1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
|
<?php
/*
Expected state: tested, but broken.
Works if you are loged in, fatal error if not.
*/
function check_if_file($db, $name, $folder_path){
$owner = user_id($db, $name);
$file_id = select_file_id($db, $owner, $folder_path);
$check_if_file_db = $db->query("SELECT folder FROM files WHERE id=".$file_id.";");
$check_if_file_ar = $check_if_file_db->fetchArray(SQLITE3_NUM);
if($check_if_file_ar[0] == "FILE"){
return true;
} else {
return false;
}
}
function start_file_download($user, $path){
$db = $GLOBALS["db"];
$owner = user_id($db, $user);
$file_id = select_file_id($db, $owner, $path);
$file_db = $db->query("SELECT owner, share FROM files WHERE id=" . $file_id . ";");
$file_ar = $file_db->fetchArray(SQLITE3_NUM);
$file_owner = $file_ar[0];
$share = $file_ar[1];
if($_SESSION["login"] && ($_SESSION["userid"] == $file_owner)){
if(download_file($db, $file_id)){
return true;
} else {
return false;
}
} else {
if($share != "PUBLIC"){
return false;
}
if(download_file($db, $file_id)){
return true;
} else {
return false;
}
}
}
function check_file_hash($db, $file_id, $download_hash){
$check_hash_db = $db->query("SELECT share FROM files WHERE id=" . SQLite3::escapeString($file_id).";");
$check_hash_ar = $check_hash_db->fetchArray(SQLITE3_NUM);
if(($check_hash_ar[0] != "PUBLIC") || ($check_hash_ar[0] != $download_hash)){
return false;
}
if(!download_file($db, $file_id)){
return false;
} else {
return true;
}
}
function download_file($db, $file_id){
$file_db = $db->query("SELECT name, mime, hash FROM files WHERE id=". SQLite3::escapeString($file_id).";");
$file_ar = $file_db->fetchArray(SQLITE3_NUM);
$file_name = $file_ar[0];
$file_mime = $file_ar[1];
$file_hash = $file_ar[2];
$uploaddir = "../files/";
$gzip_file = $uploaddir . $file_hash . ".gz";
//TODO: buffer output, print if reading == true
header("Content-Type: ".$file_mime);
header("Content-Disposition: attachment; filename=\"".$file_name."\"");
$uncompressed_file = readgzfile($gzip_file);
if($uncompressed_file){
return true;
} else {
return false;
}
}
|
