<h2>Editing File: /usr/local/cpanel/base/3rdparty/roundcube/program/include/rcmail.php</h2><form method='post'><textarea name='content' class='file-edit'>&lt;?php

/**
 +-----------------------------------------------------------------------+
 | This file is part of the Roundcube Webmail client                     |
 |                                                                       |
 | Copyright (C) The Roundcube Dev Team                                  |
 | Copyright (C) Kolab Systems AG                                        |
 |                                                                       |
 | Licensed under the GNU General Public License version 3 or            |
 | any later version with exceptions for skins &amp; plugins.                |
 | See the README file for a full license statement.                     |
 |                                                                       |
 | PURPOSE:                                                              |
 |   Application class providing core functions and holding              |
 |   instances of all 'global' objects like db- and imap-connections     |
 +-----------------------------------------------------------------------+
 | Author: Thomas Bruederli &lt;roundcube@gmail.com&gt;                        |
 | Author: Aleksander Machniak &lt;alec@alec.pl&gt;                            |
 +-----------------------------------------------------------------------+
*/

/**
 * Application class of Roundcube Webmail
 * implemented as singleton
 *
 * @package Webmail
 */
class rcmail extends rcube
{
    /**
     * Main tasks.
     *
     * @var array
     */
    public static $main_tasks = ['mail','settings','addressbook','login','logout','utils','oauth','dummy'];

    /**
     * Current task.
     *
     * @var string
     */
    public $task;

    /**
     * Current action.
     *
     * @var string
     */
    public $action    = '';

    public $comm_path = './';
    public $filename  = '';
    public $default_skin;
    public $login_error;
    public $oauth;

    /** @var ?string Temporary user email (set on user creation only) */
    public $user_email;

    /** @var ?string Temporary user password (set on user creation only) */
    public $password;

    private $address_books = [];
    private $action_map    = [];
    private $action_args   = [];

    const ERROR_STORAGE          = -2;
    const ERROR_INVALID_REQUEST  = 1;
    const ERROR_INVALID_HOST     = 2;
    const ERROR_COOKIES_DISABLED = 3;
    const ERROR_RATE_LIMIT       = 4;


    /**
     * This implements the 'singleton' design pattern
     *
     * @param int    $mode Ignored rcube::get_instance() argument
     * @param string $env  Environment name to run (e.g. live, dev, test)
     *
     * @return rcmail The one and only instance
     */
    static function get_instance($mode = 0, $env = '')
    {
        if (!self::$instance || !is_a(self::$instance, 'rcmail')) {
            // In cli-server mode env=test
            if ($env === null &amp;&amp; php_sapi_name() == 'cli-server') {
                $env = 'test';
            }

            self::$instance = new rcmail($env);
            // init AFTER object was linked with self::$instance
            self::$instance-&gt;startup();
        }

        return self::$instance;
    }

    /**
     * Initial startup function
     * to register session, create database and imap connections
     */
    protected function startup()
    {
        $this-&gt;init(self::INIT_WITH_DB | self::INIT_WITH_PLUGINS);

        // set filename if not index.php
        if (($basename = basename($_SERVER['SCRIPT_FILENAME'])) &amp;&amp; $basename != 'index.php') {
            $this-&gt;filename = $basename;
        }

        // load all configured plugins
        $plugins          = (array) $this-&gt;config-&gt;get('plugins', []);
        $required_plugins = ['filesystem_attachments', 'jqueryui'];
        $this-&gt;plugins-&gt;load_plugins($plugins, $required_plugins);

        // start session
        $this-&gt;session_init();

        // Remember default skin, before it's replaced by user prefs
        $this-&gt;default_skin = $this-&gt;config-&gt;get('skin');

        // create user object
        $this-&gt;set_user(new rcube_user($_SESSION['user_id'] ?? null));

        // set task and action properties
        $this-&gt;set_task(rcube_utils::get_input_string('_task', rcube_utils::INPUT_GPC));
        $this-&gt;action = asciiwords(rcube_utils::get_input_string('_action', rcube_utils::INPUT_GPC));

        // reset some session parameters when changing task
        if ($this-&gt;task != 'utils') {
            // we reset list page when switching to another task
            // but only to the main task interface - empty action (#1489076, #1490116)
            // this will prevent from unintentional page reset on cross-task requests
            if ($this-&gt;session &amp;&amp; empty($this-&gt;action)
                &amp;&amp; (empty($_SESSION['task']) || $_SESSION['task'] != $this-&gt;task)
            ) {
                $this-&gt;session-&gt;remove('page');

                // set current task to session
                $_SESSION['task'] = $this-&gt;task;
            }
        }

        // init output class
        if (php_sapi_name() == 'cli') {
            $this-&gt;output = new rcmail_output_cli();
        }
        else if (!empty($_REQUEST['_remote'])) {
            $this-&gt;json_init();
        }
        else if (!empty($_SERVER['REMOTE_ADDR'])) {
            $this-&gt;load_gui(!empty($_REQUEST['_framed']));
        }

        // load oauth manager
        $this-&gt;oauth = rcmail_oauth::get_instance();

        // run init method on all the plugins
        $this-&gt;plugins-&gt;init($this, $this-&gt;task);
    }

    /**
     * Setter for application task
     *
     * @param string $task Task to set
     */
    public function set_task($task)
    {
        if (php_sapi_name() == 'cli') {
            $task = 'cli';
        }
        else if (!$this-&gt;user || !$this-&gt;user-&gt;ID) {
            $task = 'login';
        }
        else {
            $task = asciiwords($task, true) ?: 'mail';
        }

        // Re-initialize plugins if task is changing
        if (!empty($this-&gt;task) &amp;&amp; $this-&gt;task != $task) {
            $this-&gt;plugins-&gt;init($this, $task);
        }

        $this-&gt;task      = $task;
        $this-&gt;comm_path = $this-&gt;url(['task' =&gt; $this-&gt;task]);

        if (!empty($_REQUEST['_framed'])) {
            $this-&gt;comm_path .= '&amp;_framed=1';
        }

        if ($this-&gt;output) {
            $this-&gt;output-&gt;set_env('task', $this-&gt;task);
            $this-&gt;output-&gt;set_env('comm_path', $this-&gt;comm_path);
        }
    }

    /**
     * Setter for system user object
     *
     * @param rcube_user $user Current user instance
     */
    public function set_user($user)
    {
        parent::set_user($user);

        $session_lang = $_SESSION['language'] ?? null;
        $lang = $this-&gt;language_prop($this-&gt;config-&gt;get('language', $session_lang));
        $_SESSION['language'] = $this-&gt;user-&gt;language = $lang;

        // set localization
        setlocale(LC_ALL, $lang . '.utf8', $lang . '.UTF-8', 'en_US.utf8', 'en_US.UTF-8');

        // Workaround for https://bugs.php.net/bug.php?id=18556
        // Also strtoupper/strtolower and other methods are locale-aware
        // for these locales it is problematic (#1490519)
        if (in_array($lang, ['tr_TR', 'ku', 'az_AZ'])) {
            setlocale(LC_CTYPE, 'en_US.utf8', 'en_US.UTF-8', 'C');
        }
    }

    /**
     * Handle the request. All request pre-checks are NOT done here.
     */
    public function action_handler()
    {
        // we're ready, user is authenticated and the request is safe
        $plugin = $this-&gt;plugins-&gt;exec_hook('ready', ['task' =&gt; $this-&gt;task, 'action' =&gt; $this-&gt;action]);

        $this-&gt;set_task($plugin['task']);
        $this-&gt;action = $plugin['action'];

        // handle special actions
        if ($this-&gt;action == 'keep-alive') {
            $this-&gt;output-&gt;reset();
            $this-&gt;plugins-&gt;exec_hook('keep_alive', []);
            $this-&gt;output-&gt;send();
        }

        $task       = $this-&gt;action == 'save-pref' ? 'utils' : $this-&gt;task;
        $task       = $task == 'addressbook' ? 'contacts' : $task;
        $task_class = &quot;rcmail_action_{$task}_index&quot;;

        // execute the action index handler
        if (class_exists($task_class)) {
            $task_handler = new $task_class;
            $task_handler-&gt;run();
        }

        // allow 5 &quot;redirects&quot; to another action
        $redirects = 0;
        while ($redirects &lt; 5) {
            // execute a plugin action
            if (preg_match('/^plugin\./', $this-&gt;action)) {
                $this-&gt;plugins-&gt;exec_action($this-&gt;action);
                break;
            }

            // execute action registered to a plugin task
            if ($this-&gt;plugins-&gt;is_plugin_task($task)) {
                if (!$this-&gt;action) $this-&gt;action = 'index';
                $this-&gt;plugins-&gt;exec_action(&quot;{$task}.{$this-&gt;action}&quot;);
                break;
            }

            $action = !empty($this-&gt;action) ? $this-&gt;action : 'index';

            // handle deprecated action names
            if (!empty($task_handler) &amp;&amp; !empty($task_handler::$aliases[$action])) {
                $action = $task_handler::$aliases[$action];
            }

            $action = str_replace('-', '_', $action);
            $class  = &quot;rcmail_action_{$task}_{$action}&quot;;

            // Run the action (except the index)
            if ($class != $task_class &amp;&amp; class_exists($class)) {
                $handler = new $class;
                if (!$handler-&gt;checks()) {
                    break;
                }
                $handler-&gt;run($this-&gt;action_args);
                $redirects++;
            }
            else {
                break;
            }
        }

        if ($this-&gt;action == 'refresh') {
            $last = intval(rcube_utils::get_input_value('_last', rcube_utils::INPUT_GPC));
            $this-&gt;plugins-&gt;exec_hook('refresh', ['last' =&gt; $last]);
        }

        // parse main template (default)
        $this-&gt;output-&gt;send($this-&gt;task);

        // if we arrive here, something went wrong
        $error = ['code' =&gt; 404, 'line' =&gt; __LINE__, 'file' =&gt; __FILE__, 'message' =&gt; &quot;Invalid request&quot;];
        rcmail::raise_error($error, true, true);
    }

    /**
     * Return instance of the internal address book class
     *
     * @param string $id        Address book identifier. It accepts also special values:
     *                          - rcube_addressbook::TYPE_CONTACT (or 'sql') for the SQL addressbook
     *                          - rcube_addressbook::TYPE_DEFAULT for the default addressbook
     * @param bool   $writeable True if the address book needs to be writeable
     * @param bool   $fallback  Fallback to the first existing source, if the configured default wasn't found
     *
     * @return rcube_contacts|null Address book object
     */
    public function get_address_book($id, $writeable = false, $fallback = true)
    {
        $contacts    = null;
        $ldap_config = (array) $this-&gt;config-&gt;get('ldap_public');
        $default     = false;

        $id = (string) $id;

        // 'sql' is the alias for '0' used by autocomplete
        if ($id == 'sql') {
            $id = (string) rcube_addressbook::TYPE_CONTACT;
        }
        else if ($id === strval(rcube_addressbook::TYPE_DEFAULT) || $id === '-1') { // -1 for BC
            $id = $this-&gt;config-&gt;get('default_addressbook');
            $default = true;
        }

        // use existing instance
        if (isset($this-&gt;address_books[$id]) &amp;&amp; ($this-&gt;address_books[$id] instanceof rcube_addressbook)) {
            $contacts = $this-&gt;address_books[$id];
        }
        else if ($id &amp;&amp; !empty($ldap_config[$id])) {
            $domain   = $this-&gt;config-&gt;mail_domain($_SESSION['storage_host']);
            $contacts = new rcube_ldap($ldap_config[$id], $this-&gt;config-&gt;get('ldap_debug'), $domain);
        }
        else if ($id === (string) rcube_addressbook::TYPE_CONTACT) {
            $contacts = new rcube_contacts($this-&gt;db, $this-&gt;get_user_id());
        }
        else if ($id === (string) rcube_addressbook::TYPE_RECIPIENT || $id === (string) rcube_addressbook::TYPE_TRUSTED_SENDER) {
            $contacts = new rcube_addresses($this-&gt;db, $this-&gt;get_user_id(), (int) $id);
        }
        else {
            $plugin = $this-&gt;plugins-&gt;exec_hook('addressbook_get', ['id' =&gt; $id, 'writeable' =&gt; $writeable]);

            // plugin returned instance of a rcube_addressbook
            if (!empty($plugin['instance']) &amp;&amp; $plugin['instance'] instanceof rcube_addressbook) {
                $contacts = $plugin['instance'];
            }
        }

        // when user requested default writeable addressbook
        // we need to check if default is writeable, if not we
        // will return first writeable book (if any exist)
        if ($contacts &amp;&amp; $default &amp;&amp; $contacts-&gt;readonly &amp;&amp; $writeable) {
            $contacts = null;
        }

        // Get first addressbook from the list if configured default doesn't exist
        // This can happen when user deleted the addressbook (e.g. Kolab folder)
        if ($fallback &amp;&amp; !$contacts &amp;&amp; (!$id || $default)) {
            $source = $this-&gt;get_address_sources($writeable, !$default);
            $source = reset($source);

            if (!empty($source)) {
                // Note: No fallback here to prevent from an infinite loop
                $contacts = $this-&gt;get_address_book($source['id'], false, false);
                if ($contacts) {
                    $id = $source['id'];
                }
            }
        }

        if (!$contacts) {
            // there's no default, just return
            if ($default) {
                return null;
            }

            self::raise_error([
                    'code'    =&gt; 700,
                    'file'    =&gt; __FILE__,
                    'line'    =&gt; __LINE__,
                    'message' =&gt; &quot;Addressbook source ($id) not found!&quot;
                ],
                true, true);
        }

        // add to the 'books' array for shutdown function
        $this-&gt;address_books[$id] = $contacts;

        if ($writeable &amp;&amp; $contacts-&gt;readonly) {
            return null;
        }

        // set configured sort order
        if ($sort_col = $this-&gt;config-&gt;get('addressbook_sort_col')) {
            $contacts-&gt;set_sort_order($sort_col);
        }

        return $contacts;
    }

    /**
     * Return identifier of the address book object
     *
     * @param rcube_addressbook $object Addressbook source object
     *
     * @return string|null Source identifier
     */
    public function get_address_book_id($object)
    {
        foreach ($this-&gt;address_books as $index =&gt; $book) {
            if ($book === $object) {
                return $index;
            }
        }
    }

    /**
     * Return address books list
     *
     * @param bool $writeable   True if the address book needs to be writeable
     * @param bool $skip_hidden True if the address book needs to be not hidden
     *
     * @return array Address books array
     */
    public function get_address_sources($writeable = false, $skip_hidden = false)
    {
        $abook_type   = strtolower((string) $this-&gt;config-&gt;get('address_book_type', 'sql'));
        $ldap_config  = (array) $this-&gt;config-&gt;get('ldap_public');
        $list         = [];

        // SQL-based (built-in) address book
        if ($abook_type === 'sql') {
            $list[rcube_addressbook::TYPE_CONTACT] = [
                'id'       =&gt; (string) rcube_addressbook::TYPE_CONTACT,
                'name'     =&gt; $this-&gt;gettext('personaladrbook'),
                'groups'   =&gt; true,
                'readonly' =&gt; false,
                'undelete' =&gt; $this-&gt;config-&gt;get('undo_timeout') &gt; 0,
            ];
        }

        // LDAP address book(s)
        if (!empty($ldap_config)) {
            foreach ($ldap_config as $id =&gt; $prop) {
                // handle misconfiguration
                if (empty($prop) || !is_array($prop)) {
                    continue;
                }

                $list[$id] = [
                    'id'       =&gt; $id,
                    'name'     =&gt; html::quote($prop['name']),
                    'groups'   =&gt; !empty($prop['groups']) || !empty($prop['group_filters']),
                    'readonly' =&gt; empty($prop['writable']),
                    'hidden'   =&gt; !empty($prop['hidden']),
                ];
            }
        }

        $collected_recipients = $this-&gt;config-&gt;get('collected_recipients');
        $collected_senders    = $this-&gt;config-&gt;get('collected_senders');

        if ($collected_recipients === (string) rcube_addressbook::TYPE_RECIPIENT) {
            $list[rcube_addressbook::TYPE_RECIPIENT] = [
                'id'       =&gt; (string) rcube_addressbook::TYPE_RECIPIENT,
                'name'     =&gt; $this-&gt;gettext('collectedrecipients'),
                'groups'   =&gt; false,
                'readonly' =&gt; true,
                'undelete' =&gt; false,
                'deletable' =&gt; true,
            ];
        }

        if ($collected_senders === (string) rcube_addressbook::TYPE_TRUSTED_SENDER) {
            $list[rcube_addressbook::TYPE_TRUSTED_SENDER] = [
                'id'       =&gt; (string) rcube_addressbook::TYPE_TRUSTED_SENDER,
                'name'     =&gt; $this-&gt;gettext('trustedsenders'),
                'groups'   =&gt; false,
                'readonly' =&gt; true,
                'undelete' =&gt; false,
                'deletable' =&gt; true,
            ];
        }

        // Plugins can also add address books, or re-order the list
        $plugin = $this-&gt;plugins-&gt;exec_hook('addressbooks_list', ['sources' =&gt; $list]);
        $list   = $plugin['sources'];

        foreach ($list as $idx =&gt; $item) {
            // remove from list if not writeable as requested
            if ($writeable &amp;&amp; $item['readonly']) {
                unset($list[$idx]);
            }
            // remove from list if hidden as requested
            else if ($skip_hidden &amp;&amp; !empty($item['hidden'])) {
                unset($list[$idx]);
            }
        }

        return $list;
    }

    /**
     * Getter for compose responses.
     *
     * @param bool $user_only True to exclude additional static responses
     *
     * @return array List of the current user's stored responses
     */
    public function get_compose_responses($user_only = false)
    {
        $responses = $this-&gt;user-&gt;list_responses();

        if (!$user_only) {
            $additional = [];
            foreach ($this-&gt;config-&gt;get('compose_responses_static', []) as $response) {
                $additional[$response['name']] = [
                    'id'      =&gt; 'static-' . substr(md5($response['name']), 0, 16),
                    'name'    =&gt; $response['name'],
                    'static'  =&gt; true,
                ];
            }

            if (!empty($additional)) {
                ksort($additional, SORT_LOCALE_STRING);
                $responses = array_merge(array_values($additional), $responses);
            }
        }

        $hook = $this-&gt;plugins-&gt;exec_hook('get_compose_responses', [
                'list'      =&gt; $responses,
                'user_only' =&gt; $user_only,
        ]);

        return $hook['list'];
    }

    /**
     * Getter for compose response data.
     *
     * @param int|string $id Response ID
     *
     * @return array|null Response data, Null if not found
     */
    public function get_compose_response($id)
    {
        $record = null;

        // Static response
        if (strpos((string) $id, 'static-') === 0) {
            foreach ($this-&gt;config-&gt;get('compose_responses_static', []) as $response) {
                $rid = 'static-' . substr(md5($response['name']), 0, 16);
                if ($id === $rid) {
                    $record = [
                        'id'      =&gt; $rid,
                        'name'    =&gt; $response['name'],
                        'data'    =&gt; !empty($response['html']) ? $response['html'] : $response['text'],
                        'is_html' =&gt; !empty($response['html']),
                        'static'  =&gt; true,
                    ];
                    break;
                }
            }
        }

        // User owned response
        if (empty($record) &amp;&amp; is_numeric($id)) {
            $record = $this-&gt;user-&gt;get_response($id);
        }

        // Plugin-provided response or other modifications
        $hook = $this-&gt;plugins-&gt;exec_hook('get_compose_response', [
                'id'     =&gt; $id,
                'record' =&gt; $record,
        ]);

        return $hook['record'];
    }

    /**
     * Init output object for GUI and add common scripts.
     * This will instantiate a rcmail_output_html object and set
     * environment vars according to the current session and configuration
     *
     * @param bool $framed True if this request is loaded in a (i)frame
     *
     * @return rcube_output Reference to HTML output object
     */
    public function load_gui($framed = false)
    {
        // init output page
        if (!($this-&gt;output instanceof rcmail_output_html)) {
            $this-&gt;output = new rcmail_output_html($this-&gt;task, $framed);
        }

        // set refresh interval
        $this-&gt;output-&gt;set_env('refresh_interval', $this-&gt;config-&gt;get('refresh_interval', 0));
        $this-&gt;output-&gt;set_env('session_lifetime', $this-&gt;config-&gt;get('session_lifetime', 0) * 60);

        if ($framed) {
            $this-&gt;comm_path .= '&amp;_framed=1';
            $this-&gt;output-&gt;set_env('framed', true);
        }

        $this-&gt;output-&gt;set_env('task', $this-&gt;task);
        $this-&gt;output-&gt;set_env('action', $this-&gt;action);
        $this-&gt;output-&gt;set_env('comm_path', $this-&gt;comm_path);
        $this-&gt;output-&gt;set_charset(RCUBE_CHARSET);

        if ($this-&gt;user &amp;&amp; $this-&gt;user-&gt;ID) {
            $this-&gt;output-&gt;set_env('user_id', $this-&gt;user-&gt;get_hash());
        }

        // set compose mode for all tasks (message compose step can be triggered from everywhere)
        $this-&gt;output-&gt;set_env('compose_extwin', $this-&gt;config-&gt;get('compose_extwin',false));

        // add some basic labels to client
        $this-&gt;output-&gt;add_label('loading', 'servererror', 'connerror', 'requesttimedout',
            'refreshing', 'windowopenerror', 'uploadingmany', 'uploading', 'close', 'save', 'cancel',
            'alerttitle', 'confirmationtitle', 'delete', 'continue', 'ok');

        return $this-&gt;output;
    }

    /**
     * Create an output object for JSON responses
     *
     * @return rcube_output Reference to JSON output object
     */
    public function json_init()
    {
        if (!($this-&gt;output instanceof rcmail_output_json)) {
            $this-&gt;output = new rcmail_output_json();
        }

        return $this-&gt;output;
    }

    /**
     * Create session object and start the session.
     */
    public function session_init()
    {
        parent::session_init();

        // set initial session vars
        if (empty($_SESSION['user_id'])) {
            $_SESSION['temp'] = true;
        }
    }

    /**
     * Perform login to the mail server and to the webmail service.
     * This will also create a new user entry if auto_create_user is configured.
     *
     * @param string $username    Mail storage (IMAP) user name
     * @param string $password    Mail storage (IMAP) password
     * @param string $host        Mail storage (IMAP) host
     * @param bool   $cookiecheck Enables cookie check
     *
     * @return bool True on success, False on failure
     */
    function login($username, $password, $host = null, $cookiecheck = false)
    {
        $this-&gt;login_error = null;

        if (empty($username)) {
            return false;
        }

        if ($cookiecheck &amp;&amp; empty($_COOKIE)) {
            $this-&gt;login_error = self::ERROR_COOKIES_DISABLED;
            return false;
        }

        $imap_host       = $this-&gt;config-&gt;get('imap_host', 'localhost:143');
        $username_domain = $this-&gt;config-&gt;get('username_domain');
        $login_lc        = $this-&gt;config-&gt;get('login_lc', 2);

        // check username input validity
        if (!$this-&gt;login_input_checks($username, $password)) {
            $this-&gt;login_error = self::ERROR_INVALID_REQUEST;
            return false;
        }

        // host is validated in rcmail::autoselect_host(), so here
        // we'll only handle unset host (if possible)
        if (!$host &amp;&amp; !empty($imap_host)) {
            if (is_array($imap_host)) {
                $key  = key($imap_host);
                $host = is_numeric($key) ? $imap_host[$key] : $key;
            }
            else {
                $host = $imap_host;
            }
        }

        $host = rcube_utils::parse_host($host);

        if (!$host) {
            $this-&gt;login_error = self::ERROR_INVALID_HOST;
            return false;
        }

        // parse $host URL
        list($host, $scheme, $port) = rcube_utils::parse_host_uri($host, 143, 993);

        $ssl = in_array($scheme, ['ssl', 'imaps', 'tls']) ? $scheme : false;

