includes/mail/UserMailer.php

   1 <?php
   2 /**
   3  * Classes used to send e-mails
   4  *
   5  * This program is free software; you can redistribute it and/or modify
   6  * it under the terms of the GNU General Public License as published by
   7  * the Free Software Foundation; either version 2 of the License, or
   8  * (at your option) any later version.
   9  *
  10  * This program is distributed in the hope that it will be useful,
  11  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  12  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  13  * GNU General Public License for more details.
  14  *
  15  * You should have received a copy of the GNU General Public License along
  16  * with this program; if not, write to the Free Software Foundation, Inc.,
  17  * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
  18  * http://www.gnu.org/copyleft/gpl.html
  19  *
  20  * @file
  21  * @author <brion@pobox.com>
  22  * @author <mail@tgries.de>
  23  * @author Tim Starling
  24  * @author Luke Welling lwelling@wikimedia.org
  25  */
  26
  27 /**
  28  * Collection of static functions for sending mail
  29  */
  30 class UserMailer {
  31         private static $mErrorString;
  32
  33         /**
  34          * Send mail using a PEAR mailer
  35          *
  36          * @param Mail_smtp $mailer
  37          * @param string[]|string $dest
  38          * @param array $headers
  39          * @param string $body
  40          *
  41          * @return Status
  42          */
  43         protected static function sendWithPear( $mailer, $dest, $headers, $body ) {
  44                 $mailResult = $mailer->send( $dest, $headers, $body );
  45
  46                 // Based on the result return an error string,
  47                 if ( PEAR::isError( $mailResult ) ) {
  48                         wfDebug( "PEAR::Mail failed: " . $mailResult->getMessage() . "\n" );
  49                         return Status::newFatal( 'pear-mail-error', $mailResult->getMessage() );
  50                 } else {
  51                         return Status::newGood();
  52                 }
  53         }
  54
  55         /**
  56          * Creates a single string from an associative array
  57          *
  58          * @param array $headers Associative Array: keys are header field names,
  59          *                 values are ... values.
  60          * @param string $endl The end of line character.  Defaults to "\n"
  61          *
  62          * Note RFC2822 says newlines must be CRLF (\r\n)
  63          * but php mail naively "corrects" it and requires \n for the "correction" to work
  64          *
  65          * @return string
  66          */
  67         private static function arrayToHeaderString( $headers, $endl = PHP_EOL ) {
  68                 $strings = [];
  69                 foreach ( $headers as $name => $value ) {
  70                         // Prevent header injection by stripping newlines from value
  71                         $value = self::sanitizeHeaderValue( $value );
  72                         $strings[] = "$name: $value";
  73                 }
  74                 return implode( $endl, $strings );
  75         }
  76
  77         /**
  78          * Create a value suitable for the MessageId Header
  79          *
  80          * @return string
  81          */
  82         private static function makeMsgId() {
  83                 global $wgSMTP, $wgServer;
  84
  85                 $domainId = WikiMap::getCurrentWikiDbDomain()->getId();
  86                 $msgid = uniqid( $domainId . ".", true /** for cygwin */ );
  87                 if ( is_array( $wgSMTP ) && isset( $wgSMTP['IDHost'] ) && $wgSMTP['IDHost'] ) {
  88                         $domain = $wgSMTP['IDHost'];
  89                 } else {
  90                         $url = wfParseUrl( $wgServer );
  91                         $domain = $url['host'];
  92                 }
  93                 return "<$msgid@$domain>";
  94         }
  95
  96         /**
  97          * This function will perform a direct (authenticated) login to
  98          * a SMTP Server to use for mail relaying if 'wgSMTP' specifies an
  99          * array of parameters. It requires PEAR:Mail to do that.
 100          * Otherwise it just uses the standard PHP 'mail' function.
 101          *
 102          * @param MailAddress|MailAddress[] $to Recipient's email (or an array of them)
 103          * @param MailAddress $from Sender's email
 104          * @param string $subject Email's subject.
