seblucas /
cops
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
| 1 | <?php |
||
| 2 | /** |
||
| 3 | * COPS (Calibre OPDS PHP Server) |
||
| 4 | * |
||
| 5 | * @license GPL 2 (http://www.gnu.org/licenses/gpl.html) |
||
| 6 | * @author S�bastien Lucas <[email protected]> |
||
| 7 | */ |
||
| 8 | |||
| 9 | require_once ("config.php"); |
||
| 10 | require_once ("book.php"); |
||
| 11 | require_once ("data.php"); |
||
| 12 | |||
| 13 | global $config; |
||
| 14 | |||
| 15 | if ($config ['cops_fetch_protect'] == "1") { |
||
| 16 | session_start(); |
||
| 17 | if (!isset($_SESSION['connected'])) { |
||
| 18 | notFound (); |
||
| 19 | return; |
||
| 20 | } |
||
| 21 | } |
||
| 22 | |||
| 23 | $expires = 60*60*24*14; |
||
| 24 | header("Pragma: public"); |
||
| 25 | header("Cache-Control: maxage=".$expires); |
||
| 26 | header('Expires: ' . gmdate('D, d M Y H:i:s', time()+$expires) . ' GMT'); |
||
| 27 | $bookId = getURLParam ("id", NULL); |
||
| 28 | $type = getURLParam ("type", "jpg"); |
||
| 29 | $idData = getURLParam ("data", NULL); |
||
| 30 | if (is_null ($bookId)) |
||
| 31 | { |
||
| 32 | $book = Book::getBookByDataId($idData); |
||
| 33 | } |
||
| 34 | else |
||
| 35 | { |
||
| 36 | $book = Book::getBookById($bookId); |
||
| 37 | } |
||
| 38 | |||
| 39 | if (!$book) { |
||
| 40 | notFound (); |
||
| 41 | return; |
||
| 42 | } |
||
| 43 | |||
| 44 | if ($book && ($type == "jpg" || empty ($config['calibre_internal_directory']))) { |
||
| 45 | if ($type == "jpg") { |
||
| 46 | $file = $book->getFilePath ($type); |
||
| 47 | } else { |
||
| 48 | $file = $book->getFilePath ($type, $idData); |
||
| 49 | } |
||
| 50 | if (!$file || !file_exists ($file)) { |
||
|
0 ignored issues
–
show
|
|||
| 51 | notFound (); |
||
| 52 | return; |
||
| 53 | } |
||
| 54 | } |
||
| 55 | |||
| 56 | switch ($type) |
||
| 57 | { |
||
| 58 | case "jpg": |
||
| 59 | header("Content-Type: image/jpeg"); |
||
| 60 | if ($book->getThumbnail (getURLParam ("width"), getURLParam ("height"))) { |
||
| 61 | // The cover had to be resized |
||
| 62 | return; |
||
| 63 | } |
||
| 64 | break; |
||
| 65 | default: |
||
| 66 | $data = $book->getDataById ($idData); |
||
| 67 | header("Content-Type: " . $data->getMimeType ()); |
||
| 68 | break; |
||
| 69 | } |
||
| 70 | $file = $book->getFilePath ($type, $idData, true); |
||
| 71 | if ($type == "epub" && $config['cops_update_epub-metadata']) |
||
| 72 | { |
||
| 73 | $book->getUpdatedEpub ($idData); |
||
| 74 | return; |
||
| 75 | } |
||
| 76 | if ($type == "jpg") { |
||
| 77 | header('Content-Disposition: filename="' . basename ($file) . '"'); |
||
| 78 | } else { |
||
| 79 | header('Content-Disposition: attachment; filename="' . basename ($file) . '"'); |
||
| 80 | } |
||
| 81 | |||
| 82 | $dir = $config['calibre_internal_directory']; |
||
| 83 | if (empty ($config['calibre_internal_directory'])) { |
||
| 84 | $dir = Base::getDbDirectory (); |
||
| 85 | } |
||
| 86 | |||
| 87 | if (empty ($config['cops_x_accel_redirect'])) { |
||
| 88 | $filename = $dir . $file; |
||
| 89 | $fp = fopen($filename, 'rb'); |
||
| 90 | header("Content-Length: " . filesize($filename)); |
||
| 91 | fpassthru($fp); |
||
| 92 | } |
||
| 93 | else { |
||
| 94 | header ($config['cops_x_accel_redirect'] . ": " . $dir . $file); |
||
| 95 | } |
||
| 96 |
In PHP, under loose comparison (like
==, or!=, orswitchconditions), values of different types might be equal.For
stringvalues, the empty string''is a special case, in particular the following results might be unexpected: