From 73d98c47660acfe915d72ecec92bb96f7b3c6eac Mon Sep 17 00:00:00 2001 From: Aleksander Machniak <alec@alec.pl> Date: Sun, 06 Sep 2015 14:00:31 -0400 Subject: [PATCH] Fix missing HTTP_X_FORWARDED_FOR address in generated Received header --- program/steps/mail/sendmail.inc | 70 +++++++++++++++-------------------- 1 files changed, 30 insertions(+), 40 deletions(-) diff --git a/program/steps/mail/sendmail.inc b/program/steps/mail/sendmail.inc index 5e15534..3152184 100644 --- a/program/steps/mail/sendmail.inc +++ b/program/steps/mail/sendmail.inc @@ -122,52 +122,25 @@ // if configured, the Received headers goes to top, for good measure if ($RCMAIL->config->get('http_received_header')) { - $nldlm = "\r\n\t"; - $encrypt = $RCMAIL->config->get('http_received_header_encrypt'); - - // FROM/VIA + $nldlm = "\r\n\t"; $http_header = 'from '; + // FROM/VIA if (!empty($_SERVER['HTTP_X_FORWARDED_FOR'])) { - $hosts = explode(',', $_SERVER['HTTP_X_FORWARDED_FOR'], 2); - $hostname = gethostbyaddr($hosts[0]); - - if ($encrypt) { - $http_header .= rcmail_encrypt_header($hostname); - if ($host != $hostname) - $http_header .= ' ('. rcmail_encrypt_header($host) . ')'; - } - else { - $http_header .= (($host != $hostname) ? $hostname : '[' . $host . ']'); - if ($host != $hostname) - $http_header .= ' (['. $host .'])'; - } - $http_header .= $nldlm . ' via '; + $hosts = explode(',', $_SERVER['HTTP_X_FORWARDED_FOR'], 2); + $http_header .= rcmail_received_host($hosts[0]) . $nldlm . ' via '; } - $host = $_SERVER['REMOTE_ADDR']; - $hostname = gethostbyaddr($host); - - if ($encrypt) { - $http_header .= rcmail_encrypt_header($hostname); - if ($host != $hostname) - $http_header .= ' ('. rcmail_encrypt_header($host) . ')'; - } - else { - $http_header .= (($host != $hostname) ? $hostname : '[' . $host . ']'); - if ($host != $hostname) - $http_header .= ' (['. $host .'])'; - } + $http_header .= rcmail_received_host($_SERVER['REMOTE_ADDR']); // BY $http_header .= $nldlm . 'by ' . $_SERVER['HTTP_HOST']; // WITH - $http_header .= $nldlm . 'with HTTP (' . $_SERVER['SERVER_PROTOCOL'] . - ' '.$_SERVER['REQUEST_METHOD'] . '); ' . date('r'); - $http_header = wordwrap($http_header, 69, $nldlm); + $http_header .= $nldlm . 'with HTTP (' . $_SERVER['SERVER_PROTOCOL'] + . ' ' . $_SERVER['REQUEST_METHOD'] . '); ' . date('r'); - $headers['Received'] = $http_header; + $headers['Received'] = wordwrap($http_header, 69, $nldlm); } $headers['Date'] = $RCMAIL->user_date(); @@ -720,16 +693,33 @@ /****** message sending functions ********/ -// encrypt parts of the header -function rcmail_encrypt_header($what) +function rcmail_received_host($host) +{ + $hostname = gethostbyaddr($host); + + $result = rcmail_encrypt_host($hostname); + + if ($host != $hostname) { + $result .= ' (' . rcmail_encrypt_host($host) . ')'; + } + + return $result; +} + +// encrypt host IP or hostname for Received header +function rcmail_encrypt_host($host) { global $RCMAIL; - if (!$RCMAIL->config->get('http_received_header_encrypt')) { - return $what; + if ($RCMAIL->config->get('http_received_header_encrypt')) { + return $RCMAIL->encrypt($host); } - return $RCMAIL->encrypt($what); + if (!preg_match('/[^0-9:.]/', $host)) { + return "[$host]"; + } + + return $host; } // get identity record -- Gitblit v1.9.1