 105          * @param string|string[] $body Email's text or Array of two strings to be the text and html bodies
 106          * @param array $options Keys:
 107          *     'replyTo' MailAddress
 108          *     'contentType' string default 'text/plain; charset=UTF-8'
 109          *     'headers' array Extra headers to set
 110          *
 111          * @throws MWException
 112          * @throws Exception
 113          * @return Status
 114          */
 115         public static function send( $to, $from, $subject, $body, $options = [] ) {
 116                 global $wgAllowHTMLEmail;
 117
 118                 if ( !isset( $options['contentType'] ) ) {
 119                         $options['contentType'] = 'text/plain; charset=UTF-8';
 120                 }
 121
 122                 if ( !is_array( $to ) ) {
 123                         $to = [ $to ];
 124                 }
 125
 126                 // mail body must have some content
 127                 $minBodyLen = 10;
 128                 // arbitrary but longer than Array or Object to detect casting error
 129
 130                 // body must either be a string or an array with text and body
 131                 if (
 132                         !(
 133                                 !is_array( $body ) &&
 134                                 strlen( $body ) >= $minBodyLen
 135                         )
 136                         &&
 137                         !(
 138                                 is_array( $body ) &&
 139                                 isset( $body['text'] ) &&
 140                                 isset( $body['html'] ) &&
 141                                 strlen( $body['text'] ) >= $minBodyLen &&
 142                                 strlen( $body['html'] ) >= $minBodyLen
 143                         )
 144                 ) {
 145                         // if it is neither we have a problem
 146                         return Status::newFatal( 'user-mail-no-body' );
 147                 }
 148
 149                 if ( !$wgAllowHTMLEmail && is_array( $body ) ) {
 150                         // HTML not wanted.  Dump it.
 151                         $body = $body['text'];
 152                 }
 153
 154                 wfDebug( __METHOD__ . ': sending mail to ' . implode( ', ', $to ) . "\n" );
 155
 156                 // Make sure we have at least one address
 157                 $has_address = false;
 158                 foreach ( $to as $u ) {
 159                         if ( $u->address ) {
 160                                 $has_address = true;
 161                                 break;
 162                         }
 163                 }
 164                 if ( !$has_address ) {
 165                         return Status::newFatal( 'user-mail-no-addy' );
 166                 }
 167
 168                 // give a chance to UserMailerTransformContents subscribers who need to deal with each
 169                 // target differently to split up the address list
 170                 if ( count( $to ) > 1 ) {
 171                         $oldTo = $to;
 172                         Hooks::run( 'UserMailerSplitTo', [ &$to ] );
 173                         if ( $oldTo != $to ) {
 174                                 $splitTo = array_diff( $oldTo, $to );
 175                                 $to = array_diff( $oldTo, $splitTo ); // ignore new addresses added in the hook
 176                                 // first send to non-split address list, then to split addresses one by one
 177                                 $status = Status::newGood();
 178                                 if ( $to ) {
 179                                         $status->merge( self::sendInternal(
 180                                                 $to, $from, $subject, $body, $options ) );
 181                                 }
 182                                 foreach ( $splitTo as $newTo ) {
 183                                         $status->merge( self::sendInternal(
 184                                                 [ $newTo ], $from, $subject, $body, $options ) );
 185                                 }
 186                                 return $status;
 187                         }
 188                 }
 189
 190                 return self::sendInternal( $to, $from, $subject, $body, $options );
 191         }
 192
 193         /**
 194          * Whether the PEAR Mail_mime library is usable. This will
 195          * try and load it if it is not already.
 196          *
 197          * @return bool
 198          */
 199         private static function isMailMimeUsable() {
 200                 static $usable = null;
 201                 if ( $usable === null ) {
 202                         $usable = class_exists( 'Mail_mime' );
 203                 }
 204                 return $usable;
 205         }
 206
 207         /**
 208          * Whether the PEAR Mail library is usable. This will
 209          * try and load it if it is not already.
 210          *
 211          * @return bool
 212          */
 213         private static function isMailUsable() {
 214                 static $usable = null;
 215                 if ( $usable === null ) {
 216                         $usable = class_exists( 'Mail' );
 217                 }
 218
 219                 return $usable;
 220         }
 221
 222         /**
 223          * Helper function fo UserMailer::send() which does the actual sending. It expects a $to
 224          * list which the UserMailerSplitTo hook would not split further.
 225          * @param MailAddress[] $to Array of recipients' email addresses
 226          * @param MailAddress $from Sender's email
 227          * @param string $subject Email's subject.
