attach_oc.php

来自「通达OA2007SE源代码 非常好的」· PHP 代码 · 共 32 行

<?
  include_once 'inc/auth.php';
  $FB_STR1 = urldecode ($fichier);
  if ((strstr ($FB_STR1, '../') OR strstr ($FB_STR1, '..\\')))
  {
    exit ();
  }
  $query = ((''.'select * from NETDISK where DISK_ID=').$DISK_ID);
  $cursor = exequery ($connection, $query);
  if ($ROW = mysql_fetch_array ($cursor))
  {
    $DISK_PATH = $ROW['DISK_PATH'];
  }
  $fichier = str_replace ('*', '#', $fichier);
  $URL = (($DISK_PATH.'/').$fichier);
  $URL = str_replace ('//', '/', $URL);
  if (!file_exists ($URL))
  {
    echo ('找不到文件：'.$URL);
    exit ();
  }
  clearstatcache ();
  ob_end_clean ();
  header ('Cache-control: private');
  header ('Content-type: application/octet-stream');
  header ('Accept-Ranges: bytes');
  header (('Accept-Length: '.filesize ($URL)));
  header (('Content-Length: '.filesize ($URL)));
  header (('Content-Disposition: attachment; filename='.basename ($URL)));
  readfile ($URL);
?>