github/myvesta
1
0
Fork 0
mirror of https://github.com/myvesta/vesta synced 2025-08-19 21:04:07 -07:00
Code Issues Projects Releases Packages Wiki Activity Actions

Added file existence check.

Browse source 
I added a check to see if the file exists.
This commit is contained in:
System Void 2015-11-24 07:51:23 +00:00
commit d5441fdf85
1 changed files with 5 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

14
web/download/file/index.php
View file

@ -8,20 +8,16 @@ if ((!isset($_SESSION['FILEMANAGER_KEY'])) || (empty($_SESSION['FILEMANAGER_KEY'
$user = $_SESSION['user']; $user = $_SESSION['user'];
if (($_SESSION['user'] == 'admin') && (!empty($_SESSION['look']))) { if (($_SESSION['user'] == 'admin') && (!empty($_SESSION['look']))) {
$user=$_SESSION['look']; $user = $_SESSION['look'];
} }
if (!empty($_REQUEST['path'])) { $path = $_REQUEST['path'];
$path = $_REQUEST['path']; if (!empty($path) && file_exists($path)) {
header("Content-type: application/octet-stream"); header("Content-type: application/octet-stream");
header("Content-Transfer-Encoding: binary"); header("Content-Transfer-Encoding: binary");
header("Content-disposition: attachment;filename=".basename($path)); header("Content-disposition: attachment;filename=".basename($path));
passthru (VESTA_CMD . "v-open-fs-file " . $user . " " . escapeshellarg($path)); passthru(VESTA_CMD . "v-open-fs-file " . $user . " " . escapeshellarg($path));
exit; exit;
} } else {
else {
die('File not found'); die('File not found');
} }
?>