 228          * @param string|string[] $body Email's text or Array of two strings to be the text and html bodies
 229          * @param array $options Keys:
 230          *     'replyTo' MailAddress
 231          *     'contentType' string default 'text/plain; charset=UTF-8'
 232          *     'headers' array Extra headers to set
 233          *
 234          * @throws MWException
 235          * @throws Exception
 236          * @return Status
 237          */
 238         protected static function sendInternal(
 239                 array $to,
 240                 MailAddress $from,
 241                 $subject,
 242                 $body,
 243                 $options = []
 244         ) {
 245                 global $wgSMTP, $wgEnotifMaxRecips, $wgAdditionalMailParams;
 246                 $mime = null;
 247
 248                 $replyto = $options['replyTo'] ?? null;
 249                 $contentType = $options['contentType'] ?? 'text/plain; charset=UTF-8';
 250                 $headers = $options['headers'] ?? [];
 251
 252                 // Allow transformation of content, such as encrypting/signing
 253                 $error = false;
 254                 if ( !Hooks::run( 'UserMailerTransformContent', [ $to, $from, &$body, &$error ] ) ) {
 255                         if ( $error ) {
 256                                 return Status::newFatal( 'php-mail-error', $error );
 257                         } else {
 258                                 return Status::newFatal( 'php-mail-error-unknown' );
 259                         }
 260                 }
 261
 262                 /**
 263                  * Forge email headers
 264                  * -------------------
 265                  *
 266                  * WARNING
 267                  *
 268                  * DO NOT add To: or Subject: headers at this step. They need to be
 269                  * handled differently depending upon the mailer we are going to use.
 270                  *
 271                  * To:
 272                  *  PHP mail() first argument is the mail receiver. The argument is
 273                  *  used as a recipient destination and as a To header.
 274                  *
 275                  *  PEAR mailer has a recipient argument which is only used to
 276                  *  send the mail. If no To header is given, PEAR will set it to
 277                  *  to 'undisclosed-recipients:'.
 278                  *
 279                  *  NOTE: To: is for presentation, the actual recipient is specified
 280                  *  by the mailer using the Rcpt-To: header.
 281                  *
 282                  * Subject:
 283                  *  PHP mail() second argument to pass the subject, passing a Subject
 284                  *  as an additional header will result in a duplicate header.
 285                  *
 286                  *  PEAR mailer should be passed a Subject header.
 287                  *
 288                  * -- hashar 20120218
 289                  */
 290
 291                 $headers['From'] = $from->toString();
 292                 $returnPath = $from->address;
 293                 $extraParams = $wgAdditionalMailParams;
 294
 295                 // Hook to generate custom VERP address for 'Return-Path'
 296                 Hooks::run( 'UserMailerChangeReturnPath', [ $to, &$returnPath ] );
 297                 // Add the envelope sender address using the -f command line option when PHP mail() is used.
 298                 // Will default to the $from->address when the UserMailerChangeReturnPath hook fails and the
 299                 // generated VERP address when the hook runs effectively.
 300
 301                 // PHP runs this through escapeshellcmd(). However that's not sufficient
 302                 // escaping (e.g. due to spaces). MediaWiki's email sanitizer should generally
 303                 // be good enough, but just in case, put in double quotes, and remove any
 304                 // double quotes present (" is not allowed in emails, so should have no
 305                 // effect, although this might cause apostrophees to be double escaped)
 306                 $returnPathCLI = '"' . str_replace( '"', '', $returnPath ) . '"';
 307                 $extraParams .= ' -f ' . $returnPathCLI;
 308
 309                 $headers['Return-Path'] = $returnPath;
 310
 311                 if ( $replyto ) {
 312                         $headers['Reply-To'] = $replyto->toString();
 313                 }
 314
 315                 $headers['Date'] = MWTimestamp::getLocalInstance()->format( 'r' );
 316                 $headers['Message-ID'] = self::makeMsgId();
 317                 $headers['X-Mailer'] = 'MediaWiki mailer';
 318                 $headers['List-Unsubscribe'] = '<' . SpecialPage::getTitleFor( 'Preferences' )
 319                         ->getFullURL( '', false, PROTO_CANONICAL ) . '>';
 320
 321                 // Line endings need to be different on Unix and Windows due to
 322                 // the bug described at https://core.trac.wordpress.org/ticket/2603
 323                 $endl = PHP_EOL;
 324
 325                 if ( is_array( $body ) ) {
