exit;
}
+/* Operations may take a long time.
+ * Be sure PHP's safe mode is off.
+ */
+set_time_limit(0);
+
$link_name = $_GET['h'];
-if (!preg_match ('/[0-9a-f]{32}$/', $link_name))
+if (!preg_match ('/[0-9a-zA-Z_-]+$/', $link_name))
{
require (JIRAFEAU_ROOT.'lib/template/header.php');
echo '<div class="error"><p>' . t('Sorry, the requested file is not found') . '</p></div>';
if (isset ($_GET['d']) && !empty ($_GET['d']))
$delete_code = $_GET['d'];
+$crypt_key = '';
+if (isset ($_GET['k']) && !empty ($_GET['k']))
+ $crypt_key = $_GET['k'];
+
$button_download = false;
if (isset ($_GET['bd']) && !empty ($_GET['bd']))
$button_download = true;
exit;
}
+if (empty ($crypt_key) && $link['crypted'])
+{
+ require (JIRAFEAU_ROOT.'lib/template/header.php');
+ echo '<div class="error"><p>' . t('Sorry, the requested file is not found') .
+ '</p></div>';
+ require (JIRAFEAU_ROOT.'lib/template/footer.php');
+ exit;
+}
+
$password_challenged = false;
if (!empty ($link['key']))
{
if (!isset ($_POST['key']))
{
require (JIRAFEAU_ROOT.'lib/template/header.php');
- echo '<div id = "upload">' .
- '<form action = "' . $_SERVER['REQUEST_URI'] . '" ' .
- 'method = "post" id = "submit">'; ?>
+ echo '<div>' .
+ '<form action = "';
+ echo $cfg['web_root'] . '/file.php';
+ echo '" ' .
+ 'method = "post" id = "submit">'; ?>
<input type = "hidden" name = "jirafeau" value = "<?php echo JIRAFEAU_VERSION ?>"/><?php
echo '<fieldset>' .
'<legend>' . t('Password protection') .
'</legend><table><tr><td>' .
t('Give the password of this file') . ' : ' .
'<input type = "password" name = "key" />' .
- '</td></tr><tr><td>';
-
+ '</td></tr>' .
+ '<tr><td>' .
+ t('By using our services, you accept of our'). ' <a href="' . $cfg['web_root'] . '/tos.php' . '">' . t('Term Of Service') . '</a>' .
+ '</td></tr>' .
+ '<tr><td>';
?><input type="submit" id = "submit_download" value="<?php echo t('Download'); ?>"
- onclick="document.getElementById('submit').action='<?php echo $_SERVER['REQUEST_URI'] ?>&bd=1';
- document.getElementById('submit_download').submit ();"/><?php
-
+ onclick="document.getElementById('submit').action='
+<?php
+ echo $cfg['web_root'] . '/file.php?h=' . $link_name . '&bd=1';
+ if (!empty($crypt_key))
+ echo '&k=' . urlencode($crypt_key);
+?>';
+ document.getElementById('submit_download').submit ();"/><?php
if ($cfg['download_page'] && $cfg['preview'])
{
?><input type="submit" id = "submit_preview" value="<?php echo t('Preview'); ?>"
- onclick="document.getElementById('submit').action='<?php echo $_SERVER['REQUEST_URI'] ?>&bp=1';
- document.getElementById('submit_preview').submit ();"/><?php
+ onclick="document.getElementById('submit').action='
+<?php
+ echo $cfg['web_root'] . '/file.php?h=' . $link_name . '&bp=1';
+ if (!empty($crypt_key))
+ echo '&k=' . urlencode($crypt_key);
+?>';
+ document.getElementById('submit_preview').submit ();"/><?php
}
echo '</td></tr></table></fieldset></form></div>';
require (JIRAFEAU_ROOT.'lib/template/footer.php');
}
else
{
- if ($link['key'] != md5 ($_POST['key']))
+ if ($link['key'] == md5 ($_POST['key']))
+ $password_challenged = true;
+ else
{
header ("Access denied");
require (JIRAFEAU_ROOT.'lib/template/header.php');
require (JIRAFEAU_ROOT.'lib/template/footer.php');
exit;
}
- else
- $password_challenged = true;
}
}
if ($cfg['download_page'] && !$password_challenged && !$button_download && !$button_preview)
{
require (JIRAFEAU_ROOT.'lib/template/header.php');
- echo '<div id = "upload">' .
- '<form action = "' . $_SERVER['REQUEST_URI'] . '" ' .
