php/readfile.php


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43

<?php 
require_once "database.php";
require_once "configuration.php";
require_once "file_type_recogniser.php";
require_once "node.php";
require_once "misc.php";

session_start();
if (!isset($_POST["filename"]) || !isset($_POST["folder"])) {
	error_log("/php/readfile.php - invalid request");
	http_response_code(400);
	exit(1);
}

$user     = $_SESSION['user_object'];
$homedir  = $user->home_directory;
$folder   = $_POST["folder"];
$filename = $_POST["filename"];

$dir = get_directory($folder, $user);
if (!$dir) {
    error_log("/php/readfile.php - invalid directory '$folder'");
	http_response_code(409);
    exit(0);
}

$contents_of_dir = $database->get_links_of($dir,$user->user_id);
$file_node = null;

foreach ($contents_of_dir as $c) {
    if ($c['name'] == $filename) {
        $file_node = $c;
        break;
    }
}
if (!$file_node) {
    error_log("/php/readfile.php - invalid filename '$filename'");
	http_response_code(409);
    exit(0);
}

header("Content-type: $file_node[mimetype]");
readfile("$storage_root/$file_node[code]");