github/myvesta
1
0
Fork 0
mirror of https://github.com/myvesta/vesta synced 2025-08-21 13:54:28 -07:00
Code Issues Projects Releases Packages Wiki Activity Actions

Merge pull request #508 from SysVoid/patch-5

Browse source 
Added file existence check.
This commit is contained in:
Serghey Rodin 2016-09-05 16:54:31 +03:00 • committed by GitHub
commit 47bfb426a3
2 changed files with 10 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

5
bin/v-open-fs-file
View file

@ -33,6 +33,11 @@ if [ ! -z "$src_file" ]; then
echo "Error: invalid source path $src_file" echo "Error: invalid source path $src_file"
exit 2 exit 2
fi fi
if [ ! -f "$src_file" ]; then
echo "Error: file not found $src_file"
exit 2
fi
fi fi
# Reading file # Reading file

14
web/download/file/index.php
View file

@ -8,20 +8,16 @@ if ((!isset($_SESSION['FILEMANAGER_KEY'])) || (empty($_SESSION['FILEMANAGER_KEY'
$user = $_SESSION['user']; $user = $_SESSION['user'];
if (($_SESSION['user'] == 'admin') && (!empty($_SESSION['look']))) { if (($_SESSION['user'] == 'admin') && (!empty($_SESSION['look']))) {
$user=$_SESSION['look']; $user = $_SESSION['look'];
} }
if (!empty($_REQUEST['path'])) { $path = $_REQUEST['path'];
$path = $_REQUEST['path']; if (!empty($path)) {
header("Content-type: application/octet-stream"); header("Content-type: application/octet-stream");
header("Content-Transfer-Encoding: binary"); header("Content-Transfer-Encoding: binary");
header("Content-disposition: attachment;filename=".basename($path)); header("Content-disposition: attachment;filename=".basename($path));
passthru (VESTA_CMD . "v-open-fs-file " . $user . " " . escapeshellarg($path)); passthru(VESTA_CMD . "v-open-fs-file " . $user . " " . escapeshellarg($path));
exit; exit;
} } else {
else {
die('File not found'); die('File not found');
} }
?>