- 'method = "post" id = "submit">'; ?>
+ echo '<div>' .
+ '<form action = "';
+ echo $cfg['web_root'] . '/file.php';
+ echo '" ' .
+ 'method = "post" id = "submit">'; ?>
<input type = "hidden" name = "jirafeau" value = "<?php echo JIRAFEAU_VERSION ?>"/><?php
- echo '<fieldset>' .
- '<p>' . ('You are about to download ') . substr ($link['file_name'], 0, 20) . ' (' . jirafeau_human_size($link['file_size']) . ')</p>' .
- '<p>' . t('By using our services, you accept of our '). '<a href="' . $cfg['web_root'] . '/tos.php' . '">' . t('Term Of Service') . '</a>' . '</p>'.
- '<p>'
+ echo '<fieldset><legend>' . $link['file_name'] . '</legend><table>' .
+ '<tr><td>' .
+ t('You are about to download') . ' "' . $link['file_name'] . '" (' . jirafeau_human_size($link['file_size']) . ')' .
+ '</td></tr>' .
+ '<tr><td>' .
+ t('By using our services, you accept of our'). ' <a href="' . $cfg['web_root'] . '/tos.php' . '">' . t('Term Of Service') . '</a>';
?><input type="submit" id = "submit_download" value="<?php echo t('Download'); ?>"
- onclick="document.getElementById('submit').action='<?php echo $_SERVER['REQUEST_URI'] ?>&bd=1';
- document.getElementById('submit_download').submit ();"/><?php
+ onclick="document.getElementById('submit').action='
+<?php
+ echo $cfg['web_root'] . '/file.php?h=' . $link_name . '&bd=1';
+ if (!empty($crypt_key))
+ echo '&k=' . urlencode($crypt_key);
+?>';
+ document.getElementById('submit_download').submit ();"/><?php
if ($cfg['download_page'] && $cfg['preview'])
{
?><input type="submit" id = "submit_preview" value="<?php echo t('Preview'); ?>"
- onclick="document.getElementById('submit').action='<?php echo $_SERVER['REQUEST_URI'] ?>&bp=1';
- document.getElementById('submit_preview').submit ();"/><?php
+ onclick="document.getElementById('submit').action='
+<?php
+ echo $cfg['web_root'] . '/file.php?h=' . $link_name . '&bp=1';
+ if (!empty($crypt_key))
+ echo '&k=' . urlencode($crypt_key);
+?>';
+ document.getElementById('submit_preview').submit ();"/><?php
}
- echo '</p></fieldset></form></div>';
+ echo '</td></tr>';
+ echo '</table></fieldset></form></div>';
require (JIRAFEAU_ROOT.'lib/template/footer.php');
exit;
}
+header ('HTTP/1.0 200 OK');
header ('Content-Length: ' . $link['file_size']);
-header ('Content-Type: ' . $link['mime_type']);
if (!jirafeau_is_viewable ($link['mime_type']) || !$cfg['preview'] || $button_download)
-{
header ('Content-Disposition: attachment; filename="' .
$link['file_name'] . '"');
+else
+ header ('Content-Type: ' . $link['mime_type']);
+
+/* Read encrypted file. */
+if ($link['crypted'])
+{
+ /* Init module */
+ $m = mcrypt_module_open('rijndael-256', '', 'ofb', '');
+ /* Extract key and iv. */
+ $md5_key = md5 ($crypt_key);
+ $iv = jirafeau_crypt_create_iv ($md5_key, mcrypt_enc_get_iv_size($m));
+ /* Init module. */
+ mcrypt_generic_init ($m, $md5_key, $iv);
+ /* Decrypt file. */
+ $r = fopen (VAR_FILES . $p . $link['md5'], 'r');
+ while (!feof ($r))
+ {
+ $dec = mdecrypt_generic($m, fread ($r, 1024));
+ print $dec;
+ ob_flush();
+ }
+ fclose ($r);
+ /* Cleanup. */
+ mcrypt_generic_deinit($m);
+ mcrypt_module_close($m);
+}
+/* Read file. */
+else
+{
+ $r = fopen (VAR_FILES . $p . $link['md5'], 'r');
+ while (!feof ($r))
+ {
+ print fread ($r, 1024);
+ ob_flush();
+ }
+ fclose ($r);
}
-readfile (VAR_FILES . $p . $link['md5']);
if ($link['onetime'] == 'O')
jirafeau_delete_link ($link_name);
git.p6c8.net / jirafeau_mojo42.git / blobdiff