smeserver-webshare/root/opt/webshare-tools/phpfm/incl/libfile.php

51 lines
1.6 KiB
PHP
Raw Normal View History

<?php
if (!@include_once("./incl/auth.inc.php"))
include_once("../incl/auth.inc.php");
include("../conf/config.inc.php");
include("../incl/functions.inc.php");
include("../lang/$language.inc.php");
if (isset($_GET['action']) && $_GET['action'] == "download")
{
session_cache_limiter("public, post-check=50");
header("Cache-Control: private");
}
if (isset($session_save_path)) session_save_path($session_save_path);
if (isset($_GET['path'])) $path = validate_path($_GET['path']);
if (!isset($path)) $path = FALSE;
if ($path == "./" || $path == ".\\" || $path == "/" || $path == "\\") $path = FALSE;
if (isset($_GET['filename'])) $filename = basename(stripslashes($_GET['filename']));
if ($AllowDownload || $AllowView)
{
if (isset($_GET['filename']) && isset($_GET['action']) && is_file($home_directory.$path.$filename) || is_file("../".$home_directory.$path.$filename))
{
if (is_file($home_directory.$path.$filename) && !strstr($home_directory, "./") && !strstr($home_directory, ".\\"))
$fullpath = $home_directory.$path.$filename;
else if (is_file("../".$home_directory.$path.$filename))
$fullpath = "../".$home_directory.$path.$filename;
if (!$AllowDownload && $AllowView && !is_viewable_file($filename))
{
print "<font color='#CC0000'>$StrAccessDenied</font>";
exit();
}
header("Pragma:");
header("Content-Type: ".get_mimetype($filename));
header("Content-Length: ".filesize($fullpath));
if ($_GET['action'] == "download");
header("Content-Disposition: attachment; filename=\"$filename\"");
readfile($fullpath);
}
else
print "<font color='#CC0000'>$StrDownloadFail</font>";
}
?>