mirror of
https://github.com/torrentpier/torrentpier
synced 2025-08-14 18:48:21 -07:00
Реформат в PSR-2 + добавление заголовков лицензии MIT в файлы
This commit is contained in:
Yuriy Pikhtarev
parent
a04df19607
commit
3730bed000
207 changed files with 44327 additions and 43119 deletions
277
dl.php
277
dl.php
|
|
@ -1,14 +1,37 @@
|
|||
<?php
|
||||
/**
|
||||
* MIT License
|
||||
*
|
||||
* Copyright (c) 2005-2017 TorrentPier
|
||||
*
|
||||
* Permission is hereby granted, free of charge, to any person obtaining a copy
|
||||
* of this software and associated documentation files (the "Software"), to deal
|
||||
* in the Software without restriction, including without limitation the rights
|
||||
* to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
|
||||
* copies of the Software, and to permit persons to whom the Software is
|
||||
* furnished to do so, subject to the following conditions:
|
||||
*
|
||||
* The above copyright notice and this permission notice shall be included in all
|
||||
* copies or substantial portions of the Software.
|
||||
*
|
||||
* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
|
||||
* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
|
||||
* FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
|
||||
* AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
|
||||
* LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
|
||||
* OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
|
||||
* SOFTWARE.
|
||||
*/
|
||||
|
||||
define('IN_FORUM', true);
|
||||
define('BB_SCRIPT', 'dl');
|
||||
define('NO_GZIP', true);
|
||||
define('BB_ROOT', './');
|
||||
require(BB_ROOT .'common.php');
|
||||
require(ATTACH_DIR .'attachment_mod.php');
|
||||
define('BB_ROOT', './');
|
||||
require(BB_ROOT . 'common.php');
|
||||
require(ATTACH_DIR . 'attachment_mod.php');
|
||||
|
||||
$datastore->enqueue(array(
|
||||
'attach_extensions',
|
||||
'attach_extensions',
|
||||
));
|
||||
|
||||
$download_id = request_var('id', 0);
|
||||
|
|
@ -17,62 +40,53 @@ $thumbnail = request_var('thumb', 0);
|
|||
// Send file to browser
|
||||
function send_file_to_browser($attachment, $upload_dir)
|
||||
{
|
||||
global $bb_cfg, $lang, $userdata;
|
||||
global $bb_cfg, $lang, $userdata;
|
||||
|
||||
$filename = ($upload_dir == '') ? $attachment['physical_filename'] : $upload_dir . '/' . $attachment['physical_filename'];
|
||||
$filename = ($upload_dir == '') ? $attachment['physical_filename'] : $upload_dir . '/' . $attachment['physical_filename'];
|
||||
|
||||
$gotit = false;
|
||||
$gotit = false;
|
||||
|
||||
if (@!file_exists(@amod_realpath($filename)))
|
||||
{
|
||||
bb_die($lang['ERROR_NO_ATTACHMENT'] . "<br /><br />" . $filename. "<br /><br />" .$lang['TOR_NOT_FOUND']);
|
||||
}
|
||||
else
|
||||
{
|
||||
$gotit = true;
|
||||
}
|
||||
if (@!file_exists(@amod_realpath($filename))) {
|
||||
bb_die($lang['ERROR_NO_ATTACHMENT'] . "<br /><br />" . $filename . "<br /><br />" . $lang['TOR_NOT_FOUND']);
|
||||
} else {
|
||||
$gotit = true;
|
||||
}
|
||||
|
||||
// Correct the mime type - we force application/octet-stream for all files, except images
|
||||
// Please do not change this, it is a security precaution
|
||||
if (!strstr($attachment['mimetype'], 'image'))
|
||||
{
|
||||
$attachment['mimetype'] = 'application/octet-stream';
|
||||
}
|
||||
// Correct the mime type - we force application/octet-stream for all files, except images
|
||||
// Please do not change this, it is a security precaution
|
||||
if (!strstr($attachment['mimetype'], 'image')) {
|
||||
