From b0c0d86b7ca3cbf90616f06df202eff51bc3e6e1 Mon Sep 17 00:00:00 2001 From: mattpass Date: Mon, 4 May 2020 07:33:37 +0100 Subject: [PATCH] download.php updates --- lib/download.php | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/lib/download.php b/lib/download.php index fe9bcb0..c43332b 100644 --- a/lib/download.php +++ b/lib/download.php @@ -3,22 +3,22 @@ include("headers.php"); include("settings.php"); // Establish the real absolute path to the file -$file = realpath($docRoot.$iceRoot.str_replace("|","/",$_GET['file'])); +$file = realpath($docRoot . $iceRoot . str_replace("|", "/", $_GET['file'])); // If it doesn't exist, or doesn't start with the $docRoot, stop here -if (!file_exists($file) || strpos(str_replace("\\","/",$file),$docRoot) !== 0) { +if (false === file_exists($file) || 0 !== strpos(str_replace("\\", "/", $file), $docRoot)) { die(""); } -if (file_exists($file)) { +if (true === file_exists($file)) { header("Pragma: public"); header("Expires: 0"); header("Cache-Control: must-revalidate, post-check=0, pre-check=0"); header("Cache-Control: public"); header('Content-Description: File Transfer'); header("Content-Type: application/octet-stream"); - header('Content-Disposition: attachment; filename='.basename($file)); + header('Content-Disposition: attachment; filename=' . basename($file)); // header("Content-Transfer-Encoding: binary"); - header('Content-Length: '.filesize($file)); + header('Content-Length: ' . filesize($file)); ob_clean(); flush(); readfile($file);