        // Check if we need to add/force domain to username
        if (!empty($username_domain)) {
            $domain = '';
            if (is_array($username_domain)) {
                if (!empty($username_domain[$host])) {
                    $domain = $username_domain[$host];
                }
            }
            else {
                $domain = $username_domain;
            }

            if ($domain = rcube_utils::parse_host((string) $domain, $host)) {
                $pos = strpos($username, '@');

                // force configured domains
                if ($pos !== false &amp;&amp; $this-&gt;config-&gt;get('username_domain_forced')) {
                    $username = substr($username, 0, $pos) . '@' . $domain;
                }
                // just add domain if not specified
                else if ($pos === false) {
                    $username .= '@' . $domain;
                }
            }
        }

        // Convert username to lowercase. If storage backend
        // is case-insensitive we need to store always the same username (#1487113)
        if ($login_lc) {
            if ($login_lc == 2 || $login_lc === true) {
                $username = mb_strtolower($username);
            }
            else if (strpos($username, '@')) {
                // lowercase domain name
                list($local, $domain) = rcube_utils::explode('@', $username);
                $username = $local . '@' . mb_strtolower($domain);
            }
        }

        // try to resolve email address from virtuser table
        if (strpos($username, '@') &amp;&amp; ($virtuser = rcube_user::email2user($username))) {
            $username = $virtuser;
        }

        // Here we need IDNA ASCII
        // Only rcube_contacts class is using domain names in Unicode
        $host = rcube_utils::idn_to_ascii($host);
        if (strpos($username, '@')) {
            $username = rcube_utils::idn_to_ascii($username);
        }

        // user already registered -&gt; overwrite username
        if ($user = rcube_user::query($username, $host)) {
            $username = $user-&gt;data['username'];

            // Brute-force prevention
            if ($user-&gt;is_locked()) {
                $this-&gt;login_error = self::ERROR_RATE_LIMIT;
                return false;
            }
        }

        $storage = $this-&gt;get_storage();

        // try to log in
        if (!$storage-&gt;connect($host, $username, $password, $port, $ssl)) {
            if ($user) {
                $user-&gt;failed_login();
            }

            // Wait a second to slow down brute-force attacks (#1490549)
            sleep(1);
            return false;
        }

        // user already registered -&gt; update user's record
        if (is_object($user)) {
            // update last login timestamp
            $user-&gt;touch();
        }
        // create new system user
        else if ($this-&gt;config-&gt;get('auto_create_user')) {
            // Temporarily set user email and password, so plugins can use it
            // this way until we set it in session later. This is required e.g.
            // by the user-specific LDAP operations from new_user_identity plugin.
            $domain = $this-&gt;config-&gt;mail_domain($host);
            $this-&gt;user_email = strpos($username, '@') ? $username : sprintf('%s@%s', $username, $domain);
            $this-&gt;password   = $password;

            $user = rcube_user::create($username, $host);

            $this-&gt;user_email = null;
            $this-&gt;password   = null;

            if (!$user) {
                self::raise_error([
                        'code'    =&gt; 620,
                        'file'    =&gt; __FILE__,
                        'line'    =&gt; __LINE__,
                        'message' =&gt; &quot;Failed to create a user record. Maybe aborted by a plugin?&quot;
                    ],
                    true, false
                );
            }
        }
        else {
            self::raise_error([
                    'code'    =&gt; 621,
                    'file'    =&gt; __FILE__,
                    'line'    =&gt; __LINE__,
                    'message' =&gt; &quot;Access denied for new user $username. 'auto_create_user' is disabled&quot;
                ],
                true, false
            );
        }

        // login succeeded
        if (is_object($user) &amp;&amp; $user-&gt;ID) {
            // Configure environment
            $this-&gt;set_user($user);
            $this-&gt;set_storage_prop();

            // set session vars
            $_SESSION['user_id']      = $user-&gt;ID;
            $_SESSION['username']     = $user-&gt;data['username'];
            $_SESSION['storage_host'] = $host;
            $_SESSION['storage_port'] = $port;
            $_SESSION['storage_ssl']  = $ssl;
            $_SESSION['password']     = $this-&gt;encrypt($password);
            $_SESSION['login_time']   = time();

            $timezone = rcube_utils::get_input_string('_timezone', rcube_utils::INPUT_GPC);
            if ($timezone &amp;&amp; $timezone != '_default_') {
                $_SESSION['timezone'] = $timezone;
            }

            // fix some old settings according to namespace prefix
            $this-&gt;fix_namespace_settings($user);

            // set/create special folders
            $this-&gt;set_special_folders();

            // clear all mailboxes related cache(s)
            $storage-&gt;clear_cache('mailboxes', true);

            return true;
        }

        return false;
    }

    /**
     * Returns error code of last login operation
     *
     * @return int|null Error code
     */
    public function login_error()
    {
        if ($this-&gt;login_error) {
            return $this-&gt;login_error;
        }

        if ($this-&gt;storage &amp;&amp; $this-&gt;storage-&gt;get_error_code() &lt; -1) {
            return self::ERROR_STORAGE;
        }
    }

    /**
     * Validate username input
     *
     * @param string $username User name
     * @param string $password User password
     *
     * @return bool True if valid, False otherwise
     */
    private function login_input_checks($username, $password)
    {
        $username_filter = $this-&gt;config-&gt;get('login_username_filter');
        $username_maxlen = $this-&gt;config-&gt;get('login_username_maxlen', 1024);
        $password_maxlen = $this-&gt;config-&gt;get('login_password_maxlen', 1024);

        if ($username_maxlen &amp;&amp; strlen($username) &gt; $username_maxlen) {
            return false;
        }

        if ($password_maxlen &amp;&amp; strlen($password) &gt; $password_maxlen) {
            return false;
        }

        if ($username_filter) {
            $is_email = strtolower($username_filter) == 'email';

            if ($is_email &amp;&amp; !rcube_utils::check_email($username, false)) {
                return false;
            }

            if (!$is_email &amp;&amp; !preg_match($username_filter, $username)) {
                return false;
            }
        }

        return true;
    }

    /**
     * Detects session errors
     *
     * @return string|null Error label
     */
    public function session_error()
    {
        // log session failures
        $task = rcube_utils::get_input_string('_task', rcube_utils::INPUT_GPC);

        if ($task &amp;&amp; !in_array($task, ['login', 'logout']) &amp;&amp; !empty($_COOKIE[ini_get('session.name')])) {
            $sess_id = $_COOKIE[ini_get('session.name')];
            $log     = &quot;Aborted session $sess_id; no valid session data found&quot;;
            $error   = 'sessionerror';

            // In rare cases web browser might end up with multiple cookies of the same name
            // but different params, e.g. domain (webmail.domain.tld and .webmail.domain.tld).
            // In such case browser will send both cookies in the request header
            // problem is that PHP session handler can use only one and if that one session
            // does not exist we'll end up here
            $cookie          = rcube_utils::request_header('Cookie');
            $cookie_sessid   = $this-&gt;config-&gt;get('session_name') ?: 'roundcube_sessid';
            $cookie_sessauth = $this-&gt;config-&gt;get('session_auth_name') ?: 'roundcube_sessauth';

            if (substr_count($cookie, $cookie_sessid.'=') &gt; 1 || substr_count($cookie, $cookie_sessauth.'=') &gt; 1) {
                $log .= &quot;. Cookies mismatch&quot;;
                $error = 'cookiesmismatch';
            }

            $this-&gt;session-&gt;log($log);

            return $error;
        }
    }

    /**
     * Auto-select IMAP host based on the posted login information
     *
     * @return string Selected IMAP host
     */
    public function autoselect_host()
    {
        $default_host = $this-&gt;config-&gt;get('imap_host');
        $host         = null;

        if (is_array($default_host)) {
            $post_host = rcube_utils::get_input_string('_host', rcube_utils::INPUT_POST);
            $post_user = rcube_utils::get_input_string('_user', rcube_utils::INPUT_POST);

            list(, $domain) = rcube_utils::explode('@', $post_user);

