diff options
| author | cassio <cassiopc@gmail.com> | 2013-07-02 05:44:46 +0000 |
|---|---|---|
| committer | cassio <cassiopc@gmail.com> | 2013-07-02 05:44:46 +0000 |
| commit | a9aa438ea0558eb0044cf1e54a9190ddb41b65e5 (patch) | |
| tree | 4b825dc642cb6eb9a060e54bf8d69288fbee4904 /boca-1.5.0/src/filewindow.php | |
| parent | 94caebadeb66ad7b453d4258a796979cafb758b0 (diff) | |
| download | boca-a9aa438ea0558eb0044cf1e54a9190ddb41b65e5.tar.gz boca-a9aa438ea0558eb0044cf1e54a9190ddb41b65e5.zip | |
restructuring of boca's git
Diffstat (limited to 'boca-1.5.0/src/filewindow.php')
| -rw-r--r-- | boca-1.5.0/src/filewindow.php | 120 |
1 files changed, 0 insertions, 120 deletions
diff --git a/boca-1.5.0/src/filewindow.php b/boca-1.5.0/src/filewindow.php deleted file mode 100644 index 594e483..0000000 --- a/boca-1.5.0/src/filewindow.php +++ /dev/null @@ -1,120 +0,0 @@ -<?php -//////////////////////////////////////////////////////////////////////////////// -//BOCA Online Contest Administrator -// Copyright (C) 2003-2012 by BOCA Development Team (bocasystem@gmail.com) -// -// This program is free software: you can redistribute it and/or modify -// it under the terms of the GNU General Public License as published by -// the Free Software Foundation, either version 3 of the License, or -// (at your option) any later version. -// -// This program is distributed in the hope that it will be useful, -// but WITHOUT ANY WARRANTY; without even the implied warranty of -// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the -// GNU General Public License for more details. -// You should have received a copy of the GNU General Public License -// along with this program. If not, see <http://www.gnu.org/licenses/>. -//////////////////////////////////////////////////////////////////////////////// -// modified 21/july/2011 by cassio@ime.usp.br -ob_start(); -session_start(); -require_once("globals.php"); - -if(!ValidSession()) { - echo "<html><head><title>View Page</title>"; - InvalidSession("filewindow.php"); - echo "<script>window.close();</script></html>"; - exit; -} - -if(!isset($_GET["oid"]) || !is_numeric($_GET["oid"]) || !isset($_GET["filename"]) || - !isset($_GET["check"]) || $_GET["check"]=="") { - echo "<html><head><title>View Page</title>"; - IntrusionNotify("Bad parameters in filewindow.php"); - echo "<script>window.close();</script></html>"; - exit; -} - -$cf = globalconf(); -$fname = decryptData(rawurldecode($_GET["filename"]), session_id() . $cf["key"]); -$msg = ''; -if(isset($_GET["msg"])) - $msg = rawurldecode($_GET["msg"]); - -$p = myhash($_GET["oid"] . $fname . $msg . session_id() . $cf["key"]); - -if($p != $_GET["check"]) { - echo "<html><head><title>View Page</title>"; - IntrusionNotify("Parameters modified in filewindow.php"); - echo "<script>window.close();</script></html>"; - exit; -} - -require_once("db.php"); - -if ($_GET["oid"]>=0) { - $c = DBConnect(); - DBExec($c, "begin work"); - - if (($lo = DB_lo_open ($c, $_GET["oid"], "r")) === false) { - echo "<html><head><title>View Page</title>"; - DBExec($c, "rollback work"); - LOGError ("Unable to download file (" . basename($fname) . ")"); - MSGError ("Unable to download file (" . basename($fname) . ")"); - echo "<script>window.close();</script></html>"; - exit; - } - - header ("Expires: " . gmdate("D, d M Y H:i:s") . " GMT"); - header ("Last-Modified: " . gmdate("D, d M Y H:i:s") . " GMT"); - header ("Cache-Control: no-cache, must-revalidate"); - header ("Pragma: no-cache"); - header ("Content-type: text/plain"); - -// echo "<html><body>\n"; - if($msg != '') { -// echo " <a href=\"#\" onClick=\"window.print()\"><h1>".$_GET["msg"]."</h1></a>"; - echo $msg ."\n"; - echo $msg ."\n"; - echo $msg ."\n\n\n"; - } -// echo "<pre>\n"; - if (DB_lo_read_tobrowser ($_SESSION["usertable"]["contestnumber"],$lo) === false) { - header ("Content-type: text/html"); - echo "<html><head><title>View Page</title>"; - DBExec($c, "rollback work"); - LOGError ("Unable to open file (" . basename($fname) . ")"); - MSGError ("Unable to open file (" . basename($fname) . ")"); - echo "<script>window.close();</script></html>"; - exit; - } - ob_end_flush(); -// echo "</pre>\n"; - DB_lo_close($lo); - if($msg != '') { -// echo " <a href=\"#\" onClick=\"window.print()\"><h1>".$_GET["msg"]."</h1></a>"; - echo "\n\n\n".$msg ."\n"; - echo $msg ."\n"; - echo $msg ."\n"; - } - - DBExec($c, "commit work"); - DBClose($c); -} else { - header ("Expires: " . gmdate("D, d M Y H:i:s") . " GMT"); - header ("Last-Modified: " . gmdate("D, d M Y H:i:s") . " GMT"); - header ("Cache-Control: no-cache, must-revalidate"); - header ("Pragma: no-cache"); - if (($str = file_get_contents($fname))===false) { - header ("Content-type: text/html"); - echo "<html><head><title>View Page</title>"; - MSGError ("Unable to open file (" . basename($fname) . ")"); - LOGError ("Unable to open file (" . basename($fname) . ")"); - echo "<script>window.close();</script></html>"; - exit; - } - header ("Content-type: text/plain"); - echo decryptData($str, $cf["key"]); - ob_end_flush(); -} -?> |