attach_oc.php

来自「通达OA2007SE源代码 非常好的」· PHP 代码 · 共 34 行

<?
  include_once 'inc/auth.php';
  include_once 'inc/utility_all.php';
  $FB_STR1 = urldecode ($ATTACHMENT_NAME);
  if ((strstr ($FB_STR1, '/') OR strstr ($FB_STR1, '\\')))
  {
    exit ();
  }
  $ATTACHMENT_ID = attach_id_decode ($ATTACHMENT_ID, $ATTACHMENT_NAME);
  $ATTACHMENT_NAME = str_replace ('*', '#', $ATTACHMENT_NAME);
  if ((($MODULE != '') AND ($YM != '')))
  {
    $URL = ((((((($ATTACH_PATH2.$MODULE).'/').$YM).'/').$ATTACHMENT_ID).'.').$ATTACHMENT_NAME);
  }
  else
  {
    $URL = ((($ATTACH_PATH.$ATTACHMENT_ID).'/').$ATTACHMENT_NAME);
  }
  if (!file_exists ($URL))
  {
    echo ('找不到文件：'.$URL);
    exit ();
  }
  clearstatcache ();
  ob_end_clean ();
  header ('Cache-control: private');
  header ('Content-type: application/octet-stream');
  header ('Accept-Ranges: bytes');
  header (('Accept-Length: '.filesize ($URL)));
  header (('Content-Length: '.filesize ($URL)));
  header (((''.'Content-Disposition: attachment; filename=').$ATTACHMENT_NAME));
  readfile ($URL);
?>