source: inc/load_var_file.php @ 3262:d7ae7e24da60

<?php
# -- BEGIN LICENSE BLOCK ---------------------------------------
#
# This file is part of Dotclear 2.
#
# Copyright (c) 2003-2013 Olivier Meunier & Association Dotclear
# Licensed under the GPL version 2.0 license.
# See LICENSE file or
# http://www.gnu.org/licenses/old-licenses/gpl-2.0.html
#
# -- END LICENSE BLOCK -----------------------------------------

#  ClearBricks and DotClear classes auto-loader
if (@is_dir('/usr/lib/clearbricks')) {
     define('CLEARBRICKS_PATH','/usr/lib/clearbricks');
} elseif (is_dir(dirname(__FILE__).'/libs/clearbricks')) {
     define('CLEARBRICKS_PATH',dirname(__FILE__).'/libs/clearbricks');
} elseif (isset($_SERVER['CLEARBRICKS_PATH']) && is_dir($_SERVER['CLEARBRICKS_PATH'])) {
     define('CLEARBRICKS_PATH',$_SERVER['CLEARBRICKS_PATH']);
}

if (!defined('CLEARBRICKS_PATH') || !is_dir(CLEARBRICKS_PATH)) {
     exit('No clearbricks path defined');
}

require CLEARBRICKS_PATH.'/_common.php';

if (isset($_SERVER['DC_RC_PATH'])) {
     define('DC_RC_PATH',$_SERVER['DC_RC_PATH']);
} elseif (isset($_SERVER['REDIRECT_DC_RC_PATH'])) {
     define('DC_RC_PATH',$_SERVER['REDIRECT_DC_RC_PATH']);
} else {
     define('DC_RC_PATH',dirname(__FILE__).'/config.php');
}

if (!is_file(DC_RC_PATH)) {
     trigger_error('Unable to open config file',E_USER_ERROR);
     exit;
}

require DC_RC_PATH;

if (empty($_GET['vf'])) {
     header('Content-Type: text/plain');
     http::head(404,'Not Found');
     exit;
}

// $_GET['v'] : version in url to bypass cache in case of dotclear upgrade or in dev mode
// but don't care of value
if (isset($_GET['v']))
{
    unset($_GET['v']);
}

// Only $_GET['vf'] is allowed in URL
if (count($_GET) > 1)
{
    header('Content-Type: text/plain');
    http::head(403,'Forbidden');
    exit;
}

$allow_types = array('png','jpg','jpeg','gif','css','js','swf','svg','html','xml','json','txt');

$vf = path::clean($_GET['vf']);
$VF = path::real(DC_VAR.'/'.$vf);

if ($VF === false || !is_file($VF) || !is_readable($VF)) {
     header('Content-Type: text/plain');
     http::head(404,'Not Found');
     exit;
}

if (!in_array(files::getExtension($VF),$allow_types)) {
     header('Content-Type: text/plain');
     http::head(404,'Not Found');
     exit;
}

http::$cache_max_age = 7 * 24 * 60 * 60;     // One week cache for var files served by ?vf=…
http::cache(array_merge(array($VF),get_included_files()));

header('Content-Type: '.files::getMimeType($VF));
readfile($VF);
exit;