$attachment['mimetype'] = 'application/octet-stream';
|
||||
}
|
||||
|
||||
//bt
|
||||
if (!(isset($_GET['original']) && !IS_USER))
|
||||
{
|
||||
include(INC_DIR .'functions_torrent.php');
|
||||
send_torrent_with_passkey($filename);
|
||||
}
|
||||
//bt
|
||||
if (!(isset($_GET['original']) && !IS_USER)) {
|
||||
include(INC_DIR . 'functions_torrent.php');
|
||||
send_torrent_with_passkey($filename);
|
||||
}
|
||||
|
||||
// Now the tricky part... let's dance
|
||||
header('Pragma: public');
|
||||
$real_filename = clean_filename(basename($attachment['real_filename']));
|
||||
$mimetype = $attachment['mimetype'].';';
|
||||
$charset = "charset={$bb_cfg['lang'][$userdata['user_lang']]['encoding']};";
|
||||
// Now the tricky part... let's dance
|
||||
header('Pragma: public');
|
||||
$real_filename = clean_filename(basename($attachment['real_filename']));
|
||||
$mimetype = $attachment['mimetype'] . ';';
|
||||
$charset = "charset={$bb_cfg['lang'][$userdata['user_lang']]['encoding']};";
|
||||
|
||||
// Send out the Headers
|
||||
header("Content-Type: $mimetype $charset name=\"$real_filename\"");
|
||||
header("Content-Disposition: inline; filename=\"$real_filename\"");
|
||||
unset($real_filename);
|
||||
// Send out the Headers
|
||||
header("Content-Type: $mimetype $charset name=\"$real_filename\"");
|
||||
header("Content-Disposition: inline; filename=\"$real_filename\"");
|
||||
unset($real_filename);
|
||||
|
||||
// Now send the File Contents to the Browser
|
||||
if ($gotit)
|
||||
{
|
||||
$size = @filesize($filename);
|
||||
if ($size)
|
||||
{
|
||||
header("Content-length: $size");
|
||||
}
|
||||
readfile($filename);
|
||||
}
|
||||
else
|
||||
{
|
||||
bb_die($lang['ERROR_NO_ATTACHMENT'] . "<br /><br />" . $filename. "<br /><br />" .$lang['TOR_NOT_FOUND']);
|
||||
}
|
||||
// Now send the File Contents to the Browser
|
||||
if ($gotit) {
|
||||
$size = @filesize($filename);
|
||||
if ($size) {
|
||||
header("Content-length: $size");
|
||||
}
|
||||
readfile($filename);
|
||||
} else {
|
||||
bb_die($lang['ERROR_NO_ATTACHMENT'] . "<br /><br />" . $filename . "<br /><br />" . $lang['TOR_NOT_FOUND']);
|
||||
}
|
||||
|
||||
exit;
|
||||
exit;
|
||||
}
|
||||
|
||||
//
|
||||
|
|
@ -82,26 +96,22 @@ $user->session_start();
|
|||
|
||||
set_die_append_msg();
|
||||
|
||||
if (!$download_id)
|
||||
{
|
||||
bb_die($lang['NO_ATTACHMENT_SELECTED']);
|
||||
if (!$download_id) {
|
||||
bb_die($lang['NO_ATTACHMENT_SELECTED']);
|
||||
}
|
||||
|
||||
if ($attach_config['disable_mod'] && !IS_ADMIN)
|
||||
{
|
||||
bb_die($lang['ATTACHMENT_FEATURE_DISABLED']);
|
||||
if ($attach_config['disable_mod'] && !IS_ADMIN) {
|
||||
bb_die($lang['ATTACHMENT_FEATURE_DISABLED']);
|
||||
}
|
||||
|
||||
$sql = 'SELECT * FROM ' . BB_ATTACHMENTS_DESC . ' WHERE attach_id = ' . (int) $download_id;
|
||||
$sql = 'SELECT * FROM ' . BB_ATTACHMENTS_DESC . ' WHERE attach_id = ' . (int)$download_id;
|
||||
|
||||
if (!($result = DB()->sql_query($sql)))
|
||||
{
|
||||
bb_die('Could not query attachment information #1');
|
||||
if (!($result = DB()->sql_query($sql))) {
|
||||
bb_die('Could not query attachment information #1');
|
||||
}
|
||||
|
||||
if (!($attachment = DB()->sql_fetchrow($result)))
|
||||
{
|
||||
bb_die($lang['ERROR_NO_ATTACHMENT']);
|
||||
if (!($attachment = DB()->sql_fetchrow($result))) {
|
||||
bb_die($lang['ERROR_NO_ATTACHMENT']);
|
||||
}
|
||||
|
||||
$attachment['physical_filename'] = basename($attachment['physical_filename']);
|
||||
|
|
@ -111,48 +121,42 @@ DB()->sql_freeresult($result);
