attach.php

通达OA的PDA部分源代码

<?

  include_once 'auth.php';
  $FB_STR1 = urldecode ($ATTACHMENT_NAME);
  if ((strstr ($FB_STR1, '/') OR strstr ($FB_STR1, '\\')))
  {
    exit ();
  }

  $ATTACHMENT_ID = ($ATTACHMENT_ID - 2) / 3;
  $MYOA_ATTACHMENT_NAME = $ATTACHMENT_NAME;
  $PATH = $ATTACH_PATH . $ATTACHMENT_ID;
  $URL = $PATH . '/' . $MYOA_ATTACHMENT_NAME;
  if (!file_exists ($URL))
  {
    echo '找不到文件:' . $MYOA_ATTACHMENT_NAME;
    exit ();
  }

  $file_ext = strtolower (substr ($MYOA_ATTACHMENT_NAME, strpos ($MYOA_ATTACHMENT_NAME, '.')));
  switch ($file_ext)
  {
    case '.jpg':
    {
    }

    case '.bmp':
    {
    }

    case '.gif':
    {
    }

    case '.png':
    {
    }

    case '.wmv':
    {
    }

    case '.html':
    {
    }

    case '.htm':
    {
    }

    case '.wav':
    {
    }

    case '.mid':
    {
    }

    case '.mht':
    {
      $COTENT_TYPE = 0;
      $COTENT_TYPE_DESC = 'application/octet-stream';
      break;
    }

    case '.pdf':
    {
      $COTENT_TYPE = 0;
      $COTENT_TYPE_DESC = 'application/pdf';
      break;
    }

    case '.swf':
    {
      $COTENT_TYPE = 0;
      $COTENT_TYPE_DESC = 'application/x-shockwave-flash';
      break;
    }

    default:
    {
      $COTENT_TYPE = 1;
      $COTENT_TYPE_DESC = 'application/octet-stream';
      break;
    }
  }

  ob_end_clean ();
  header ('Cache-control: private');
  header ('' . 'Content-type: ' . $COTENT_TYPE_DESC);
  header ('Accept-Ranges: bytes');
  header ('Accept-Length: ' . filesize ($URL));
  if ($COTENT_TYPE == 1)
  {
    header ('' . 'Content-Disposition: attachment; filename=' . $MYOA_ATTACHMENT_NAME);
  }
  else
  {
    header ('' . 'Content-Disposition: filename=' . $MYOA_ATTACHMENT_NAME);
  }

  readfile ($URL);
?>