attach_oc.php

极限网络智能办公系统 - Office Automation 2008 官方100％ 源码

<?php
 

include_once( "inc/auth.php" );
$FB_STR1 = urldecode( $fichier );
if ( strstr( $FB_STR1, "../" ) || strstr( $FB_STR1, "..\\" ) )
{
	exit( );
}
$fichier = urldecode( $fichier );
$query = "select * from NETDISK where DISK_ID=".$DISK_ID;
$cursor = exequery( $connection, $query );
if ( $ROW = mysql_fetch_array( $cursor ) )
{
	$DISK_PATH = $ROW['DISK_PATH'];
}
$fichier = str_replace( "*", "#", $fichier );
$URL = $DISK_PATH."/".$fichier;
$URL = str_replace( "//", "/", $URL );
if ( !file_exists( $URL ) )
{
	echo "找不到文件：".$URL;
	exit( );
}
clearstatcache( );
ob_end_clean( );
header( "Cache-control: private" );
header( "Content-type: application/octet-stream" );
header( "Accept-Ranges: bytes" );
header( "Accept-Length: ".filesize( $URL ) );
header( "Content-Length: ".filesize( $URL ) );
header( "Content-Disposition: attachment; filename=basename(".$URL.")" );
readfile( $URL );
?>