Securing SMTP Transport

Reading Mail Messages

Zend_Mail can read mail messages from several local or remote mail storages. All of them have the same basic API to count and fetch messages and some of them implement additional interfaces for not so common features. For a feature overview of the implemented storages, see the following table.

Mail Read Feature Overview
Feature Mbox Maildir Pop3 IMAP
Storage type local local remote remote
Fetch message Yes Yes Yes Yes
Fetch MIME-part emulated emulated emulated emulated
Folders Yes Yes No Yes
Create message/folder No todo No todo
Flags No Yes No Yes
Quota No Yes No No

Simple example using Pop3

  1. span style="color: #ff0000;">'host'     => 'localhost',
  2.                                          'user'     => 'test',
  3.                                          'password' => 'test'" messages found\n""Mail from '{$message->from}': {$message->subject}\n";
  4. }

Opening a local storage

Mbox and Maildir are the two supported formats for local mail storages, both in their most simple formats.

If you want to read from a Mbox file you only need to give the filename to the constructor of Zend_Mail_Storage_Mbox:

  1. span style="color: #ff0000;">'filename' =>
  2.                                              '/home/test/mail/inbox'));

Maildir is very similar but needs a dirname:

  1. span style="color: #ff0000;">'dirname' =>
  2.                                                 '/home/test/mail/'));

Both constructors throw a Zend_Mail_Exception if the storage can't be read.

Opening a remote storage

For remote storages the two most popular protocols are supported: Pop3 and Imap. Both need at least a host and a user to connect and login. The default password is an empty string, the default port as given in the protocol RFC.

  1. // connecting with Pop3
  2. 'host'     => 'example.com',
  3.                                          'user'     => 'test',
  4.                                          'password' => 'test'));
  5.  
  6. // connecting with Imap
  7. 'host'     => 'example.com',
  8.                                          'user'     => 'test',
  9.                                          'password' => 'test'));
  10.  
  11. // example for a none standard port
  12. 'host'     => 'example.com',
  13.                                          'port'     => 1120
  14.                                          'user'     => 'test',
  15.                                          'password' => 'test'));

For both storages SSL and TLS are supported. If you use SSL the default port changes as given in the RFC.

  1. // examples for Zend_Mail_Storage_Pop3, same works for Zend_Mail_Storage_Imap
  2.  
  3. // use SSL on different port (default is 995 for Pop3 and 993 for Imap)
  4. 'host'     => 'example.com',
  5.                                          'user'     => 'test',
  6.                                          'password' => 'test',
  7.                                          'ssl'      => 'SSL'));
  8.  
  9. // use TLS
  10. 'host'     => 'example.com',
  11.                                          'user'     => 'test',
  12.                                          'password' => 'test',
  13.                                          'ssl'      => 'TLS'));

Both constructors can throw Zend_Mail_Exception or Zend_Mail_Protocol_Exception (extends Zend_Mail_Exception), depending on the type of error.

Fetching messages and simple methods

Messages can be fetched after you've opened the storage . You need the message number, which is a counter starting with 1 for the first message. To fetch the message, you use the method getMessage():

  1.  

Array access is also supported, but this access method won't supported any additional parameters that could be added to getMessage(). As long as you don't mind, and can live with the default values, you may use:

  1.  

For iterating over all messages the Iterator interface is implemented:

  1. span style="color: #808080; font-style: italic;">// do stuff ...
  2. }

To count the messages in the storage, you can either use the method countMessages() or use array access:

  1. // method
  2. // array access

To remove a mail, you use the method removeMessage() or again array access:

  1. // method
  2. // array access

Working with messages

After you fetch the messages with getMessage() you want to fetch headers, the content or single parts of a multipart message. All headers can be accessed via properties or the method getHeader() if you want more control or have unusual header names. The header names are lower-cased internally, thus the case of the header name in the mail message doesn't matter. Also headers with a dash can be written in camel-case. If no header is found for both notations an exception is thrown. To encounter this the method headerExists() can be used to check the existence of a header.

  1. // get the message object
  2. // output subject of message
  3. "\n";
  4.  
  5. // get content-type header
  6. $type = $message->contentType;
  7.  
  8. // check if CC isset:
  9. // or $message->headerExists('cc');
  10.     $cc = $message->cc;
  11. }

If you have multiple headers with the same name- i.e. the Received headers- you might want an array instead of a string. In this case, use the getHeader() method.

  1. // get header as property - the result is always a string,
  2. // with new lines between the single occurrences in the message
  3. $received = $message->received;
  4.  
  5. // the same via getHeader() method
  6. 'received', 'string');
  7.  
  8. // better an array with a single entry for every occurrences
  9. 'received', 'array'// do stuff
  10. }
  11.  
  12. // if you don't define a format you'll get the internal representation
  13. // (string for single headers, array for multiple)
  14. 'received'// only one received header found in message
  15. }

The method getHeaders() returns all headers as array with the lower-cased name as key and the value as and array for multiple headers or as string for single headers.