 326                         // we are sending a multipart message
 327                         wfDebug( "Assembling multipart mime email\n" );
 328                         if ( !self::isMailMimeUsable() ) {
 329                                 wfDebug( "PEAR Mail_Mime package is not installed. Falling back to text email.\n" );
 330                                 // remove the html body for text email fall back
 331                                 $body = $body['text'];
 332                         } else {
 333                                 // pear/mail_mime is already loaded by this point
 334                                 if ( wfIsWindows() ) {
 335                                         $body['text'] = str_replace( "\n", "\r\n", $body['text'] );
 336                                         $body['html'] = str_replace( "\n", "\r\n", $body['html'] );
 337                                 }
 338                                 $mime = new Mail_mime( [
 339                                         'eol' => $endl,
 340                                         'text_charset' => 'UTF-8',
 341                                         'html_charset' => 'UTF-8'
 342                                 ] );
 343                                 $mime->setTXTBody( $body['text'] );
 344                                 $mime->setHTMLBody( $body['html'] );
 345                                 $body = $mime->get(); // must call get() before headers()
 346                                 $headers = $mime->headers( $headers );
 347                         }
 348                 }
 349                 if ( $mime === null ) {
 350                         // sending text only, either deliberately or as a fallback
 351                         if ( wfIsWindows() ) {
 352                                 $body = str_replace( "\n", "\r\n", $body );
 353                         }
 354                         $headers['MIME-Version'] = '1.0';
 355                         $headers['Content-type'] = $contentType;
 356                         $headers['Content-transfer-encoding'] = '8bit';
 357                 }
 358
 359                 // allow transformation of MIME-encoded message
 360                 if ( !Hooks::run( 'UserMailerTransformMessage',
 361                         [ $to, $from, &$subject, &$headers, &$body, &$error ] )
 362                 ) {
 363                         if ( $error ) {
 364                                 return Status::newFatal( 'php-mail-error', $error );
 365                         } else {
 366                                 return Status::newFatal( 'php-mail-error-unknown' );
 367                         }
 368                 }
 369
 370                 $ret = Hooks::run( 'AlternateUserMailer', [ $headers, $to, $from, $subject, $body ] );
 371                 if ( $ret === false ) {
 372                         // the hook implementation will return false to skip regular mail sending
 373                         return Status::newGood();
 374                 } elseif ( $ret !== true ) {
 375                         // the hook implementation will return a string to pass an error message
 376                         return Status::newFatal( 'php-mail-error', $ret );
 377                 }
 378
 379                 if ( is_array( $wgSMTP ) ) {
 380                         // Check if pear/mail is already loaded (via composer)
 381                         if ( !self::isMailUsable() ) {
 382                                 throw new MWException( 'PEAR mail package is not installed' );
 383                         }
 384
 385                         $recips = array_map( 'strval', $to );
 386
 387                         Wikimedia\suppressWarnings();
 388
 389                         // Create the mail object using the Mail::factory method
 390                         $mail_object = Mail::factory( 'smtp', $wgSMTP );
 391                         if ( PEAR::isError( $mail_object ) ) {
 392                                 wfDebug( "PEAR::Mail factory failed: " . $mail_object->getMessage() . "\n" );
 393                                 Wikimedia\restoreWarnings();
 394                                 return Status::newFatal( 'pear-mail-error', $mail_object->getMessage() );
 395                         }
 396
 397                         wfDebug( "Sending mail via PEAR::Mail\n" );
 398
 399                         $headers['Subject'] = self::quotedPrintable( $subject );
 400
 401                         // When sending only to one recipient, shows it its email using To:
 402                         if ( count( $recips ) == 1 ) {
 403                                 $headers['To'] = $recips[0];
 404                         }
 405
 406                         // Split jobs since SMTP servers tends to limit the maximum
 407                         // number of possible recipients.
 408                         $chunks = array_chunk( $recips, $wgEnotifMaxRecips );
 409                         foreach ( $chunks as $chunk ) {
 410                                 $status = self::sendWithPear( $mail_object, $chunk, $headers, $body );
 411                                 // FIXME : some chunks might be sent while others are not!
