attach_oc.php

极限网络智能办公系统 - Office Automation 2008 官方100％ 源码

<?php
 

include_once( "inc/auth.php" );
$FB_STR1 = urldecode( $ATTACHMENT_NAME );
if ( strstr( $FB_STR1, "/" ) || strstr( $FB_STR1, "\\" ) )
{
	exit( );
}
$ATTACHMENT_ID = ( $ATTACHMENT_ID - 2 ) / 3;
$ATTACHMENT_NAME = str_replace( "*", "#", $ATTACHMENT_NAME );
$URL = $ATTACH_PATH.$ATTACHMENT_ID."/".$ATTACHMENT_NAME;
if ( !file_exists( $URL ) )
{
	$PATH = $ATTACH_PATH2.$MODULE."/".$YM."/".$ATTACHMENT_ID;
	$URL = $PATH.".".$ATTACHMENT_NAME;
}
if ( !file_exists( $URL ) )
{
	echo "找不到文件：".$URL;
	exit( );
}
clearstatcache( );
ob_end_clean( );
header( "Cache-control: private" );
header( "Content-type: application/octet-stream" );
header( "Accept-Ranges: bytes" );
header( "Accept-Length: ".filesize( $URL ) );
header( "Content-Length: ".filesize( $URL ) );
header( "Content-Disposition: attachment; filename=".$ATTACHMENT_NAME );
readfile( $URL );
?>