-
-
Notifications
You must be signed in to change notification settings - Fork 301
/
custom-download.php
50 lines (41 loc) · 1.37 KB
/
custom-download.php
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
<?php
$allowed_levels = array(9, 8, 7, 0);
require_once 'bootstrap.php';
$link = htmlentities($_GET['link']);
if (!$link) {
exit_with_error_code(400);
}
/**
* @var PDO $dbh
*/
global $dbh;
$statement = $dbh->prepare("SELECT * FROM `" . TABLE_CUSTOM_DOWNLOADS . "` WHERE link=:link");
$statement->bindParam(':link', $link);
$statement->execute();
$statement->setFetchMode(PDO::FETCH_ASSOC);
if ($statement->rowCount() == 0) {
exit_with_error_code(404);
}
while ($row = $statement->fetch()) {
$link = html_output($row['link']);
$file_id = html_output($row['file_id']);
$client_id = html_output($row['client_id']);
$timestamp = html_output($row['timestamp']);
$expiry_date = html_output($row['expiry_date']);
$visit_count = html_output($row['visit_count']);
}
if (!is_null($expiry_date) && $expiry_date <= (new DateTime())->getTimestamp()) {
// link expired
exit_with_error_code(410);
}
if (!$file_id) {
exit_with_error_code(404);
}
$file = new \ProjectSend\Classes\Files($file_id);
$statement = $dbh->prepare("UPDATE " . TABLE_CUSTOM_DOWNLOADS . " SET visit_count=:visit_count WHERE link=:link");
$visit_count++;
$statement->bindParam(':visit_count', $visit_count, PDO::PARAM_INT);
$statement->bindParam(':link', $link);
$statement->execute();
$location = BASE_URI . "download.php?id={$file->id}&token={$file->public_token}";
ps_redirect($location);