
  3809.                 ),
  3810.             'orderDir' => $orderDir,
  3811.             'orderBy' => $orderBy,
  3812.             'opDataPresent' => $opDataPresent,
  3813.         ]);
  3814.     }
  3815.     
  3816.     /**
  3817.      * @Route("/panel/panel-info", name="qu_panel_info")
  3818.      */
  3819.     public function panelInfo()
  3820.     {
  3821.         $license = Api::getLicense();
  3822.         $sys = [];
  3823.         $sys['version'] = $this->params->get('app.version.postmaster');
  3824.         $sys['apiVersion'] = Api::getVersion();
  3825.         $sys['wrappersVersion'] = Api::getWrappersVersion();
  3826.         $sys['apiVersionString'] = Api::getVersionString();
  3827.         $sys['licensed'] = $license['company'];
  3828.         $sys['expires'] = $license['expires'];
  3829.         $sys['plan'] = $license['plan'];
  3830.         
  3831.         return $this->render('skins/' . $this->skin . '/q_user/panel_info.html.twig', [
  3832.             'sys' => $sys,
  3833.         ]);
  3834.     }
  3835.     
  3836.     /// mixing enabled and disabled forwards
  3837.     // order - "asc" or "desc"
  3838.     private static function _mixForwardsArrays($enabledForwardsArr, $disabledForwardsArr, $order)
  3839.     {
  3840.         $forwards = [];
  3841.         
  3842.         foreach($enabledForwardsArr as $fw) {
  3843.             $elem = [];
  3844.             $elem['address'] = $fw;
  3845.             $elem['enabled'] = true;
  3846.             $forwards[] = $elem;
  3847.         }
  3848.         
  3849.         foreach($disabledForwardsArr as $fw) {
  3850.             $elem = [];
  3851.             $elem['address'] = $fw;
  3852.             $elem['enabled'] = false;
  3853.             $forwards[] = $elem;
  3854.         }
  3855.         
  3856.         if($order == "asc") {
  3857.             usort($forwards, 'self::_forwardsComparator');
  3858.         }
  3859.         else {
  3860.             usort($forwards, 'self::_forwardsComparatorRev');
  3861.         }
  3862.         
  3863.         return $forwards;
  3864.     }
  3865.     
  3866.     private static function _forwardsComparator($a, $b)
  3867.     {
  3868.         return strcmp($a["address"], $b["address"]);
  3869.     }
  3870.     
  3871.     private static function _forwardsComparatorRev($a, $b)
  3872.     {
  3873.         return strcmp($a["address"], $b["address"]) * -1;
  3874.     }
  3875.     
  3876.     private static function _sortByCreatedByAsc($a, $b) {
  3877.         if($a["created_at"] == $b["created_at"]) {
  3878.             return 0;
  3879.         }
  3880.         
  3881.         return ($a["created_at"] < $b["created_at"]) ? -1 : 1;
  3882.     }
  3883.     
  3884.     private static function _sortByTimeAsc($a, $b) {
  3885.         if($a["time"] == $b["time"]) {
  3886.             return 0;
  3887.         }
  3888.         
  3889.         return ($a["time"] < $b["time"]) ? -1 : 1;
  3890.     }
  3891.     
  3892.     private static function _sortByIpAsc($a, $b) {
  3893.         return strcmp($a["ip"], $b["ip"]);
  3894.     }
  3896.     private static function _sortByIpDesc($a, $b) {
  3897.         return strcmp($a["ip"], $b["ip"]) * -1;
  3898.     }
  3899.     
  3900.     private static function _sortByMsgAsc($a, $b) {
  3901.         return strcmp($a["msg"], $b["msg"]);
  3902.     }
  3903.     
  3904.     private static function _sortByMsgDesc($a, $b) {
  3905.         return strcmp($a["msg"], $b["msg"]) * -1;
  3906.     }
  3907.     
  3908.     private static function _sortByStatusAsc($a, $b) {
  3909.         if($a["success"] == $b["success"]) {
  3910.             return 0;
  3911.         }
  3912.         
  3913.         if($a["success"] == true && $b["success"] == false) {
  3914.             return -1;
  3915.         }
  3916.         else {
  3917.             return 1;
  3918.         }
  3919.     }
  3920.     
  3921.     private static function _sortByStatusDesc($a, $b) {
  3922.         return QUserController::_sortByStatusAsc($a, $b) * -1;
  3923.     }
  3924.     
  3925.     
