+global\fileController::procFileOutput()

Complexity

Conditions	20
Paths	176

Size

Total Lines	93
Code Lines	55

Duplication

Lines	0
Ratio	0 %

<?php
	public function procFileOutput()
	{
		$oFileModel = getModel('file');
		$file_srl = Context::get('file_srl');
		$file_key = Context::get('file_key');
		if(strstr($_SERVER['HTTP_USER_AGENT'], "Android")) $is_android = true;

		if($is_android && $_SESSION['__XE_FILE_KEY_AND__'][$file_srl]) $session_key = '__XE_FILE_KEY_AND__';

The variable $is_android does not seem to be defined for all execution paths leading up to this point.

		else $session_key = '__XE_FILE_KEY__';
		$columnList = array('source_filename', 'uploaded_filename', 'file_size');
		$file_obj = $oFileModel->getFile($file_srl, $columnList);

		$uploaded_filename = $file_obj->uploaded_filename;

		if(!file_exists($uploaded_filename)) return $this->stop('msg_file_not_found');

		if(!$file_key || $_SESSION[$session_key][$file_srl] != $file_key)
		{
			unset($_SESSION[$session_key][$file_srl]);
			return $this->stop('msg_invalid_request');
		}

		$file_size = $file_obj->file_size;
		$filename = $file_obj->source_filename;
		if(strpos($_SERVER['HTTP_USER_AGENT'], 'MSIE') !== FALSE || (strpos($_SERVER['HTTP_USER_AGENT'], 'Windows') !== FALSE && strpos($_SERVER['HTTP_USER_AGENT'], 'Trident') !== FALSE && strpos($_SERVER['HTTP_USER_AGENT'], 'rv:') !== FALSE))
		{
			$filename = rawurlencode($filename);
			$filename = preg_replace('/\./', '%2e', $filename, substr_count($filename, '.') - 1);
		}

		if($is_android)
		{
			if($_SESSION['__XE_FILE_KEY__'][$file_srl]) $_SESSION['__XE_FILE_KEY_AND__'][$file_srl] = $file_key;
		}

		unset($_SESSION[$session_key][$file_srl]);

		Context::close();

		$fp = fopen($uploaded_filename, 'rb');
		if(!$fp) return $this->stop('msg_file_not_found');

		header("Cache-Control: ");
		header("Pragma: ");
		header("Content-Type: application/octet-stream");
		header("Last-Modified: " . gmdate("D, d M Y H:i:s") . " GMT");

		header('Content-Disposition: attachment; filename="'.$filename.'"');
		header("Content-Transfer-Encoding: binary\n");
		
		if(isset($_SERVER['HTTP_RANGE']))
		{
			$ranges = array_map('intval', explode('-', substr($_SERVER['HTTP_RANGE'], 6)));

			if(!$ranges[1])
			{
				$ranges[1] = $size - 1;

The variable $size does not exist. Did you forget to declare it?

			}

			header('HTTP/1.1 206 Partial Content');
			header('Accept-Ranges: bytes');
			header('Content-Length: ' . ($ranges[1] - $ranges[0]+1));

			header(sprintf('Content-Range: bytes %d-%d/%d', $ranges[0], $ranges[1], $size));
			$chunkSize = 8192;

			fseek($fp, $ranges[0]);
			while(true) {
				if(ftell($fp) >= $ranges[1]) {
					break;
				}
				echo fread($fp, $chunkSize);
				@ob_flush();

It seems like you do not handle an error condition here. This can introduce security issues, and is generally not recommended.

				flush();
			}
		}
		else
		{
			header("Content-Length: " .(string)($file_size));
			// if file size is lager than 10MB, use fread function (#18675748)
			if($file_size > 1024 * 1024)
			{
				while(!feof($fp)) echo fread($fp, 1024);
				fclose($fp);
			}
			else
			{
				fpassthru($fp);
			}
		}

		exit();
	}