down.php

来自「通达OA2007SE源代码 非常好的」· PHP 代码 · 共 56 行

<?
  include_once 'inc/auth.php';
  if (($SUB_DIR != ''))
  {
    $SUB_DIR = urldecode ($SUB_DIR);
  }
  if (($FILE_NAME != ''))
  {
    $FILE_NAME = urldecode ($FILE_NAME);
  }
  $FB_STR1 = $FILE_NAME;
  if ((strstr ($FB_STR1, '/') OR strstr ($FB_STR1, '\\')))
  {
    exit ();
  }
  if (strstr ($SUB_DIR, '.'))
  {
    exit ();
  }
  $query = (((''.'SELECT * from PICTURE where PIC_ID=\'').$PIC_ID).'\'');
  $cursor = exequery ($connection, $query);
  if ($ROW = mysql_fetch_array ($cursor))
  {
    $PIC_PATH = $ROW['PIC_PATH'];
  }
  else
  {
    exit ();
  }
  if (($FILE_NAME != ''))
  {
    $FILE_NAME = substr ($FILE_NAME, strrpos ($FILE_NAME, '/'));
    if ((($SUB_DIR != '') AND (substr ($PIC_PATH, (strlen ($PIC_PATH) - 1), 1) == '/')))
    {
      $FILE_PATH = ($PIC_PATH.$SUB_DIR);
    }
    else
    {
      $FILE_PATH = (($PIC_PATH.'/').$SUB_DIR);
    }
    ($FILE_PATH .= ('/'.$FILE_NAME));
    if (!file_exists ($FILE_PATH))
    {
      echo '找不到指定文件';
      exit ();
    }
    ob_end_clean ();
    header ('Cache-control: private');
    header ('Content-type: application/octet-stream');
    header ('Accept-Ranges: bytes');
    header (('Accept-Length: '.filesize ($FILE_PATH)));
    header (('Content-Disposition: attachment; filename='.$FILE_NAME));
    readfile ($FILE_PATH);
  }
?>