|
|||
// get forum_id for attachment authorization or private message authorization
|
||||
$authorised = false;
|
||||
|
||||
$sql = 'SELECT * FROM ' . BB_ATTACHMENTS . ' WHERE attach_id = ' . (int) $attachment['attach_id'];
|
||||
$sql = 'SELECT * FROM ' . BB_ATTACHMENTS . ' WHERE attach_id = ' . (int)$attachment['attach_id'];
|
||||
|
||||
if (!($result = DB()->sql_query($sql)))
|
||||
{
|
||||
bb_die('Could not query attachment information #2');
|
||||
if (!($result = DB()->sql_query($sql))) {
|
||||
bb_die('Could not query attachment information #2');
|
||||
}
|
||||
|
||||
$auth_pages = DB()->sql_fetchrowset($result);
|
||||
$num_auth_pages = DB()->num_rows($result);
|
||||
|
||||
for ($i = 0; $i < $num_auth_pages && $authorised == false; $i++)
|
||||
{
|
||||
$auth_pages[$i]['post_id'] = intval($auth_pages[$i]['post_id']);
|
||||
for ($i = 0; $i < $num_auth_pages && $authorised == false; $i++) {
|
||||
$auth_pages[$i]['post_id'] = intval($auth_pages[$i]['post_id']);
|
||||
|
||||
if ($auth_pages[$i]['post_id'] != 0)
|
||||
{
|
||||
$sql = 'SELECT forum_id, topic_id FROM ' . BB_POSTS . ' WHERE post_id = ' . (int) $auth_pages[$i]['post_id'];
|
||||
if ($auth_pages[$i]['post_id'] != 0) {
|
||||
$sql = 'SELECT forum_id, topic_id FROM ' . BB_POSTS . ' WHERE post_id = ' . (int)$auth_pages[$i]['post_id'];
|
||||
|
||||
if (!($result = DB()->sql_query($sql)))
|
||||
{
|
||||
bb_die('Could not query post information');
|
||||
}
|
||||
if (!($result = DB()->sql_query($sql))) {
|
||||
bb_die('Could not query post information');
|
||||
}
|
||||
|
||||
$row = DB()->sql_fetchrow($result);
|
||||
$row = DB()->sql_fetchrow($result);
|
||||
|
||||
$topic_id = $row['topic_id'];
|
||||
$forum_id = $row['forum_id'];
|
||||
$topic_id = $row['topic_id'];
|
||||
$forum_id = $row['forum_id'];
|
||||
|
||||
$is_auth = array();
|
||||
$is_auth = auth(AUTH_ALL, $forum_id, $userdata);
|
||||
set_die_append_msg($forum_id, $topic_id);
|
||||
$is_auth = array();
|
||||
$is_auth = auth(AUTH_ALL, $forum_id, $userdata);
|
||||
set_die_append_msg($forum_id, $topic_id);
|
||||
|
||||
if ($is_auth['auth_download'])
|
||||
{
|
||||
$authorised = TRUE;
|
||||
}
|
||||
}
|
||||
if ($is_auth['auth_download']) {
|
||||
$authorised = true;
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
if (!$authorised)
|
||||
{
|
||||
bb_die($lang['SORRY_AUTH_VIEW_ATTACH']);
|
||||
if (!$authorised) {
|
||||
bb_die($lang['SORRY_AUTH_VIEW_ATTACH']);
|
||||
}
|
||||
|
||||
$datastore->rm('cat_forums');
|
||||
|
|
@ -163,67 +167,58 @@ $datastore->rm('cat_forums');
|
|||
$rows = get_extension_informations();
|
||||
$num_rows = count($rows);
|
||||
|
||||
for ($i = 0; $i < $num_rows; $i++)
|
||||
{
|
||||
$extension = strtolower(trim($rows[$i]['extension']));
|
||||
$allowed_extensions[] = $extension;
|
||||
$download_mode[$extension] = $rows[$i]['download_mode'];
|
||||
for ($i = 0; $i < $num_rows; $i++) {
|
||||
$extension = strtolower(trim($rows[$i]['extension']));
|
||||
$allowed_extensions[] = $extension;
|
||||
$download_mode[$extension] = $rows[$i]['download_mode'];
|
||||
}
|
||||
|
||||
// Disallowed
|
||||
if (!in_array($attachment['extension'], $allowed_extensions) && !IS_ADMIN)
|
||||
{
|
||||
bb_die(sprintf($lang['EXTENSION_DISABLED_AFTER_POSTING'], $attachment['extension']));
|
||||
if (!in_array($attachment['extension'], $allowed_extensions) && !IS_ADMIN) {
|
||||
bb_die(sprintf($lang['EXTENSION_DISABLED_AFTER_POSTING'], $attachment['extension']));
|
||||
}
|
||||
|
||||
$download_mode = intval($download_mode[$attachment['extension']]);