  1. // dump all headers
  2. "$name: $value\n""$name: $entry\n";
  3.     }
  4. }

If you don't have a multipart message, fetching the content is easily done via getContent(). Unlike the headers, the content is only fetched when needed (aka late-fetch).

  1. // output message content for HTML
  2. '<pre>''</pre>';

Checking for multipart messages is done with the method isMultipart(). If you have multipart message you can get an instance of Zend_Mail_Part with the method getPart(). Zend_Mail_Part is the base class of Zend_Mail_Message, so you have the same methods: getHeader(), getHeaders(), getContent(), getPart(), isMultipart() and the properties for headers.

  1. // get the first none multipart part
  2. 'Type of this part is '';') . "\n""Content:\n"

Zend_Mail_Part also implements RecursiveIterator, which makes it easy to scan through all parts. And for easy output, it also implements the magic method __toString(), which returns the content.

  1. // output first text/plain part
  2. ';') == 'text/plain'// ignore
  3. 'no plain text part found'"plain text part: \n" . $foundPart;
  4. }

Checking for flags

Maildir and IMAP support storing flags. The class Zend_Mail_Storage has constants for all known maildir and IMAP system flags, named Zend_Mail_Storage::FLAG_<flagname>. To check for flags Zend_Mail_Message has a method called hasFlag(). With getFlags() you'll get all set flags.

  1. // find unread messages
  2. "Unread mails:\n"// mark recent/new mails
  3. '! ''  '"\n";
  4. }
  5.  
  6. // check for known flags
  7. "Message is flagged as: "'Answered ''Flagged '// ...
  8.         // check for other flags
  9.         // ...
  10. '(unknown flag) ';
  11.     }
  12. }

As IMAP allows user or client defined flags, you could get flags that don't have a constant in Zend_Mail_Storage. Instead, they are returned as strings and can be checked the same way with hasFlag().

  1. // check message for client defined flags $IsSpam, $SpamTested
  2. '$SpamTested''message has not been tested for spam''$IsSpam''this message is spam''this message is ham';
  3. }

Using folders

All storages, except Pop3, support folders, also called mailboxes. The interface implemented by all storages supporting folders is called Zend_Mail_Storage_Folder_Interface. Also all of these classes have an additional optional parameter called folder, which is the folder selected after login, in the constructor.

For the local storages you need to use separate classes called Zend_Mail_Storage_Folder_Mbox or Zend_Mail_Storage_Folder_Maildir. Both need one parameter called dirname with the name of the base dir. The format for maildir is as defined in maildir++ (with a dot as default delimiter), Mbox is a directory hierarchy with Mbox files. If you don't have a Mbox file called INBOX in your Mbox base dir you need to set another folder in the constructor.

Zend_Mail_Storage_Imap already supports folders by default. Examples for opening these storages:

  1. // mbox with folders
  2. 'dirname' =>
  3.                                                     '/home/test/mail/'));
  4.  
  5. // mbox with a default folder not called INBOX, also works
  6. // with Zend_Mail_Storage_Folder_Maildir and Zend_Mail_Storage_Imap
  7. 'dirname' =>
  8.                                                     '/home/test/mail/',
  9.                                                 'folder'  =>
  10.                                                     'Archive'));
  11.  
  12. // maildir with folders
  13. 'dirname' =>
  14.                                                        '/home/test/mail/'));
  15.  
  16. // maildir with colon as delimiter, as suggested in Maildir++
  17. 'dirname' =>
  18.                                                        '/home/test/mail/',
  19.                                                    'delim'   => ':'));
  20.  
  21. // imap is the same with and without folders
  22. 'host'     => 'example.com',
  23.                                          'user'     => 'test',
  24.                                          'password' => 'test'));

With the method getFolders($root = null) you can get the folder hierarchy starting with the root folder or the given folder. It's returned as an instance of Zend_Mail_Storage_Folder, which implements RecursiveIterator and all children are also instances of Zend_Mail_Storage_Folder. Each of these instances has a local and a global name returned by the methods getLocalName() and getGlobalName(). The global name is the absolute name from the root folder (including delimiters), the local name is the name in the parent folder.

