down.php

极限网络智能办公系统 Office Automation V3.0官方100％源代码.

<?
include_once("inc/auth.php");

if($SUB_DIR!="")
   $SUB_DIR=urldecode($SUB_DIR);
if($FILE_NAME!="")
   $FILE_NAME=urldecode($FILE_NAME);

$FB_STR1=$FILE_NAME;
if(strstr($FB_STR1,"/")||strstr($FB_STR1,"\\"))
   exit;

$query = "SELECT * from PICTURE where PIC_ID=$PIC_ID";
$cursor= exequery($connection,$query);

if($ROW=mysql_fetch_array($cursor))
   $PIC_PATH=$ROW["PIC_PATH"];

if($FILE_NAME!="")
{
   $FILE_NAME=substr($FILE_NAME,strrpos($FILE_NAME,"/"));

   if($SUB_DIR!=""&&substr($PIC_PATH,strlen($PIC_PATH)-1,1)=="/")
      $FILE_PATH = $PIC_PATH.$SUB_DIR;
   else
      $FILE_PATH = $PIC_PATH."/".$SUB_DIR;

   $FILE_PATH .="/".$FILE_NAME;

   if(!file_exists($FILE_PATH))
   {
      echo "找不到指定文件";
      exit;
   }

   ob_end_clean();

   Header("Cache-control: private");
   Header("Content-type: application/octet-stream");
   Header("Accept-Ranges: bytes");
   Header("Accept-Length: ".filesize($FILE_PATH));
   Header("Content-Disposition: attachment; filename=" . $FILE_NAME);

   readfile($FILE_PATH);
}
?>