|
||||
|
||||
if ($thumbnail)
|
||||
{
|
||||
$attachment['physical_filename'] = THUMB_DIR . '/t_' . $attachment['physical_filename'];
|
||||
if ($thumbnail) {
|
||||
$attachment['physical_filename'] = THUMB_DIR . '/t_' . $attachment['physical_filename'];
|
||||
}
|
||||
|
||||
// Update download count
|
||||
if (!$thumbnail)
|
||||
{
|
||||
$sql = 'UPDATE ' . BB_ATTACHMENTS_DESC . ' SET download_count = download_count + 1 WHERE attach_id = ' . (int) $attachment['attach_id'];
|
||||
if (!$thumbnail) {
|
||||
$sql = 'UPDATE ' . BB_ATTACHMENTS_DESC . ' SET download_count = download_count + 1 WHERE attach_id = ' . (int)$attachment['attach_id'];
|
||||
|
||||
if (!DB()->sql_query($sql))
|
||||
{
|
||||
bb_die('Could not update attachment download count');
|
||||
}
|
||||
if (!DB()->sql_query($sql)) {
|
||||
bb_die('Could not update attachment download count');
|
||||
}
|
||||
}
|
||||
|
||||
// Determine the 'presenting'-method
|
||||
if ($download_mode == PHYSICAL_LINK)
|
||||
{
|
||||
$url = make_url($upload_dir . '/' . $attachment['physical_filename']);
|
||||
header('Location: ' . $url);
|
||||
exit;
|
||||
if ($download_mode == PHYSICAL_LINK) {
|
||||
$url = make_url($upload_dir . '/' . $attachment['physical_filename']);
|
||||
header('Location: ' . $url);
|
||||
exit;
|
||||
} else {
|
||||
if (IS_GUEST && !bb_captcha('check')) {
|
||||
global $template;
|
||||
|
||||
$redirect_url = isset($_POST['redirect_url']) ? $_POST['redirect_url'] : (isset($_SERVER['HTTP_REFERER']) ? $_SERVER['HTTP_REFERER'] : '/');
|
||||
$message = '<form action="' . DOWNLOAD_URL . $attachment['attach_id'] . '" method="post">';
|
||||
$message .= $lang['CAPTCHA'] . ':';
|
||||
$message .= '<div class="mrg_10" align="center">' . bb_captcha('get') . '</div>';
|
||||
$message .= '<input type="hidden" name="redirect_url" value="' . $redirect_url . '" />';
|
||||
$message .= '<input type="submit" class="bold" value="' . $lang['SUBMIT'] . '" /> ';
|
||||
$message .= '<input type="button" class="bold" value="' . $lang['GO_BACK'] . '" onclick="document.location.href = \'' . $redirect_url . '\';" />';
|
||||
$message .= '</form>';
|
||||
|
||||
$template->assign_vars(array(
|
||||
'ERROR_MESSAGE' => $message,
|
||||
));
|
||||
|
||||
require(PAGE_HEADER);
|
||||
require(PAGE_FOOTER);
|
||||
}
|
||||
|
||||
send_file_to_browser($attachment, $upload_dir);
|
||||
exit;
|
||||
}
|
||||
else
|
||||
{
|
||||
if (IS_GUEST && !bb_captcha('check'))
|
||||
{
|
||||
global $template;
|
||||
|
||||
$redirect_url = isset($_POST['redirect_url']) ? $_POST['redirect_url'] : (isset($_SERVER['HTTP_REFERER']) ? $_SERVER['HTTP_REFERER'] : '/');
|
||||
$message = '<form action="'. DOWNLOAD_URL . $attachment['attach_id'] .'" method="post">';
|
||||
$message .= $lang['CAPTCHA'].':';
|
||||
$message .= '<div class="mrg_10" align="center">'. bb_captcha('get') .'</div>';
|
||||
$message .= '<input type="hidden" name="redirect_url" value="'. $redirect_url .'" />';
|
||||
$message .= '<input type="submit" class="bold" value="'. $lang['SUBMIT'] .'" /> ';
|
||||
$message .= '<input type="button" class="bold" value="'. $lang['GO_BACK'] .'" onclick="document.location.href = \''. $redirect_url .'\';" />';
|
||||
$message .= '</form>';
|
||||
|
||||
$template->assign_vars(array(
|
||||
'ERROR_MESSAGE' => $message,
|
||||
));
|
||||
|
||||
require(PAGE_HEADER);
|
||||
require(PAGE_FOOTER);
|
||||
}
|
||||
|
||||
send_file_to_browser($attachment, $upload_dir);
|
||||
exit;
|
||||
}
|
||||
Loading…
Add table
Add a link
Reference in a new issue