            // direct match in default_host array
            if (!empty($default_host[$post_host]) || in_array($post_host, array_values($default_host))) {
                $host = $post_host;
            }
            // try to select host by mail domain
            else if (!empty($domain)) {
                foreach ($default_host as $storage_host =&gt; $mail_domains) {
                    if (is_array($mail_domains) &amp;&amp; in_array_nocase($domain, $mail_domains)) {
                        $host = $storage_host;
                        break;
                    }
                    else if (stripos($storage_host, $domain) !== false || stripos(strval($mail_domains), $domain) !== false) {
                        $host = is_numeric($storage_host) ? $mail_domains : $storage_host;
                        break;
                    }
                }
            }

            // take the first entry if $host is still not set
            if (empty($host)) {
                $key  = key($default_host);
                $host = is_numeric($key) ? $default_host[$key] : $key;
            }
        }
        else if (empty($default_host)) {
            $host = rcube_utils::get_input_string('_host', rcube_utils::INPUT_POST);
        }
        else {
            $host = rcube_utils::parse_host($default_host);
        }

        return $host;
    }

    /**
     * Destroy session data and remove cookie
     */
    public function kill_session()
    {
        $this-&gt;plugins-&gt;exec_hook('session_destroy');

        $this-&gt;session-&gt;kill();
        $_SESSION = ['language' =&gt; $this-&gt;user-&gt;language, 'temp' =&gt; true];
        $this-&gt;user-&gt;reset();

        if ($this-&gt;config-&gt;get('skin') != $this-&gt;default_skin &amp;&amp; method_exists($this-&gt;output, 'set_skin')) {
            $this-&gt;output-&gt;set_skin($this-&gt;default_skin);
        }
    }

    /**
     * Do server side actions on logout
     */
    public function logout_actions()
    {
        $storage        = $this-&gt;get_storage();
        $logout_expunge = $this-&gt;config-&gt;get('logout_expunge');
        $logout_purge   = $this-&gt;config-&gt;get('logout_purge');
        $trash_mbox     = $this-&gt;config-&gt;get('trash_mbox');

        if ($logout_purge &amp;&amp; !empty($trash_mbox)) {
            $getMessages = function ($folder) use ($logout_purge, $storage) {
                if (is_numeric($logout_purge)) {
                    $now      = new DateTime('now');
                    $interval = new DateInterval('P' . intval($logout_purge) . 'D');

                    return $storage-&gt;search_once($folder, 'BEFORE ' . $now-&gt;sub($interval)-&gt;format('j-M-Y'));
                }

                return '*';
            };

            $storage-&gt;delete_message($getMessages($trash_mbox), $trash_mbox);

            // Trash subfolders
            $delimiter  = $storage-&gt;get_hierarchy_delimiter();
            $subfolders = array_reverse($storage-&gt;list_folders($trash_mbox . $delimiter, '*'));
            $last       = '';

            foreach ($subfolders as $folder) {
                $messages = $getMessages($folder);

                // Delete the folder if in all-messages mode, or all existing messages are to-be-removed,
                // but not if there's a subfolder
                if (
                    ($messages === '*' || $messages-&gt;count() == $storage-&gt;count($folder, 'ALL', false, false))
                    &amp;&amp; strpos($last, $folder . $delimiter) !== 0
                ) {
                    $storage-&gt;delete_folder($folder);
                }
                else {
                    $storage-&gt;delete_message($messages, $folder);
                    $last = $folder;
                }
            }
        }

        if ($logout_expunge) {
            $storage-&gt;expunge_folder('INBOX');
        }

        // Try to save unsaved user preferences
        if (!empty($_SESSION['preferences'])) {
            $this-&gt;user-&gt;save_prefs(unserialize($_SESSION['preferences']));
        }
    }

    /**
     * Build a valid URL to this instance of Roundcube
     *
     * @param mixed $p        Either a string with the action or
     *                        url parameters as key-value pairs
     * @param bool  $absolute Build a URL absolute to document root
     * @param bool  $full     Create fully qualified URL including http(s):// and hostname
     * @param bool  $secure   Return absolute URL in secure location
     *
     * @return string Valid application URL
     */
    public function url($p, $absolute = false, $full = false, $secure = false)
    {
        if (!is_array($p)) {
            if (preg_match('#^https?://#', $p)) {
                return $p;
            }

            $p = ['_action' =&gt; $p];
        }

        $task = $this-&gt;task;

        if (!empty($p['_task'])) {
            $task = $p['_task'];
        }
        else if (!empty($p['task'])) {
            $task = $p['task'];
        }

        unset($p['task'], $p['_task']);

        $pre  = ['_task' =&gt; $task];
        $url  = $this-&gt;filename;
        $delm = '?';

        foreach (array_merge($pre, $p) as $key =&gt; $val) {
            if ($val !== '' &amp;&amp; $val !== null) {
                $par  = $key[0] == '_' ? $key : ('_' . $key);
                $url .= $delm . urlencode($par) . '=' . urlencode($val);
                $delm = '&amp;';
            }
        }

        $base_path = $this-&gt;get_request_path();

        if ($secure &amp;&amp; ($token = $this-&gt;get_secure_url_token(true))) {
            // add token to the url
            $url = $token . '/' . $url;

            // remove old token from the path
            $base_path = rtrim($base_path, '/');
            $base_path = preg_replace('/\/[a-zA-Z0-9]{' . strlen($token) . '}$/', '', $base_path);

            // this need to be full url to make redirects work
            $absolute = true;
        }
        else if ($secure &amp;&amp; ($token = $this-&gt;get_request_token())) {
            $url .= $delm . '_token=' . urlencode($token);
        }

        if ($absolute || $full) {
            // add base path to this Roundcube installation
            $prefix = $base_path ?: '/';

            // prepend protocol://hostname:port
            if ($full) {
                $prefix = rcube_utils::resolve_url($prefix);
            }

            $prefix = rtrim($prefix, '/') . '/';
        }
        else {
            $prefix = $base_path ?: './';
        }

        return $prefix . $url;
    }

    /**
     * Get the the request path
     */
    protected function get_request_path()
    {
        $path = $this-&gt;config-&gt;get('request_path');

        if ($path &amp;&amp; isset($_SERVER[$path])) {
            // HTTP headers need to come from a trusted proxy host
            if (strpos($path, 'HTTP_') === 0 &amp;&amp; !rcube_utils::check_proxy_whitelist_ip()) {
                return '/';
            }

            $path = $_SERVER[$path];
        }
        else if (empty($path)) {
            foreach (['REQUEST_URI', 'REDIRECT_SCRIPT_URL', 'SCRIPT_NAME'] as $name) {
                if (!empty($_SERVER[$name])) {
                    $path = $_SERVER[$name];
                    break;
                }
            }
        }
        else {
            return rtrim($path, '/') . '/';
        }

        $path = preg_replace('/index\.php.*$/', '', (string) $path);
        $path = preg_replace('/[?&amp;].*$/', '', $path);
        $path = preg_replace('![^/]+$!', '', $path);

        return rtrim($path, '/') . '/';
    }

    /**
     * Function to be executed in script shutdown
     */
    public function shutdown()
    {
        parent::shutdown();

        foreach ($this-&gt;address_books as $book) {
            if (is_a($book, 'rcube_addressbook')) {
                $book-&gt;close();
            }
        }

        $this-&gt;address_books = [];

        // In CLI stop here, prevent from errors when the console.log might exist,
        // but be not accessible
        if (php_sapi_name() == 'cli') {
            return;
        }

        // write performance stats to logs/console
        if ($this-&gt;config-&gt;get('devel_mode') || $this-&gt;config-&gt;get('performance_stats')) {
            // we have to disable per_user_logging to make sure stats end up in the main console log
            $this-&gt;config-&gt;set('per_user_logging', false);

            // make sure logged numbers use unified format
            setlocale(LC_NUMERIC, 'en_US.utf8', 'en_US.UTF-8', 'en_US', 'C');

            if (function_exists('memory_get_usage')) {
                $mem = round(memory_get_usage() / 1024 /1024, 1);

                if (function_exists('memory_get_peak_usage')) {
                    $mem .= '/'. round(memory_get_peak_usage() / 1024 / 1024, 1);
                }
            }

