attach_oc.php

极限网络智能办公系统 Office Automation V3.0官方100％源代码.

<?
include_once("inc/auth.php");

$FB_STR1=urldecode($fichier);
if(strstr($FB_STR1,"../")||strstr($FB_STR1,"..\\"))
   exit;

$fichier=urldecode($fichier);
$query = "select * from NETDISK where DISK_ID=$DISK_ID";
$cursor=exequery($connection,$query);
if($ROW=mysql_fetch_array($cursor))
   $DISK_PATH=$ROW["DISK_PATH"];

$fichier=str_replace("*","#",$fichier);
$URL=$DISK_PATH."/".$fichier;
$URL=str_replace("//","/",$URL);

if (!file_exists($URL))
{
 echo "找不到文件：".$URL;
 exit;
}

clearstatcache();
ob_end_clean();
header("Cache-control: private");
Header("Content-type: application/octet-stream");
Header("Accept-Ranges: bytes");
Header("Accept-Length: ".filesize($URL));
Header("Content-Length: ".filesize($URL));
Header("Content-Disposition: attachment; filename=basename($URL)");

readfile($URL);
?>