68 lines
2.0 KiB
PHP
68 lines
2.0 KiB
PHP
<?php
|
|
// Pandora FMS - http://pandorafms.com
|
|
// ==================================================
|
|
// Copyright (c) 2005-2010 Artica Soluciones Tecnologicas
|
|
// Please see http://pandorafms.org for full contribution list
|
|
|
|
// This program is free software; you can redistribute it and/or
|
|
// modify it under the terms of the GNU Lesser General Public License
|
|
// as published by the Free Software Foundation; version 2
|
|
|
|
// This program is distributed in the hope that it will be useful,
|
|
// but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
// GNU General Public License for more details.
|
|
|
|
|
|
|
|
// Don't start a session before this import.
|
|
// The session is configured and started inside the config process.
|
|
require_once ("config.php");
|
|
require_once ('functions.php');
|
|
require_once ('functions_filemanager.php');
|
|
|
|
global $config;
|
|
|
|
check_login ();
|
|
|
|
$auth_method = db_get_value('value', 'tconfig', 'token', 'auth');
|
|
|
|
if($auth_method != 'ad' && $auth_method != 'ldap'){
|
|
require_once("auth/" . $auth_method . ".php");
|
|
}
|
|
|
|
|
|
$styleError = "background:url(\"../images/err.png\") no-repeat scroll 0 0 transparent; padding:4px 1px 6px 30px; color:#CC0000;";
|
|
|
|
$file = get_parameter('file', null);
|
|
|
|
$file = base64_decode($file);
|
|
|
|
$hash = get_parameter('hash', null);
|
|
|
|
$testHash = md5($file . $config['dbpass']);
|
|
|
|
if ($hash != $testHash) {
|
|
echo "<h3 style='" . $styleError . "'>" .
|
|
__('Security error. Please contact the administrator.') .
|
|
"</h3>";
|
|
}
|
|
else if (!empty($file) && !empty($hash)) {
|
|
//echo $file;
|
|
if (!file_exists($file))
|
|
$file = $_SERVER['DOCUMENT_ROOT'] . $file;
|
|
|
|
if (!file_exists($file)) {
|
|
echo "<h3 style='" . $styleError . "'>" .
|
|
__("File is missing in disk storage. Please contact the administrator.") .
|
|
"</h3>";
|
|
}
|
|
else {
|
|
header('Content-type: aplication/octet-stream;');
|
|
header('Content-type: ' . mime_content_type($file) . ';');
|
|
header("Content-Length: " . filesize($file));
|
|
header('Content-Disposition: attachment; filename="' . basename($file) . '"');
|
|
readfile($file);
|
|
}
|
|
}
|
|
?>
|