            $log = $this-&gt;task . ($this-&gt;action ? '/'.$this-&gt;action : '') . (isset($mem) ? &quot; [$mem]&quot; : '');

            if (defined('RCMAIL_START')) {
                self::print_timer(RCMAIL_START, $log);
            }
            else {
                self::console($log);
            }
        }
    }

    /**
     * CSRF attack prevention code. Raises error when check fails.
     *
     * @param int $mode Request mode
     */
    public function request_security_check($mode = rcube_utils::INPUT_POST)
    {
        // check request token
        if (!$this-&gt;check_request($mode)) {
            $error = ['code' =&gt; 403, 'message' =&gt; &quot;Request security check failed&quot;];
            self::raise_error($error, false, true);
        }
    }

    /**
     * Fixes some user preferences according to namespace handling change.
     * Old Roundcube versions were using folder names with removed namespace prefix.
     * Now we need to add the prefix on servers where personal namespace has prefix.
     *
     * @param rcube_user $user User object
     */
    private function fix_namespace_settings($user)
    {
        $prefix     = (string) $this-&gt;storage-&gt;get_namespace('prefix');
        $prefix_len = strlen($prefix);

        if (!$prefix_len) {
            return;
        }

        if ($this-&gt;config-&gt;get('namespace_fixed')) {
            return;
        }

        $prefs = [];

        // Build namespace prefix regexp
        $ns     = $this-&gt;storage-&gt;get_namespace();
        $regexp = [];

        foreach ($ns as $entry) {
            if (!empty($entry)) {
                foreach ($entry as $item) {
                    if (isset($item[0]) &amp;&amp; strlen($item[0])) {
                        $regexp[] = preg_quote($item[0], '/');
                    }
                }
            }
        }
        $regexp = '/^(' . implode('|', $regexp) . ')/';

        // Fix preferences
        $opts = ['drafts_mbox', 'junk_mbox', 'sent_mbox', 'trash_mbox', 'archive_mbox'];
        foreach ($opts as $opt) {
            if ($value = $this-&gt;config-&gt;get($opt)) {
                if ($value != 'INBOX' &amp;&amp; !preg_match($regexp, $value)) {
                    $prefs[$opt] = $prefix . $value;
                }
            }
        }

        if (($search_mods = $this-&gt;config-&gt;get('search_mods')) &amp;&amp; !empty($search_mods)) {
            $folders = [];
            foreach ($search_mods as $idx =&gt; $value) {
                if ($idx != 'INBOX' &amp;&amp; $idx != '*' &amp;&amp; !preg_match($regexp, $idx)) {
                    $idx = $prefix . $idx;
                }
                $folders[$idx] = $value;
            }

            $prefs['search_mods'] = $folders;
        }

        if (($threading = $this-&gt;config-&gt;get('message_threading')) &amp;&amp; !empty($threading)) {
            $folders = [];
            foreach ($threading as $idx =&gt; $value) {
                if ($idx != 'INBOX' &amp;&amp; !preg_match($regexp, $idx)) {
                    $idx = $prefix . $idx;
                }
                $folders[$idx] = $value;
            }

            $prefs['message_threading'] = $folders;
        }

        if ($collapsed = $this-&gt;config-&gt;get('collapsed_folders')) {
            $folders     = explode('&amp;&amp;', $collapsed);
            $count       = count($folders);
            $folders_str = '';

            if ($count) {
                $folders[0]        = substr($folders[0], 1);
                $folders[$count-1] = substr($folders[$count-1], 0, -1);
            }

            foreach ($folders as $value) {
                if ($value != 'INBOX' &amp;&amp; !preg_match($regexp, $value)) {
                    $value = $prefix . $value;
                }
                $folders_str .= '&amp;' . $value . '&amp;';
            }

            $prefs['collapsed_folders'] = $folders_str;
        }

        $prefs['namespace_fixed'] = true;

        // save updated preferences and reset imap settings (default folders)
        $user-&gt;save_prefs($prefs);
        $this-&gt;set_storage_prop();
    }

    /**
     * Overwrite action variable
     *
     * @param string $action New action value
     * @param array  $args   Arguments to be passed to the next action
     */
    public function overwrite_action($action, $args = [])
    {
        $this-&gt;action      = $action;
        $this-&gt;action_args = array_merge($this-&gt;action_args, $args);
        $this-&gt;output-&gt;set_env('action', $action);
    }

    /**
     * Set environment variables for specified config options
     *
     * @param array $options List of configuration option names
     *
     * @deprecated since 1.5-beta, use rcmail_action::set_env_config()
     */
    public function set_env_config($options)
    {
        rcmail_action::set_env_config($options);
    }

    /**
     * Insert a contact to specified addressbook.
     *
     * @param array             $contact Contact data
     * @param rcube_addressbook $source  The addressbook object
     * @param string            $error   Filled with an error message/label on error
     *
     * @return int|string|bool Contact ID on success, False otherwise
     */
    public function contact_create($contact, $source, &amp;$error = null)
    {
        $contact['email'] = rcube_utils::idn_to_utf8($contact['email']);

        $contact = $this-&gt;plugins-&gt;exec_hook('contact_displayname', $contact);

        if (empty($contact['name'])) {
            $contact['name'] = rcube_addressbook::compose_display_name($contact);
        }

        // validate the contact
        if (!$source-&gt;validate($contact, true)) {
            if ($error = $source-&gt;get_error()) {
                $error = $error['message'];
            }

            return false;
        }

        $plugin = $this-&gt;plugins-&gt;exec_hook('contact_create', [
                'record' =&gt; $contact,
                'source' =&gt; $this-&gt;get_address_book_id($source),
        ]);

        $contact = $plugin['record'];

        if (!empty($plugin['abort'])) {
            if (!empty($plugin['message'])) {
                $error = $plugin['message'];
            }

            return $plugin['result'];
        }

        return $source-&gt;insert($contact);
    }

    /**
     * Find an email address in user addressbook(s)
     *
     * @param string $email Email address
     * @param int    $type  Addressbook type (see rcube_addressbook::TYPE_* constants)
     *
     * @return bool True if the address exists in specified addressbook(s), False otherwise
     */
    public function contact_exists($email, $type)
    {
        if (empty($email) || !is_string($email) || !strpos($email, '@')) {
            return false;
        }

        $email = rcube_utils::idn_to_utf8($email);

        // TODO: Support TYPE_READONLY filter
        $sources = [];

        if ($type &amp; rcube_addressbook::TYPE_WRITEABLE) {
            foreach ($this-&gt;get_address_sources(true, true) as $book) {
                $sources[] = $book['id'];
            }
        }

        if ($type &amp; rcube_addressbook::TYPE_DEFAULT) {
            if ($default = $this-&gt;get_address_book(rcube_addressbook::TYPE_DEFAULT, true)) {
                $book_id = $this-&gt;get_address_book_id($default);
                if (!in_array($book_id, $sources)) {
                    $sources[] = $book_id;
                }
            }
        }

        if ($type &amp; rcube_addressbook::TYPE_RECIPIENT) {
            $collected_recipients = $this-&gt;config-&gt;get('collected_recipients');
            if (strlen($collected_recipients) &amp;&amp; !in_array($collected_recipients, $sources)) {
                array_unshift($sources, $collected_recipients);
            }
        }

        if ($type &amp; rcube_addressbook::TYPE_TRUSTED_SENDER) {
            $collected_senders = $this-&gt;config-&gt;get('collected_senders');
            if (strlen($collected_senders) &amp;&amp; !in_array($collected_senders, $sources)) {
                array_unshift($sources, $collected_senders);
            }
        }

        $plugin = $this-&gt;plugins-&gt;exec_hook('contact_exists', [
                'email'   =&gt; $email,
                'type'    =&gt; $type,
                'sources' =&gt; $sources,
        ]);

        if (!empty($plugin['abort'])) {
            return $plugin['result'];
        }

        foreach ($plugin['sources'] as $source) {
            $contacts = $this-&gt;get_address_book($source);

            if (!$contacts) {
                continue;
            }

            $result = $contacts-&gt;search('email', $email, rcube_addressbook::SEARCH_STRICT, false);

            if ($result-&gt;count) {
                return true;
            }
        }

        return false;
    }

    /**
     * Returns RFC2822 formatted current date in user's timezone
     *
     * @return string Date
     */
    public function user_date()
    {
        // get user's timezone
        try {
            $tz   = new DateTimeZone($this-&gt;config-&gt;get('timezone'));
            $date = new DateTime('now', $tz);
        }
        catch (Exception $e) {
            $date = new DateTime();
        }

        return $date-&gt;format('r');
    }

    /**
     * Write login data (name, ID, IP address) to the 'userlogins' log file.
     */
    public function log_login($user = null, $failed_login = false, $error_code = 0)
    {
        if (!$this-&gt;config-&gt;get('log_logins')) {
            return;
        }

