file.php

   1 <?php
   2 /*
   3  *  Jirafeau, your web file repository
   4  *  Copyright (C) 2008  Julien "axolotl" BERNARD <axolotl@magieeternelle.org>
   5  *  Copyright (C) 2012  Jerome Jutteau <j.jutteau@gmail.com>
   6  *
   7  *  This program is free software: you can redistribute it and/or modify
   8  *  it under the terms of the GNU Affero General Public License as
   9  *  published by the Free Software Foundation, either version 3 of the
  10  *  License, or (at your option) any later version.
  11  *
  12  *  This program is distributed in the hope that it will be useful,
  13  *  but WITHOUT ANY WARRANTY; without even the implied warranty of
  14  *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  15  *  GNU Affero General Public License for more details.
  16  *
  17  *  You should have received a copy of the GNU Affero General Public License
  18  *  along with this program.  If not, see <http://www.gnu.org/licenses/>.
  19  */
  20 define ('JIRAFEAU_ROOT', dirname (__FILE__) . '/');
  21
  22 require (JIRAFEAU_ROOT . 'lib/lang.php');
  23 require (JIRAFEAU_ROOT . 'lib/config.php');
  24 require (JIRAFEAU_ROOT . 'lib/settings.php');
  25 require (JIRAFEAU_ROOT . 'lib/functions.php');
  26
  27 if (!isset ($_GET['h']) || empty ($_GET['h']))
  28 {
  29     header ('Location: ' . $cfg['web_root']);
  30     exit;
  31 }
  32
  33 $link_name = $_GET['h'];
  34
  35 if (!preg_match ('/[0-9a-f]{32}$/', $link_name))
  36 {
  37     require (JIRAFEAU_ROOT.'lib/template/header.php');
  38     echo '<div class="error"><p>' . t('Sorry, the requested file is not found') . '</p></div>';
  39     require (JIRAFEAU_ROOT.'lib/template/footer.php');
  40     exit;
  41 }
  42
  43 $link = jirafeau_get_link ($link_name);
  44 if (count ($link) == 0)
  45 {
  46     require (JIRAFEAU_ROOT.'lib/template/header.php');
  47     echo '<div class="error"><p>' . t('Sorry, the requested file is not found') .
  48     '</p></div>';
  49     require (JIRAFEAU_ROOT.'lib/template/footer.php');
  50     exit;
  51 }
  52
  53 $delete_code = '';
  54 if (isset ($_GET['d']) && !empty ($_GET['d']))
  55     $delete_code = $_GET['d'];
  56
  57 $button_download = false;
  58 if (isset ($_GET['bd']) && !empty ($_GET['bd']))
  59     $button_download = true;
  60
  61 $button_preview = false;
  62 if (isset ($_GET['bp']) && !empty ($_GET['bp']))
  63     $button_preview = true;
  64
  65 $p = s2p ($link['md5']);
  66 if (!file_exists (VAR_FILES . $p . $link['md5']))
  67 {
  68     jirafeau_delete_link ($link_name);
  69     require (JIRAFEAU_ROOT.'lib/template/header.php');
  70     echo '<div class="error"><p>'.t('File not available.').
  71     '</p></div>';
  72     require (JIRAFEAU_ROOT.'lib/template/footer.php');
  73     exit;
  74 }
  75
  76 if (!empty ($delete_code) && $delete_code == $link['link_code'])
  77 {
  78     jirafeau_delete_link ($link_name);
  79     require (JIRAFEAU_ROOT.'lib/template/header.php');
  80     echo '<div class="message"><p>'.t('File has been deleted.').
  81      '</p></div>';
  82     require (JIRAFEAU_ROOT.'lib/template/footer.php');
  83     exit;
  84 }
  85
  86 if ($link['time'] != JIRAFEAU_INFINITY && time () > $link['time'])
  87 {
  88     jirafeau_delete_link ($link_name);
  89     require (JIRAFEAU_ROOT.'lib/template/header.php');
  90     echo '<div class="error"><p>'.
  91     t('The time limit of this file has expired.') . ' ' .
  92     t('File has been deleted.') .
  93     '</p></div>';
  94     require (JIRAFEAU_ROOT . 'lib/template/footer.php');
  95     exit;
  96 }
  97
  98 $password_challenged = false;
  99 if (!empty ($link['key']))
 100 {
 101     if (!isset ($_POST['key']))
 102     {
 103         require (JIRAFEAU_ROOT.'lib/template/header.php');
 104         echo '<div id = "upload">' .
