blob: 3c34a89cc75be51d2556c7cb7bc1dd5dbf78338b (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
|
<?php
require_once "class/framework.class.php";
/*
* Proxy script for fetching resources from the /assets directory
* This script enforces access-control on HTTP objects such as images and flat files
* which are supplied by users.
*
* Example request:
* yourdomain.com/scrott/file.php?d=/img/heads&f=a4bf903a
*/
class Resource extends Framework
{
/*
* Get request and figure out what type it is
*/
function handle($dir, $file)
{
if (basename($file) != $file || $file == "")
return;
switch ($dir)
{
case "img/heads": $this->heads($file); break;
}
}
/*
* Request a user head (user image)
* Requester must be currently logged in
*/
function heads($file)
{
if (!$this->getCurrentUser())
return;
if (!file_exists("assets/img/heads/" . $file))
$file = "null.jpg";
$file = "assets/img/heads/" . $file;
$f = fopen($file, "rb");
if (!$f)
return;
header("Content-type: " . mime_content_type($file));
header("Content-length: " . filesize($file));
fpassthru($f);
fclose($f);
}
}
$res = new Resource();
$res->handle($_REQUEST['d'], $_REQUEST['f']);
?>
|