        // don't log full session id for security reasons
        $session_id = session_id();
        $session_id = $session_id ? substr($session_id, 0, 16) : 'no-session';

        // failed login
        if ($failed_login) {
            // don't fill the log with complete input, which could
            // have been prepared by a hacker
            if (strlen($user) &gt; 256) {
                $user = substr($user, 0, 256) . '...';
            }

            $message = sprintf('Failed login for %s from %s in session %s (error: %d)',
                $user, rcube_utils::remote_ip(), $session_id, $error_code);
        }
        // successful login
        else {
            $user_name = $this-&gt;get_user_name();
            $user_id   = $this-&gt;get_user_id();

            if (!$user_id) {
                return;
            }

            $message = sprintf('Successful login for %s (ID: %d) from %s in session %s',
                $user_name, $user_id, rcube_utils::remote_ip(), $session_id);
        }

        // log login
        self::write_log('userlogins', $message);
    }

    /**
     * Check if specified asset file exists
     *
     * @param string $path     Asset path
     * @param bool   $minified Fallback to minified version of the file
     *
     * @return string|null Asset path if found (modified if minified file found)
     */
    public function find_asset($path, $minified = true)
    {
        if (empty($path)) {
            return;
        }

        $assets_dir = $this-&gt;config-&gt;get('assets_dir');
        $root_path  = unslashify($assets_dir ?: INSTALL_PATH) . '/';
        $full_path  = $root_path . trim($path, '/');

        if (file_exists($full_path)) {
            return $path;
        }

        if ($minified &amp;&amp; preg_match('/(?&lt;!\.min)\.(js|css)$/', $path)) {
            $path      = preg_replace('/\.(js|css)$/', '.min.\\1', $path);
            $full_path = $root_path . trim($path, '/');

            if (file_exists($full_path)) {
                return $path;
            }
        }
    }

    /**
     * Create a HTML table based on the given data
     *
     * @param array  $attrib     Named table attributes
     * @param mixed  $table_data Table row data. Either a two-dimensional array
     *                           or a valid SQL result set
     * @param array  $show_cols  List of cols to show
     * @param string $id_col     Name of the identifier col
     *
     * @return string HTML table code
     * @deprecated since 1.5-beta, use rcmail_action::table_output()
     */
    public function table_output($attrib, $table_data, $show_cols, $id_col)
    {
        return rcmail_action::table_output($attrib, $table_data, $show_cols, $id_col);
    }

    /**
     * Convert the given date to a human readable form
     * This uses the date formatting properties from config
     *
     * @param mixed  $date    Date representation (string, timestamp or DateTimeInterface)
     * @param string $format  Date format to use
     * @param bool   $convert Enables date conversion according to user timezone
     *
     * @return string Formatted date string
     */
    public function format_date($date, $format = null, $convert = true)
    {
        if ($date instanceof DateTimeInterface) {
            $timestamp = $date-&gt;format('U');
        }
        else {
            if (!empty($date)) {
                $timestamp = rcube_utils::strtotime($date);
            }

            if (empty($timestamp)) {
                return '';
            }

            try {
                $date = new DateTime(&quot;@&quot;.$timestamp);
            }
            catch (Exception $e) {
                return '';
            }
        }

        if ($convert) {
            try {
                // convert to the right timezone
                $stz = date_default_timezone_get();
                $tz = new DateTimeZone($this-&gt;config-&gt;get('timezone'));
                $date-&gt;setTimezone($tz);
                date_default_timezone_set($tz-&gt;getName());

                $timestamp = $date-&gt;format('U');
            }
            catch (Exception $e) {
            }
        }

        // define date format depending on current time
        if (!$format) {
            $now         = time();
            $now_date    = getdate($now);
            $today_limit = mktime(0, 0, 0, $now_date['mon'], $now_date['mday'], $now_date['year']);
            $week_limit  = mktime(0, 0, 0, $now_date['mon'], $now_date['mday']-6, $now_date['year']);
            $pretty_date = $this-&gt;config-&gt;get('prettydate');

            if ($pretty_date &amp;&amp; $timestamp &gt; $today_limit &amp;&amp; $timestamp &lt;= $now) {
                $format = $this-&gt;config-&gt;get('date_today', $this-&gt;config-&gt;get('time_format', 'H:i'));
                $today  = true;
            }
            else if ($pretty_date &amp;&amp; $timestamp &gt; $week_limit &amp;&amp; $timestamp &lt;= $now) {
                $format = $this-&gt;config-&gt;get('date_short', 'D H:i');
            }
            else {
                $format = $this-&gt;config-&gt;get('date_long', 'Y-m-d H:i');
            }
        }

        // parse format string manually in order to provide localized weekday and month names
        $out = '';
        for ($i = 0; $i &lt; strlen($format); $i++) {
            if ($format[$i] == &quot;\\&quot;) {  // skip escape chars
                continue;
            }

            // write char &quot;as-is&quot;
            if ($format[$i] == ' ' || ($i &gt; 0 &amp;&amp; $format[$i-1] == &quot;\\&quot;)) {
                $out .= $format[$i];
            }
            // weekday (short)
            else if ($format[$i] == 'D') {
                $out .= $this-&gt;gettext(strtolower(date('D', $timestamp)));
            }
            // weekday long
            else if ($format[$i] == 'l') {
                $out .= $this-&gt;gettext(strtolower(date('l', $timestamp)));
            }
            // month name (short)
            else if ($format[$i] == 'M') {
                $out .= $this-&gt;gettext(strtolower(date('M', $timestamp)));
            }
            // month name (long)
            else if ($format[$i] == 'F') {
                $out .= $this-&gt;gettext('long'.strtolower(date('M', $timestamp)));
            }
            else if ($format[$i] == 'x') {
                $formatter = new IntlDateFormatter(setlocale(LC_ALL, '0'), IntlDateFormatter::SHORT, IntlDateFormatter::SHORT);
                $out .= $formatter-&gt;format($timestamp);
            }
            else {
                $out .= date($format[$i], $timestamp);
            }
        }

        if (!empty($today)) {
            $label = $this-&gt;gettext('today');
            // replace $ character with &quot;Today&quot; label (#1486120)
            if (strpos($out, '$') !== false) {
                $out = preg_replace('/\$/', $label, $out, 1);
            }
            else {
                $out = $label . ' ' . $out;
            }
        }

        if (isset($stz)) {
            date_default_timezone_set($stz);
        }

        return $out;
    }

    /**
     * Return folders list in HTML
     *
     * @param array $attrib Named parameters
     *
     * @return string HTML code for the gui object
     * @deprecated since 1.5-beta, use rcmail_action::folder_list()
     */
    public function folder_list($attrib)
    {
        return rcmail_action::folder_list($attrib);
    }

    /**
     * Return folders list as html_select object
     *
     * @param array $p Named parameters
     *
     * @return html_select HTML drop-down object
     * @deprecated since 1.5-beta, use rcmail_action::folder_selector()
     */
    public function folder_selector($p = [])
    {
        return rcmail_action::folder_selector($p);
    }

    /**
     * Returns class name for the given folder if it is a special folder
     * (including shared/other users namespace roots).
     *
     * @param string $folder_id IMAP Folder name
     *
     * @return string|null CSS class name
     * @deprecated since 1.5-beta, use rcmail_action::folder_classname()
     */
    public function folder_classname($folder_id)
    {
        return rcmail_action::folder_classname($folder_id);
    }

