Файл: users/includes/album/image_download.php
Строк: 33
<?php
/**
* @package JohnCMS
* @link http://johncms.com
* @copyright Copyright (C) 2008-2011 JohnCMS Community
* @license LICENSE.txt (see attached file)
* @version VERSION.txt (see attached file)
* @author http://johncms.com/about
*/
defined('_IN_JOHNCMS') or die('Error: restricted access');
/*
-----------------------------------------------------------------
Загрузка выбранного файла и обработка счетчика скачиваний
-----------------------------------------------------------------
*/
$error = array ();
$req = mysql_query("SELECT * FROM `cms_album_files` WHERE `id` = '$img'");
if (mysql_num_rows($req)) {
$res = mysql_fetch_assoc($req);
// Проверка прав доступа
if ($rights < 6 && $user_id != $res['user_id']) {
$req_a = mysql_query("SELECT * FROM `cms_album_cat` WHERE `id` = '" . $res['album_id'] . "'");
if (mysql_num_rows($req_a)) {
$res_a = mysql_fetch_assoc($req_a);
if($res_a['access'] == 1 || $res_a['access'] == 2 && (!isset($_SESSION['ap']) || $_SESSION['ap'] != $res_a['password']))
$error[] = $lng['access_forbidden'];
} else {
$error[] = $lng['error_wrong_data'];
}
}
// Проверка наличия файла
if (!$error && !file_exists('../files/users/album/' . $res['user_id'] . '/' . $res['img_name']))
$error[] = $lng['error_file_not_exist'];
} else {
$error[] = $lng['error_wrong_data'];
}
if (!$error) {
// Счетчик скачиваний
if (!mysql_result(mysql_query("SELECT COUNT(*) FROM `cms_album_downloads` WHERE `user_id` = '$user_id' AND `file_id` = '$img'"), 0)) {
mysql_query("INSERT INTO `cms_album_downloads` SET `user_id` = '$user_id', `file_id` = '$img', `time` = '" . time() . "'");
$downloads = mysql_result(mysql_query("SELECT COUNT(*) FROM `cms_album_downloads` WHERE `file_id` = '$img'"), 0);
mysql_query("UPDATE `cms_album_files` SET `downloads` = '$downloads' WHERE `id` = '$img'");
}
// Отдаем файл
header('location: ' . $set['homeurl'] . '/files/users/album/' . $res['user_id'] . '/' . $res['img_name']);
} else {
require('../incfiles/head.php');
echo functions::display_error($error, '<a href="album.php">' . $lng['back'] . '</a>');
}
?>