path: root/examples/app/file.php

<?php

/*
 * SCROTT Copyright (C) 2016 Malf Furious
 *
 * Scrott is free software: you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published
 * by the Free Software Foundation, either version 3 of the License,
 * or (at your option) any later version.
 *
 * Scrott is distributed in the hope that it will be useful, but
 * WITHOUT ANY WARRANTY; even the implied warranty of MERCHANTABILITY
 * or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public
 * License for more details.
 */

require_once "class/framework.class.php";

/*
 * Proxy script for fetching resources from the /assets directory
 * This script enforces access-control on HTTP objects such as images and flat files
 * which are supplied by users.
 *
 * Example request:
 * yourdomain.com/scrott/file.php?d=/img/heads&f=a4bf903a
 */
class Resource extends Framework
{
    /*
     * Get request and figure out what type it is
     */
    function handle($dir, $file)
    {
        if (basename($file) != $file || $file == "")
            return;

        switch ($dir)
        {
            case "img/heads": $this->heads($file); break;
        }
    }

    /*
     * Request a user head (user image)
     * Requester must be currently logged in
     */
    function heads($file)
    {
        if (!$this->getCurrentUser())
            return;

        if (!file_exists("assets/img/heads/" . $file))
            $file = "null.jpg";

        $file = "assets/img/heads/" . $file;
        $f = fopen($file, "rb");

        if (!$f)
            return;

        header("Content-type: " . mime_content_type($file));
        header("Content-length: " . filesize($file));
        fpassthru($f);
        fclose($f);
    }
}

$res = new Resource();
$res->handle($_REQUEST['d'], $_REQUEST['f']);

?>