Mail Folder Names
Global Name Local Name
/INBOX INBOX
/Archive/2005 2005
List.ZF.General General

If you use the iterator, the key of the current element is the local name. The global name is also returned by the magic method __toString(). Some folders may not be selectable, which means they can't store messages and selecting them results in an error. This can be checked with the method isSelectable(). So it's very easy to output the whole tree in a view:

  1. span style="color: #ff0000;">'<select name="folder">''', $folders->getDepth(), '-''<option'' disabled="disabled"'' value="''">''</option>''</select>';

The current selected folder is returned by the method getCurrentFolder(). Changing the folder is done with the method selectFolder(), which needs the global name as parameter. If you want to avoid to write delimiters you can also use the properties of a Zend_Mail_Storage_Folder instance:

  1. // depending on your mail storage and its settings $rootFolder->Archive->2005
  2. // is the same as:
  3. //   /Archive/2005
  4. //  Archive:2005
  5. //  INBOX.Archive.2005
  6. //  ...
  7. 'Last folder was '"new folder is $folder\n"

Advanced Use

Using NOOP

If you're using a remote storage and have some long tasks you might need to keep the connection alive via noop:

  1. span style="color: #808080; font-style: italic;">// do some calculations ...
  2. // keep alive
  3.  
  4.     // do something else ...
  5. // keep alive
  6. }

Caching instances

Zend_Mail_Storage_Mbox, Zend_Mail_Storage_Folder_Mbox, Zend_Mail_Storage_Maildir and Zend_Mail_Storage_Folder_Maildir implement the magic methods __sleep() and __wakeup(), which means they are serializable. This avoids parsing the files or directory tree more than once. The disadvantage is that your Mbox or Maildir storage should not change. Some easy checks may be done, like reparsing the current Mbox file if the modification time changes, or reparsing the folder structure if a folder has vanished (which still results in an error, but you can search for another folder afterwards). It's better if you have something like a signal file for changes and check it before using the cached instance.

  1. // there's no specific cache handler/class used here,
  2. // change the code to match your cache handler
  3. '/home/test/.mail.last_change''/home/test/mail/''example mail cache ''dirname'// do stuff ...

Extending Protocol Classes

Remote storages use two classes: Zend_Mail_Storage_<Name> and Zend_Mail_Protocol_<Name>. The protocol class translates the protocol commands and responses from and to PHP, like methods for the commands or variables with different structures for data. The other/main class implements the common interface.

If you need additional protocol features, you can extend the protocol class and use it in the constructor of the main class. As an example, assume we need to knock different ports before we can connect to POP3.

  1. span style="color: #808080; font-style: italic;">// no auto connect in this class
  2. // ... check $params here! ...
  3. 'host']);
  4.  
  5.         // do our "special" thing
  6. 'knock_ports'// get to correct state
  7.         $protocol->connect($params['host'], $params['port''user'], $params['password']);
  8.  
  9.         // initialize parent
  10. 'host'        => 'localhost',
  11.                                           'user'        => 'test',
  12.                                           'password'    => 'test',
  13.                                           'knock_ports'

As you see, we always assume we're connected, logged in and, if supported, a folder is selected in the constructor of the main class. Thus if you assign your own protocol class, you always need to make sure that's done or the next method will fail if the server doesn't allow it in the current state.

Using Quota (since 1.5)

Zend_Mail_Storage_Writable_Maildir has support for Maildir++ quotas. It's disabled by default, but it's possible to use it manually, if the automatic checks are not desired (this means appendMessage(), removeMessage() and copyMessage() do no checks and do not add entries to the maildirsize file). If enabled, an exception is thrown if you try to write to the maildir and it's already over quota.

There are three methods used for quotas: getQuota(), setQuota() and checkQuota():

  1. span style="color: #ff0000;">'dirname' =>
  2.                                                    '/home/test/mail/'// true to enable, false to disable
  3. 'Quota check is now ''enabled' : 'disabled', "\n";
  4. // check quota can be used even if quota checks are disabled
  5. 'You are ''over quota' : 'not over quota', "\n";

checkQuota() can also return a more detailed response:

  1. span style="color: #ff0000;">'You are ', $quota['over_quota'] ? 'over quota' : 'not over quota', "\n"'You have ',
  2.      $quota['count'],
  3.      ' of ',
  4.      $quota['quota']['count'],
  5.      ' messages and use ''size'], ' of ', $quota['quota']['size'], ' octets';

If you want to specify your own quota instead of using the one specified in the maildirsize file you can do with setQuota():

  1. // message count and octet size supported, order does matter
  2. 'size' => 10000, 'count' => 100));

To add your own quota checks use single letters as keys, and they will be preserved (but obviously not checked). It's also possible to extend Zend_Mail_Storage_Writable_Maildir to define your own quota only if the maildirsize file is missing (which can happen in Maildir++):

  1. span style="color: #808080; font-style: italic;">// getQuota is called with $fromStorage = true by quota checks
  2. // unknown error:
  3.                 throw $e;
  4.             }
  5.             // maildirsize file must be missing
  6. 'count''size' => $size);
  7.         }
  8.     }
  9. }

Securing SMTP Transport