path: root/apis/download.inc.php

<?php

User::load();

if (!User::hasPermission('superadmin')) die('No permission');
if (!isset($_REQUEST['type'])) die('No type');
if (!isset($_REQUEST['file'])) die('No file');
if (!isset($_REQUEST['id'])) die('No id');

require_once('inc/render.inc.php');

$type = $_REQUEST['type'];
$file = preg_replace('/[^a-z0-9\.\-_]/is', '', $_REQUEST['file']);
$id = $_REQUEST['id'];

switch ($type) {
case 'tgz':
	$remote = CONFIG_REMOTE_TGZ;
	$local = CONFIG_TGZ_LIST_DIR;
	break;
default:
	die('Invalid download type');
}
@mkdir($local, 0755, true);

if (file_exists($local . '/' . $file) && !isset($_REQUEST['exec'])) {
	echo Render::parse('download-overwrite', array('file' => $file, 'id' => $id, 'query' => $_SERVER['REQUEST_URI']));;
	exit(0);
}

$ret = Util::downloadToFile($local . '/' . $file, $remote . '/' . $file, 20, $code);
if ($ret === false || $code < 200 || $code >= 300) {
	@unlink($local . '/' . $file);
	echo Render::parse('download-error', array('file' => $file, 'remote' => $remote, 'code' => $code));
	exit(0);
}

// No execution - just return dialog
echo Render::parse('download-complete', array('file' => $file));