Subversion Repositories Applications.papyrus

<?php

////////////////////////////////////////////////////////////////////////////////

//                                                                            //

//   Copyright (C) 2006  Phorum Development Team                              //

//   http://www.phorum.org                                                    //

//                                                                            //

//   This program is free software. You can redistribute it and/or modify     //

//   it under the terms of either the current Phorum License (viewable at     //

//   phorum.org) or the Phorum License that was distributed with this file    //

//                                                                            //

//   This program is distributed in the hope that it will be useful,          //

//   but WITHOUT ANY WARRANTY, without even the implied warranty of           //

//   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.                     //

//                                                                            //

//   You should have received a copy of the Phorum License                    //

//   along with this program.                                                 //

////////////////////////////////////////////////////////////////////////////////

define('phorum_page','file');

ob_start();

ini_set ( "zlib.output_compression", "0");

ini_set ( "output_handler", "");

include_once("./common.php");

// set all our URL's

phorum_build_common_urls();

// checking read-permissions

if(!phorum_check_read_common()) {

  return;

}

if(empty($PHORUM["args"]["file"])){

    phorum_redirect_by_url(phorum_get_url(PHORUM_LIST_URL));

    exit();

}

$filearg=(int)$PHORUM["args"]["file"];

$file=phorum_db_file_get($filearg);

if(empty($file)){

    phorum_redirect_by_url(phorum_get_url(PHORUM_LIST_URL));

    exit();

}

$send_file=true;

// check if this phorum allows off site links and if not, check the referrer

if(isset($_SERVER["HTTP_REFERER"]) && !$PHORUM["file_offsite"] && preg_match('!^https?://!', $_SERVER["HTTP_REFERER"])){

    $base = strtolower(phorum_get_url(PHORUM_BASE_URL));

    $len = strlen($base);

    if (strtolower(substr($_SERVER["HTTP_REFERER"], 0, $len)) != $base) {

        ob_end_flush();

        $PHORUM["DATA"]["MESSAGE"]=$PHORUM["DATA"]["LANG"]["FileForbidden"];

        include phorum_get_template("header");

        include phorum_get_template("message");

        include phorum_get_template("footer");

        $send_file=false;

    }

}

if($send_file){

    // Mime Types for Attachments

    $mime_types["default"]="text/plain";

    $mime_types["pdf"]="application/pdf";

    $mime_types["doc"]="application/msword";

    $mime_types["xls"]="application/vnd.ms-excel";

    $mime_types["gif"]="image/gif";

    $mime_types["png"]="image/png";

    $mime_types["jpg"]="image/jpeg";

    $mime_types["jpeg"]="image/jpeg";

    $mime_types["jpe"]="image/jpeg";

    $mime_types["tiff"]="image/tiff";

    $mime_types["tif"]="image/tiff";

    $mime_types["xml"]="text/xml";

    $mime_types["mpeg"]="video/mpeg";

    $mime_types["mpg"]="video/mpeg";

    $mime_types["mpe"]="video/mpeg";

    $mime_types["qt"]="video/quicktime";

    $mime_types["mov"]="video/quicktime";

    $mime_types["avi"]="video/x-msvideo";

    $mime_types["gz"]="application/x-gzip";

    $mime_types["tgz"]="application/x-gzip";

    $mime_types["zip"]="application/zip";

    $mime_types["tar"]="application/x-tar";

    $mime_types["exe"]="application/octet-stream";

    $mime_types["rar"]="application/octet-stream";

    $mime_types["wma"]="application/octet-stream";

    $mime_types["wmv"]="application/octet-stream";

    $mime_types["mp3"]="audio/mpeg";

    $type=strtolower(substr($file["filename"], strrpos($file["filename"], ".")+1));

    if(isset($mime_types[$type])){

        $mime=$mime_types[$type];

    }

    else{

        $mime=$mime_types["default"];

    }

    list($mime, $file) = phorum_hook("file", array($mime, $file));

    ob_end_clean();

    header("Content-Type: $mime");

    header("Content-Disposition: filename=\"{$file['filename']}\"");

    echo base64_decode($file["file_data"]);

    exit();

}

?>