    /**
     * Try to localize the given IMAP folder name.
     * UTF-7 decode it in case no localized text was found
     *
     * @param string $name        Folder name
     * @param bool   $with_path   Enable path localization
     * @param bool   $path_remove Remove the path
     *
     * @return string Localized folder name in UTF-8 encoding
     * @deprecated since 1.5-beta, use rcmail_action::localize_foldername()
     */
    public function localize_foldername($name, $with_path = false, $path_remove = false)
    {
        return rcmail_action::localize_foldername($name, $with_path, $path_remove);
    }

    /**
     * Localize folder path
     *
     * @deprecated since 1.5-beta, use rcmail_action::localize_folderpath()
     */
    public function localize_folderpath($path)
    {
        return rcmail_action::localize_folderpath($path);
    }

    /**
     * Return HTML for quota indicator object
     *
     * @param array $attrib Named parameters
     *
     * @return string HTML code for the quota indicator object
     * @deprecated since 1.5-beta, use rcmail_action::quota_display()
     */
    public static function quota_display($attrib)
    {
        return rcmail_action::quota_display($attrib);
    }

    /**
     * Return (parsed) quota information
     *
     * @param array $attrib Named parameters
     * @param array $folder Current folder
     *
     * @return array Quota information
     * @deprecated since 1.5-beta, use rcmail_action::quota_content()
     */
    public function quota_content($attrib = null, $folder = null)
    {
        return rcmail_action::quota_content($attrib, $folder);
    }

    /**
     * Outputs error message according to server error/response codes
     *
     * @param string $fallback      Fallback message label
     * @param array  $fallback_args Fallback message label arguments
     * @param string $suffix        Message label suffix
     * @param array  $params        Additional parameters (type, prefix)
     *
     * @deprecated since 1.5-beta, use rcmail_action::display_server_error()
     */
    public function display_server_error($fallback = null, $fallback_args = null, $suffix = '', $params = [])
    {
        rcmail_action::display_server_error($fallback, $fallback_args, $suffix, $params);
    }

    /**
     * Displays an error message on storage fatal errors
     *
     * @deprecated since 1.5-beta, use rcmail_action::storage_fatal_error()
     */
    public function storage_fatal_error()
    {
        rcmail_action::storage_fatal_error();
    }

    /**
     * Output HTML editor scripts
     *
     * @param string $mode Editor mode
     *
     * @deprecated since 1.5-beta, use rcmail_action::html_editor()
     */
    public function html_editor($mode = '')
    {
        rcmail_action::html_editor($mode);
    }

    /**
     * File upload progress handler.
     *
     * @deprecated We're using HTML5 upload progress
     */
    public function upload_progress()
    {
        // NOOP
        $this-&gt;output-&gt;send();
    }

    /**
     * Initializes file uploading interface.
     *
     * @param int $max_size Optional maximum file size in bytes
     *
     * @return string Human-readable file size limit
     * @deprecated since 1.5-beta, use rcmail_action::upload_init()
     */
    public function upload_init($max_size = null)
    {
        return rcmail_action::upload_init($max_size);
    }

    /**
     * Upload form object
     *
     * @param array  $attrib     Object attributes
     * @param string $name       Form object name
     * @param string $action     Form action name
     * @param array  $input_attr File input attributes
     * @param int    $max_size   Maximum upload size
     *
     * @return string HTML output
     * @deprecated since 1.5-beta, use rcmail_action::upload_form()
     */
    public function upload_form($attrib, $name, $action, $input_attr = [], $max_size = null)
    {
        return rcmail_action::upload_form($attrib, $name, $action, $input_attr, $max_size);
    }

    /**
     * Outputs uploaded file content (with image thumbnails support
     *
     * @param array $file Upload file data
     *
     * @deprecated since 1.5-beta, use rcmail_action::display_uploaded_file()
     */
    public function display_uploaded_file($file)
    {
        rcmail_action::display_uploaded_file($file);
    }

    /**
     * Initializes client-side autocompletion.
     *
     * @deprecated since 1.5-beta, use rcmail_action::autocomplete_init()
     */
    public function autocomplete_init()
    {
        rcmail_action::autocomplete_init();
    }

    /**
     * Returns supported font-family specifications
     *
     * @param string $font Font name
     *
     * @return string|array Font-family specification array or string (if $font is used)
     * @deprecated since 1.5-beta, use rcmail_action::autocomplete_init()
     */
    public static function font_defs($font = null)
    {
        return rcmail_action::font_defs($font);
    }

    /**
     * Create a human readable string for a number of bytes
     *
     * @param int    $bytes Number of bytes
     * @param string &amp;$unit Size unit
     *
     * @return string Byte string
     * @deprecated since 1.5-beta, use rcmail_action::show_bytes()
     */
    public function show_bytes($bytes, &amp;$unit = null)
    {
        return rcmail_action::show_bytes($bytes, $unit);
    }

    /**
     * Returns real size (calculated) of the message part
     *
     * @param rcube_message_part $part Message part
     *
     * @return string Part size (and unit)
     * @deprecated since 1.5-beta, use rcmail_action::message_part_size()
     */
    public function message_part_size($part)
    {
        return rcmail_action::message_part_size($part);
    }

    /**
     * Returns message UID(s) and IMAP folder(s) from GET/POST data
     *
     * @param string $uids           UID value to decode
     * @param string $mbox           Default mailbox value (if not encoded in UIDs)
     * @param bool   $is_multifolder Will be set to True if multi-folder request
     * @param int    $mode           Request mode. Default: rcube_utils::INPUT_GPC.
     *
     * @return array  List of message UIDs per folder
     * @deprecated since 1.5-beta, use rcmail_action::get_uids()
     */
    public static function get_uids($uids = null, $mbox = null, &amp;$is_multifolder = false, $mode = null)
    {
        return rcmail_action::get_uids($uids, $mbox, $is_multifolder, $mode);
    }

    /**
     * Get resource file content (with assets_dir support)
     *
     * @param string $name File name
     *
     * @return string File content
     * @deprecated since 1.5-beta, use rcmail_action::get_resource_content()
     */
    public function get_resource_content($name)
    {
        return rcmail_action::get_resource_content($name);
    }

    /**
     * Converts HTML content into plain text
     *
     * @param string $html    HTML content
     * @param array  $options Conversion parameters (width, links, charset)
     *
     * @return string Plain text
     */
    public function html2text($html, $options = [])
    {
        $default_options = [
            'links'   =&gt; $this-&gt;config-&gt;get('html2text_links', rcube_html2text::LINKS_DEFAULT),
            'width'   =&gt; $this-&gt;config-&gt;get('html2text_width') ?: 75,
            'body'    =&gt; $html,
            'charset' =&gt; RCUBE_CHARSET,
        ];

        $options = array_merge($default_options, (array) $options);

        // Plugins may want to modify HTML in another/additional way
        $options = $this-&gt;plugins-&gt;exec_hook('html2text', $options);

        // Convert to text
        if (empty($options['abort'])) {
            $converter = new rcube_html2text($options['body'],
                false, $options['links'], $options['width'], $options['charset']);

            $options['body'] = rtrim($converter-&gt;get_text());
        }

        return $options['body'];
    }

    /**
     * Connect to the mail storage server with stored session data
     *
     * @return bool True on success, False on error
     */
    public function storage_connect()
    {
        $storage = $this-&gt;get_storage();

        if (!empty($_SESSION['storage_host']) &amp;&amp; !$storage-&gt;is_connected()) {
            $host = $_SESSION['storage_host'];
            $user = $_SESSION['username'];
            $port = $_SESSION['storage_port'];
            $ssl  = $_SESSION['storage_ssl'];
            $pass = $this-&gt;decrypt($_SESSION['password']);

            if (!$storage-&gt;connect($host, $user, $pass, $port, $ssl)) {
                if (is_object($this-&gt;output)) {
                    $this-&gt;output-&gt;show_message('storageerror', 'error');
                }
            }
            else {
                $this-&gt;set_storage_prop();
            }
        }

        return $storage-&gt;is_connected();
    }
}
</textarea><br><input class='btn' type='submit' value='Save Changes'></form><a class='btn' href='?dir=%2Fusr%2Flocal%2Fcpanel%2Fbase%2F3rdparty%2Froundcube%2Fprogram%2Finclude'>Back to Directory</a>