1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
|
<?php
/*
Expected state: tested, should work.
*/
function check_if_file($db, $name, $folder_path){
$owner = user_id($db, $name);
$file_id = select_file_id($db, $owner, $folder_path);
if($file_id){
$check_if_file_db = $db->query("SELECT folder FROM files WHERE id=".$file_id.";");
$check_if_file_ar = $check_if_file_db->fetchArray(SQLITE3_NUM);
if($check_if_file_ar[0] == "FILE"){
return true;
} else {
return false;
}
} else {
//$content = get_path_to_empty_folder($db, $name, $folder_path);
//print_empty_folder($content);
//get_404("/", "Protected file");
return false;
}
}
function start_file_download($user, $path){
$db = $GLOBALS["db"];
$owner = user_id($db, $user);
$file_id = select_file_id($db, $owner, $path);
$file_db = $db->query("SELECT owner, share FROM files WHERE id=" . $file_id . ";");
$file_ar = $file_db->fetchArray(SQLITE3_NUM);
$file_owner = $file_ar[0];
$share = $file_ar[1];
if($_SESSION["login"] && ($_SESSION["userid"] == $file_owner)){
if(download_file($db, $file_id)){
return true;
} else {
return false;
}
} else {
if($share != "PUBLIC"){
return false;
}
if(download_file($db, $file_id)){
return true;
} else {
return false;
}
}
}
function check_file_hash($db, $file_id, $download_hash){
if(preg_match("/[^0-9]/", $file_id)){
return DOWNLOAD_FALSE_ID;
}
$check_hash_db = $db->query("SELECT owner, folder, share, download_link FROM files WHERE id=" . SQLite3::escapeString($file_id).";");
$check_hash_ar = $check_hash_db->fetchArray(SQLITE3_NUM);
if($check_hash_ar[1] != "FILE"){
return DOWNLOAD_NOT_FILE;
}
if($check_hash_ar[2] != "PUBLIC"){
if($_SESSION["userid"] != $check_hash_ar[0]){
if($check_hash_ar[3] != $download_hash){
return DOWNLOAD_PRIVATE_FILE;
}
}
}
if(!download_file($db, $file_id)){
return false;
} else {
return true;
}
}
function download_file($db, $file_id){
$file_db = $db->query("SELECT name, mime, size, hash FROM files WHERE id=". SQLite3::escapeString($file_id).";");
$file_ar = $file_db->fetchArray(SQLITE3_NUM);
$file_name = $file_ar[0];
$file_mime = $file_ar[1];
$file_size = $file_ar[2];
$file_hash = $file_ar[3];
$uploaddir = "../files/";
$gzip_file = $uploaddir . $file_hash . ".gz";
//TODO: buffer output, print if reading == true
header("Content-Type: ".$file_mime);
if(!preg_match("/^image\/.+/", $file_mime)){
header("Content-Disposition: attachment; filename=\"".$file_name."\"");
} else {
header("filename=".$file_name."");
}
header("Content-Length: ".$file_size);
set_time_limit(0);
$uncompressed_file = readgzfile($gzip_file);
if($uncompressed_file){
return true;
} else {
return false;
}
}
|
