github/vesta
1
0
Fork 0
mirror of https://github.com/serghey-rodin/vesta.git synced 2025-08-19 21:04:06 -07:00
Code Issues Projects Releases Packages Wiki Activity Actions

Added file existence check.

Browse source 
I added a check to see if the file exists.
This commit is contained in:
System Void 2015-11-24 07:51:23 +00:00
commit d5441fdf85
1 changed files with 5 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

8
web/download/file/index.php
View file

@ -11,17 +11,13 @@ if (($_SESSION['user'] == 'admin') && (!empty($_SESSION['look']))) {
$user = $_SESSION['look']; $user = $_SESSION['look'];
} }
if (!empty($_REQUEST['path'])) {
$path = $_REQUEST['path']; $path = $_REQUEST['path'];
if (!empty($path) && file_exists($path)) {
header("Content-type: application/octet-stream"); header("Content-type: application/octet-stream");
header("Content-Transfer-Encoding: binary"); header("Content-Transfer-Encoding: binary");
header("Content-disposition: attachment;filename=".basename($path)); header("Content-disposition: attachment;filename=".basename($path));
passthru(VESTA_CMD . "v-open-fs-file " . $user . " " . escapeshellarg($path)); passthru(VESTA_CMD . "v-open-fs-file " . $user . " " . escapeshellarg($path));
exit; exit;
} } else {
else {
die('File not found'); die('File not found');
} }
?>