 105              '<form action = "' . $_SERVER['REQUEST_URI'] . '" ' .
 106                 'method = "post" id = "submit">'; ?>
 107              <input type = "hidden" name = "jirafeau" value = "<?php echo JIRAFEAU_VERSION ?>"/><?php
 108         echo '<fieldset>' .
 109              '<legend>' . t('Password protection') .
 110              '</legend><table><tr><td>' .
 111              t('Give the password of this file') . ' : ' .
 112              '<input type = "password" name = "key" />' .
 113              '</td></tr><tr><td>';
 114
 115             ?><input type="submit" id = "submit_download"  value="<?php echo t('Download'); ?>"
 116             onclick="document.getElementById('submit').action='<?php echo $_SERVER['REQUEST_URI'] ?>&amp;bd=1';
 117                      document.getElementById('submit_download').submit ();"/><?php
 118
 119         if ($cfg['download_page'] && $cfg['preview'])
 120         {
 121             ?><input type="submit" id = "submit_preview"  value="<?php echo t('Preview'); ?>"
 122             onclick="document.getElementById('submit').action='<?php echo $_SERVER['REQUEST_URI'] ?>&amp;bp=1';
 123                      document.getElementById('submit_preview').submit ();"/><?php
 124         }
 125         echo '</td></tr></table></fieldset></form></div>';
 126         require (JIRAFEAU_ROOT.'lib/template/footer.php');
 127         exit;
 128     }
 129     else
 130     {
 131         if ($link['key'] != md5 ($_POST['key']))
 132         {
 133             header ("Access denied");
 134             require (JIRAFEAU_ROOT.'lib/template/header.php');
 135             echo '<div class="error"><p>' . t('Access denied') .
 136             '</p></div>';
 137             require (JIRAFEAU_ROOT.'lib/template/footer.php');
 138             exit;
 139         }
 140         else
 141             $password_challenged = true;
 142     }
 143 }
 144
 145 if ($cfg['download_page'] && !$password_challenged && !$button_download && !$button_preview)
 146 {
 147         require (JIRAFEAU_ROOT.'lib/template/header.php');
 148         echo '<div id = "upload">' .
 149              '<form action = "' . $_SERVER['REQUEST_URI'] . '" ' .
 150                 'method = "post" id = "submit">'; ?>
 151              <input type = "hidden" name = "jirafeau" value = "<?php echo JIRAFEAU_VERSION ?>"/><?php
 152         echo '<fieldset>' .
 153              '<p>' . ('You are about to download ') . substr ($link['file_name'], 0, 20) . ' (' . jirafeau_human_size($link['file_size']) . ')</p>' .
 154              '<p>' . t('By using our services, you accept of our '). '<a href="' . $cfg['web_root'] . '/tos.php' . '">' . t('Term Of Service') . '</a>' . '</p>'.
 155              '<p>'
 156             ?><input type="submit" id = "submit_download"  value="<?php echo t('Download'); ?>"
 157             onclick="document.getElementById('submit').action='<?php echo $_SERVER['REQUEST_URI'] ?>&amp;bd=1';
 158                      document.getElementById('submit_download').submit ();"/><?php
 159
 160         if ($cfg['download_page'] && $cfg['preview'])
 161         {
 162             ?><input type="submit" id = "submit_preview"  value="<?php echo t('Preview'); ?>"
 163             onclick="document.getElementById('submit').action='<?php echo $_SERVER['REQUEST_URI'] ?>&amp;bp=1';
 164                      document.getElementById('submit_preview').submit ();"/><?php
 165         }
 166         echo '</p></fieldset></form></div>';
 167         require (JIRAFEAU_ROOT.'lib/template/footer.php');
 168         exit;
 169 }
 170
 171 header ('Content-Length: ' . $link['file_size']);
 172 header ('Content-Type: ' . $link['mime_type']);
 173 if (!jirafeau_is_viewable ($link['mime_type']) || !$cfg['preview'] || $button_download)
 174 {
 175     header ('Content-Disposition: attachment; filename="' .
 176         $link['file_name'] . '"');
 177 }
 178 readfile (VAR_FILES . $p . $link['md5']);
 179
 180 if ($link['onetime'] == 'O')
 181     jirafeau_delete_link ($link_name);
 182 exit;
 183
 184 ?>