 412                                 if ( !$status->isOK() ) {
 413                                         Wikimedia\restoreWarnings();
 414                                         return $status;
 415                                 }
 416                         }
 417                         Wikimedia\restoreWarnings();
 418                         return Status::newGood();
 419                 } else {
 420                         // PHP mail()
 421                         if ( count( $to ) > 1 ) {
 422                                 $headers['To'] = 'undisclosed-recipients:;';
 423                         }
 424                         $headers = self::arrayToHeaderString( $headers, $endl );
 425
 426                         wfDebug( "Sending mail via internal mail() function\n" );
 427
 428                         self::$mErrorString = '';
 429                         $html_errors = ini_get( 'html_errors' );
 430                         ini_set( 'html_errors', '0' );
 431                         set_error_handler( 'UserMailer::errorHandler' );
 432
 433                         try {
 434                                 foreach ( $to as $recip ) {
 435                                         $sent = mail(
 436                                                 $recip->toString(),
 437                                                 self::quotedPrintable( $subject ),
 438                                                 $body,
 439                                                 $headers,
 440                                                 $extraParams
 441                                         );
 442                                 }
 443                         } catch ( Exception $e ) {
 444                                 restore_error_handler();
 445                                 throw $e;
 446                         }
 447
 448                         restore_error_handler();
 449                         ini_set( 'html_errors', $html_errors );
 450
 451                         if ( self::$mErrorString ) {
 452                                 wfDebug( "Error sending mail: " . self::$mErrorString . "\n" );
 453                                 return Status::newFatal( 'php-mail-error', self::$mErrorString );
 454                         } elseif ( !$sent ) {
 455                                 // mail function only tells if there's an error
 456                                 wfDebug( "Unknown error sending mail\n" );
 457                                 return Status::newFatal( 'php-mail-error-unknown' );
 458                         } else {
 459                                 return Status::newGood();
 460                         }
 461                 }
 462         }
 463
 464         /**
 465          * Set the mail error message in self::$mErrorString
 466          *
 467          * @param int $code Error number
 468          * @param string $string Error message
 469          */
 470         private static function errorHandler( $code, $string ) {
 471                 self::$mErrorString = preg_replace( '/^mail\(\)(\s*\[.*?\])?: /', '', $string );
 472         }
 473
 474         /**
 475          * Strips bad characters from a header value to prevent PHP mail header injection attacks
 476          * @param string $val String to be santizied
 477          * @return string
 478          */
 479         public static function sanitizeHeaderValue( $val ) {
 480                 return strtr( $val, [ "\r" => '', "\n" => '' ] );
 481         }
 482
 483         /**
 484          * Converts a string into a valid RFC 822 "phrase", such as is used for the sender name
 485          * @param string $phrase
 486          * @return string
 487          */
 488         public static function rfc822Phrase( $phrase ) {
 489                 // Remove line breaks
 490                 $phrase = self::sanitizeHeaderValue( $phrase );
 491                 // Remove quotes
 492                 $phrase = str_replace( '"', '', $phrase );
 493                 return '"' . $phrase . '"';
 494         }
 495
 496         /**
 497          * Converts a string into quoted-printable format
 498          * @since 1.17
 499          *
 500          * From PHP5.3 there is a built in function quoted_printable_encode()
 501          * This method does not duplicate that.
 502          * This method is doing Q encoding inside encoded-words as defined by RFC 2047
 503          * This is for email headers.
 504          * The built in quoted_printable_encode() is for email bodies
 505          * @param string $string
 506          * @param string $charset
 507          * @return string
 508          */
 509         public static function quotedPrintable( $string, $charset = '' ) {
 510                 // Probably incomplete; see RFC 2045
 511                 if ( empty( $charset ) ) {
 512                         $charset = 'UTF-8';
 513                 }
 514                 $charset = strtoupper( $charset );
 515                 $charset = str_replace( 'ISO-8859', 'ISO8859', $charset ); // ?
 516
 517                 $illegal = '\x00-\x08\x0b\x0c\x0e-\x1f\x7f-\xff=';
 518                 $replace = $illegal . '\t ?_';
 519                 if ( !preg_match( "/[$illegal]/", $string ) ) {
 520                         return $string;
 521                 }
 522                 $out = "=?$charset?Q?";
 523                 $out .= preg_replace_callback( "/([$replace])/",
 524                         function ( $matches ) {
 525                                 return sprintf( "=%02X", ord( $matches[1] ) );
 526                         },
 527                         $string
 528                 );
 529                 $out .= '?=';
 530                 return $out;
 531         }
 532 }