aboutsummaryrefslogtreecommitdiffstats
path: root/Zotlabs/Module/Attach.php
blob: 8948b66d72c830ef746d7fc6718686dd51c76284 (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
<?php
namespace Zotlabs\Module;

require_once('include/security.php');
require_once('include/attach.php');


class Attach extends \Zotlabs\Web\Controller {

	function init() {
	
		if(argc() < 2) {
			notice( t('Item not available.') . EOL);
			return;
		}
	
		$r = attach_by_hash(argv(1),((argc() > 2) ? intval(argv(2)) : 0));
	
		if(! $r['success']) {
			notice( $r['message'] . EOL);
			return;
		}
	
		$c = q("select channel_address from channel where channel_id = %d limit 1",
			intval($r['data']['uid'])
		);
	
		if(! $c)
			return;
	
	
		$unsafe_types = array('text/html','text/css','application/javascript');
	
		if(in_array($r['data']['filetype'],$unsafe_types)) {
				header('Content-type: text/plain');
		}
		else {
			header('Content-type: ' . $r['data']['filetype']);
		}
	
		header('Content-disposition: attachment; filename="' . $r['data']['filename'] . '"');
		if(intval($r['data']['os_storage'])) {
			$fname = dbunescbin($r['data']['data']);
			if(strpos($fname,'store') !== false)
				$istream = fopen($fname,'rb');
			else
				$istream = fopen('store/' . $c[0]['channel_address'] . '/' . $fname,'rb');
			$ostream = fopen('php://output','wb');
			if($istream && $ostream) {
				pipe_streams($istream,$ostream);
				fclose($istream);
				fclose($ostream);
			}
		}
		else
			echo dbunescbin($r['data']['data']);
		killme();
	
	}
	
}