blob: b5caae134532e085c3268342d0d00233c7ab1ef0 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
|
<?php
// Warning: Don't left any character outside PHP code.
//
// Choose a file on this directory to download via Apache.
include_once("../includes/ctrlacc.php");
include_once("../clases/AdoPhp.php");
include_once("../includes/CreaComando.php");
include_once("../idiomas/php/".$idioma."/descargas_".$idioma.".php");
$cmd=CreaComando($cadenaconexion); // Crea objeto comando
if (!$cmd)
header('Location: '.$pagerror.'?herror=2'); // Error de conexión con servidor B.D.
// Security tip: change to local directory.
$oldpwd=getcwd();
chdir(dirname(__FILE__));
if (isset($_POST['file'])) {
// Send file.
sendFile ($_POST['file']);
} else {
// Show list of files.
echo '<!DOCTYPE html>'."\n";
echo '<html><head>'."\n";
echo ' <link rel="stylesheet" type="text/css" href="../estilos.css" />'."\n";
echo '</head><body>'."\n";
echo '<div align="center" class="tabla_datos">'."\n";
echo '<form action="'.$_SERVER['PHP_SELF'].'" method="post">'."\n";
echo ' <table>'."\n";
echo ' <tr><th>'.$TbMsg['DOWNLOADS'].':</th></tr>'."\n";
$filelist = glob("*");
$data = "";
foreach ($filelist as $f) {
// Get only readable files, except this one.
if ($f !== basename(__FILE__) and is_file($f) and is_readable($f)) {
$data .= ' <option value="'.$f.'">'.$f.'</option>'."\n";
}
}
if (empty($data)) {
// Show warning message if there is no files to download.
echo ' <tr><td>'.$TbMsg['NOFILES'].'</td></tr>'."\n";
} else {
// Show available files.
echo ' <tr><td><select name="file">'."\n";
echo $data;
echo ' </select>'."\n";
echo ' <input type="submit" value="" style="width:20px; background:url(../images/boton_confirmar.gif);"></td></tr>'."\n";
}
echo '</table>'."\n";
echo '</form>'."\n";
echo '</body></html>'."\n";
}
// Change again to source directory.
chdir($oldpwd);
// Send a file.
function sendFile($file) {
// Check if file exists in current directory and it isn't this file.
if (file_exists($file) and strpos($file,"/") === false and $file !== basename(__FILE__)) {
header('Content-Type: ' . mime_content_type($file));
header('Content-Length: ' . filesize($file));
header('Content-Disposition: attachment; filename="' . $file . '"');
readfile($file);
}
}
// Warning: Don't left any character outside PHP code.
|
