sydney/IPB
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Version 5.0.0 beta 1

Browse Source
This commit is contained in:
Neo committed 2025-12-19 16:27:35 -08:00
1 parent 25ddeb65d6
commit 15c7beabc5
6736 files changed
+627902 -497943
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

applications/core/interface/file/cfield.php
+22 -19
View File
@@ -8,52 +8,55 @@
* @since 11 Feb 2016
*/
use IPS\Dispatcher\Front;
use IPS\File;
use IPS\Output;
use IPS\Request;
define('REPORT_EXCEPTIONS', TRUE);
require_once str_replace( 'applications/core/interface/file/cfield.php', '', str_replace( '\\', '/', __FILE__ ) ) . 'init.php';
try
{
/* Get the extension */
list( $app, $extension ) = explode( '_', \IPS\Request::i()->storage );
list( $app, $extension ) = explode( '_', Request::i()->storage );
$classname = 'IPS\\' . $app . '\extensions\core\FileStorage\\' . $extension;
if ( !class_exists( $classname ) )
{
throw new \RuntimeException;
throw new RuntimeException;
}
$extension = new $classname;
if ( ! isset( \IPS\Request::i()->fileKey ) )
if ( ! isset( Request::i()->fileKey ) )
{
throw new \RuntimeException;
throw new RuntimeException;
}
/* Get the actual filename from the extension */
$realFileName = \IPS\Text\Encrypt::fromTag( \IPS\Request::i()->fileKey )->decrypt();
$realFileName = \IPS\Text\Encrypt::fromTag( Request::i()->fileKey )->decrypt();
/* Check the file is valid */
$file = \IPS\File::get( \IPS\Request::i()->storage, $realFileName );
$file = File::get( Request::i()->storage, $realFileName );
if ( !$extension->isValidFile( $realFileName ) )
{
throw new \RuntimeException;
throw new RuntimeException;
}
/* Send headers and print file */
\IPS\Output::i()->sendStatusCodeHeader( 200 );
\IPS\Output::i()->sendHeader( "Content-type: " . \IPS\File::getMimeType( \IPS\Request::i()->path ) . ";charset=UTF-8" );
foreach( array_merge( \IPS\Output::getCacheHeaders( time(), 360 ), array( "Content-Disposition" => \IPS\Output::getContentDisposition( 'attachment', \IPS\Request::i()->path ), "X-Content-Type-Options" => "nosniff" ) ) as $key => $header )
Output::i()->sendStatusCodeHeader( 200 );
Output::i()->sendHeader( "Content-type: " . File::getMimeType( Request::i()->path ) . ";charset=UTF-8" );
foreach( array_merge( Output::getCacheHeaders( time(), 360 ), array( "Content-Disposition" => Output::getContentDisposition( 'attachment', Request::i()->path ), "X-Content-Type-Options" => "nosniff" ) ) as $key => $header )
{
\IPS\Output::i()->sendHeader( $key . ': ' . $header );
Output::i()->sendHeader( $key . ': ' . $header );
}
\IPS\Output::i()->sendHeader( "Content-Length: " . $file->filesize() );
\IPS\Output::i()->sendHeader( "Content-Security-Policy: default-src 'none'; sandbox" );
\IPS\Output::i()->sendHeader( "X-Content-Security-Policy: default-src 'none'; sandbox" );
\IPS\Output::i()->sendHeader( "Cross-Origin-Opener-Policy: same-origin" );
Output::i()->sendHeader( "Content-Length: " . $file->filesize() );
Output::i()->sendHeader( "Content-Security-Policy: default-src 'none'; sandbox" );
Output::i()->sendHeader( "X-Content-Security-Policy: default-src 'none'; sandbox" );
$file->printFile();
exit;
}
catch ( \Exception $e )
catch (Exception $e )
{
\IPS\Dispatcher\Front::i();
\IPS\Output::i()->sendOutput( '', 404 );
Front::i();
Output::i()->sendOutput( '', 404 );
}