os-sim/www/repository/view.php
<?php
/**
*
* License:
*
* Copyright (c) 2003-2006 ossim.net
* Copyright (c) 2007-2013 AlienVault
* All rights reserved.
*
* This package is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation; version 2 dated June, 1991.
* You may not use, modify or distribute this program under any other version
* of the GNU General Public License.
*
* This package is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with this package; if not, write to the Free Software
* Foundation, Inc., 51 Franklin St, Fifth Floor, Boston,
* MA  02110-1301  USA
*
*
* On Debian GNU/Linux systems, the complete text of the GNU General
* Public License can be found in `/usr/share/common-licenses/GPL-2'.
*
* Otherwise you can read it here: http://www.gnu.org/licenses/gpl-2.0.txt
*
*/
require_once 'av_init.php';


Session::logcheck("configuration-menu", "Osvdb");


$fileid      = GET('id');

$aux         = explode("_",$fileid);
$id_document = $aux[0];
$id          = $aux[1];

ossim_valid($fileid, OSS_DIGIT, OSS_SCORE, 'illegal:' . _("File ID"));
ossim_valid($id_document,   OSS_DIGIT,      'illegal:' . _("Document ID"));
ossim_valid($id,            OSS_DIGIT,      'illegal:' . _("ID"));

if (ossim_error()) 
{
    die(ossim_error());
}


$db          = new ossim_db();
$conn        = $db->connect();

$conf        = $GLOBALS["CONF"];

$uploads_dir = $conf->get_conf("repository_upload_dir");


list($file,$name) = Repository::get_attachment($conn,$id_document,$id);


$file = $uploads_dir."/$id_document/".$file;

if ($file != "" && file_exists($file)) 
{
    if (preg_match("/\.(png|jpg|gif|bmp|php|txt|pl|pdf|htm|html)$/",$file)) 
    {
        $app = "text/plain";
        if (preg_match("/\.jpg$/",$file)) $app = "image/jpeg";
        if (preg_match("/\.png$/",$file)) $app = "image/png";
        if (preg_match("/\.gif$/",$file)) $app = "image/gif";
        if (preg_match("/\.bmp$/",$file)) $app = "image/bmp";
        if (preg_match("/\.pdf$/",$file)) $app = "application/pdf";
        
        header("Content-Type: $app");
        header("Content-Length: " . filesize($file));
        header("Content-Disposition: inline");
        
        readfile($file);
    } 
    else 
    {
        header("Location: download.php?id=$fileid");
    }
} 
else 
{
	echo "File not found";
}

$db->close();