  3926.     /**
  3927.      * returns autoresponder of the user and its status in autoresponderStatus
  3928.      * status can be 'no' if no autoresponder is defined, 'active' and 'inactive'
  3929.      * @param Account $account
  3930.      * @param String $autoresponderStatus
  3931.      * @return \App\Model\Autoresponder
  3932.      */
  3933.     private function _getAutoresponderForUser(Account $account, String &$autoresponderStatus)
  3934.     {
  3935.         $autoresponder = new Autoresponder();
  3936.         $autoresponderStatus = 'no';
  3937.         
  3938.         // check if user has the autoresponder
  3939.         try {
  3940.             $autoresponder = Api::getAutoresponder($account->getUserName(), $account->getUserDomain());
  3941.             $autoresponder->setActive(true);
  3942.             $autoresponderStatus = 'active';
  3943.         }
  3944.         catch(\Exception $e) {}
  3945.         
  3946.         if($autoresponderStatus == 'no') {
  3947.             try {
  3948.                 $autoresponder = Api::getAutoresponder(Autoresponder::NOT_ACTIVE_PREFIX . $account->getUserName(),
  3949.                     Autoresponder::NOT_ACTIVE_PREFIX . $account->getUserDomain());
  3950.                 $autoresponder->setActive(false);
  3951.                 $autoresponderStatus = 'inactive';
  3952.             }
  3953.             catch(\Exception $e) {}
  3954.         }
  3955.                 
  3956.         return $autoresponder;
  3957.     }
  3958.     
  3959.     private function _isAntispamOn(Account $account)
  3960.     {
  3961.         return Api::getSAProtection($account);
  3962.     }
  3963.     
  3964.     /**
  3965.      * checks if cookie accountReload is set and if so reload Account in User object
  3966.      */
  3967.     private function _isReloadNeeded()
  3968.     {
  3969.         if(array_key_exists('accountReload', $_COOKIE) && $_COOKIE['accountReload'] == 1) {
  3970.             $user = $this->security->getUser();
  3971.             $user->loadAccount();
  3972.             unset($_COOKIE['accountReload']);
  3973.             setcookie('accountReload', null, -1, '/'); 
  3974.         }
  3975.     }
  3976.     
  3977.     /**
  3978.      * returns maximum allowed number of forwards or -1 if failed
  3979.      */
  3980.     private function _maxForwards($account) : int
  3981.     {
  3982.         $maxForwards = isset($_SERVER['APP_DEFAULT_MAX_FORWARDS']) ? $_SERVER['APP_DEFAULT_MAX_FORWARDS'] : 10;
  3983.         
  3984.         try {
  3985.             $d = Api::getDomain($account->getUserDomain());
  3986.         }
  3987.         catch(\Exception $e) {
  3988.             return -1;
  3989.         }
  3990.         
  3991.         if($account->findSOption('cfgMaxForwards') == null) {
  3992.             if($d->findOption('cfgMaxForwards') != null) {
  3993.                 $maxForwards = $d->findOption('cfgMaxForwards');
  3994.             }
  3995.         }
  3996.         else {
  3997.             $maxForwards = $account->findSOption('cfgMaxForwards');
  3998.         }
  3999.                 
  4000.         return $maxForwards;
  4001.         
  4002.     }
  4003.     
  4004.     /**
  4005.      * returns maximum allowed number of external forwards or -1 if failed
  4006.      */
  4007.     private function _maxExternalForwards($account) : int
  4008.     {
  4009.         $maxExternalForwards = 0;
  4010.         
  4011.         try {
  4012.             $d = Api::getDomain($account->getUserDomain());
  4013.         }
  4014.         catch(\Exception $e) {
  4015.             return -1;
  4016.         }
  4017.         
  4018.         if($account->findSOption('cfgMaxExternalForwards') == null) {
  4019.             if($d->findOption('cfgMaxExternalForwards') != null) {
  4020.                 $maxExternalForwards = $d->findOption('cfgMaxExternalForwards');
  4021.             }
  4022.             else {
  4023.                 $maxExternalForwards = isset($_SERVER['APP_DEFAULT_MAX_EXTERNAL_FORWARDS']) ? $_SERVER['APP_DEFAULT_MAX_EXTERNAL_FORWARDS'] : 3;
  4024.             }
  4025.         }
  4026.         else {
  4027.             $maxExternalForwards = $account->findSOption('cfgMaxExternalForwards');
  4028.         }
  4029.         
  4030.         return $maxExternalForwards;
  4031.     }
  4032.     
  4033.     /**
  4034.      * counts number of external forwards
  4035.      */
  4036.     private function _externalForwardsCount($forwards, $account)
  4037.     {
  4038.         $cnt = 0;
  4039.         
  4040.         foreach($forwards as $f) {
  4041.             if(AccountTools::isEmailExternal($f, [$account->getUserDomain()])) {
  4042.                 $cnt++;
  4043.             }
  4044.         }
  4045.         
  4046.         return $cnt;
  4047.     }
  4048.     
  4049.     /**
  4050.      * returns procmail rules that point to address email
  4051.      * @param Account $account
  4052.      * @return Array
  4053.      */
  4054.     private function _procmailRulesEmail(Account $account)
  4055.     {
  4056.         try {
  4057.             $rules = Api::getProcmailRules($account);
  4058.         }
  4059.         catch(\Exception $e) {
  4060.             $this->logger->log('Api::getProcmailRules() - exception from API', null , ['error_code' => $e->getCode(), 'error_message' => $e->getMessage()], 'critical');
  4061.             $this->addFlash('error', $this->translator->trans('Critical error, contact administrator.'));
  4062.             return $this->redirectToRoute('qu_main');
  4063.         }
  4064.         
  4065.         $retArr = [];
  4066.         
  4067.         foreach($rules as $r) {
  4068.             if($r->isDestEmail()) {
  4069.                 $retArr[] = $r;
  4070.             }
  4071.         }
  4072.         
  4073.         return $retArr;
  4074.     }
  4075.     
  4076.     /**
  4077.      * returns number of procmail rules that point to address email
  4078.      * @param Account $account
  4079.      * @return int
  4080.      */
  4081.     private function _numberProcmailRulesEmail(Account $account)
  4082.     {
  4083.         return count($this->_procmailRulesEmail($account));
  4084.     }
  4085.     
  4086.     /**
  4087.      * returns number of procmail rules that point to address email that is external
  4088.      * @param Account $account
  4089.      * @return int
  4090.      */
  4091.     private function _numberProcmailRulesEmailExternal(Account $account)
  4092.     {
  4093.         $num = 0;
  4094.         
  4095.         foreach($this->_procmailRulesEmail($account) as $r) {
  4096.             if(AccountTools::isEmailExternal($r->getDest(), [$account->getUserDomain()])) {
  4097.                 $num = $num + 1;
  4098.             }
  4099.         }
  4100.         
  4101.         return $num;
  4102.     }
  4103.     
  4104.     /**
  4105.      * get username and userdomain for imap
  4106.      * @param Account $account
  4107.      * @return array
  4108.      */
  4109.     private function _getImapUserDomain(Account $account) : Array 
  4110.     {
  4111.         $retArr = [];
  4112.         
  4113.         if($this->isGranted('IS_IMPERSONATOR')) {
  4114.             $token = $this->security->getToken();
  4115.             
  4116.             if ($token instanceof SwitchUserToken) {
  4117.                 $impersonatorUser = $token->getOriginalToken()->getUser();
  4118.             }
  4119.             
  4120.             $retArr[0] = $this->security->getUser()->getUsername() . '*';
  4121.             $userDomainArr = explode('@', $impersonatorUser->getUsername());
  4122.             $retArr[0] .= $userDomainArr[0];
  4123.             $retArr[1] = $userDomainArr[1];
  4124.         }
  4125.         else {
  4126.             $retArr[0] = $account->getUserName();
  4127.             $retArr[1] = $account->getUserdomain();
  4128.         }
  4129.         
  4130.         return $retArr;
  4131.     }
  4132.     
  4133.     /**
  4134.      * returns array of directories only from given level
  4135.      * @param array $dirs
  4136.      * @param int $level
  4137.      * @return array
  4138.      */
  4139. /*     private function _dirsWithLevel(array $dirs, int $level) : array
  4140.     {
  4141.         $arr = [];
  4142.         
  4143.         foreach($dirs as $d) {
  4144.             if($d->getLevel() == $level) {
  4145.                 $arr[] = $d;
  4146.             }
  4147.         }
  4148.         
  4149.         return $arr;
  4150.     } */
  4151.     
  4152.     /**
  4153.      * arranges array of directories according to their parent-children connections 
  4154.      * @param array $dirs
  4155.      * @param string $parent
  4156.      * @param int $level
  4157.      * @return array
  4158.      */
  4159. /*     private function _dirsChildren(array $dirs, string $parent, int $level) : array
  4160.     {
  4161.         $dirsLev = $this->_dirsWithLevel($dirs, $level);
  4162.         $arr = [];
  4163.         
  4164.         foreach($dirsLev as $d) {
  4165.             if($d->getParent() == $parent) {
  4166.                 $arr[] = $d;
  4167.                 
  4168.                 $arr = array_merge($arr, $this->_dirsChildren($dirs, $d->getName(), $level + 1));
  4169.             }
  4170.         }
  4171.         
  4172.         return $arr;
  4173.     } */
  4174. }