<?php

/*

 * Snapr

 * Version 0.1 beta 1

 * Copyright (C) 2007 Dan Fuhry

 *

 * This program is Free Software; you can redistribute and/or modify it under the terms of the GNU General Public License

 * as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version.

 *

 * This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied

 * warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for details.

 */

##

## IMAGE FILE FETCHER

##

$plugins->attachHook('base_classes_initted', '

	global $paths;

		$paths->add_page(Array(

			\'name\'=>\'Image fetcher pagelet\',

			\'urlname\'=>\'GalleryFetcher\',

			\'namespace\'=>\'Special\',

			\'special\'=>0,\'visible\'=>0,\'comments_on\'=>0,\'protected\'=>1,\'delvotes\'=>0,\'delvote_ips\'=>\'\',

			));

	');

function page_Special_GalleryFetcher()

{

	global $db, $session, $paths, $template, $plugins; // Common objects

	// artificial race condition for debug

	// sleep(5);

	$type = $paths->getParam(0);

	if ( !in_array($type, array('thumb', 'preview', 'full', 'embed')) )

	{

		die('Hack attempt');

	}

	$id = intval($paths->getParam(1));

	if ( !$id )

	{

		die('Hack attempt');

	}

	// Permissions object

	$perms = $session->fetch_page_acl($id, 'Gallery');

	if ( !$perms->get_permissions('gal_full_res') && $type == 'full' )

	{

		$type = 'preview';

	}

	while ( true )

	{

		$q = $db->sql_query('SELECT img_title, img_filename, img_time_mod, is_folder, processed FROM '.table_prefix.'gallery WHERE img_id=' . $id . ';');

		if ( !$q )

			$db->_die();

		if ( $db->numrows() < 1 )

			die('Image not found');

		$row = $db->fetchrow();

		if ( $row['processed'] == 1 || $type == 'full' )

			break;

		sleep(1);

	}

	switch ( $type )

	{

		case 'thumb':

			$filename = ENANO_ROOT . '/cache/' . $row['img_filename'] . '-thumb.jpg';

			$mimetype = 'image/jpeg';

			$ext = "jpg";

			break;

		case 'preview':

			$filename = ENANO_ROOT . '/cache/' . $row['img_filename'] . '-preview.jpg';

			$mimetype = 'image/jpeg';

			$ext = "jpg";

			break;

		case 'full':

			$filename = ENANO_ROOT . '/files/' . $row['img_filename'];

			$ext = get_file_extension($filename);

			switch($ext)

			{

				case 'png': $mimetype = 'image/png'; break;

				case 'gif': $mimetype = 'image/gif'; break;

				case 'bmp': $mimetype = 'image/bmp'; break;

				case 'jpg': case 'jpeg': $mimetype = 'image/jpeg'; break;

				case 'tif': case 'tiff': $mimetype = 'image/tiff'; break;

				default: $mimetype = 'application/octet-stream';

			}

			break;

		case 'embed':

			if ( !isset($_GET['width']) || !isset($_GET['height']) )

			{

				die('Missing width or height.');

			}

			$width = intval($_GET['width']);

			$height = intval($_GET['height']);

			if ( empty($width) || empty($height) || $width > 2048 || $height > 2048 )

			{

				die('Bad width or height');

			}

			$ext = get_file_extension($row['img_filename']);

			$src_filename  = ENANO_ROOT . '/files/' . $row['img_filename'];

			$dest_filename = ENANO_ROOT . '/cache/' . $row['img_filename'] . "-embed-$width-$height.$ext";

			$filename =& $dest_filename;

			if ( !file_exists($dest_filename) )

			{

				if ( !scale_image($src_filename, $dest_filename, $width, $height, false) )

				{

					die('Image scaling process failed.');

				}

			}

			break;

		default:

			die('PHP...insane...');

			break;

	}

	// Make sure we have permission to read this image

	if ( !$perms->get_permissions('read') )

	{

		$filename = ENANO_ROOT . '/plugins/gallery/denied.png';

		$mimetype = 'image/png';

	}

	if ( $row['is_folder'] == '1' )

	{

		$filename = ENANO_ROOT . '/plugins/gallery/folder.png';

		$mimetype = 'image/png';

	}

	if ( !file_exists($filename) )

		die('Can\'t retrieve image file ' . $filename);

	$contents = file_get_contents($filename);

	// expire images 30 days from now

	$expiry = time() + ( 30 * 86400 );

	header('Content-type: '   . $mimetype);

	header('Content-length: ' . strlen($contents));

	header('Last-Modified: '  . date('r', $row['img_time_mod']));

	header('Expires: ' . date('r', $expiry));

	// check for not-modified condition

	if ( isset($_SERVER['HTTP_IF_MODIFIED_SINCE']) )

	{

		$time = @strtotime($_SERVER['HTTP_IF_MODIFIED_SINCE']);

		if ( ( !empty($time) && intval($row['img_time_mod']) <= $time ) || date('r', $row['img_time_mod']) === $_SERVER['HTTP_IF_MODIFIED_SINCE'] )

		{

			header('HTTP/1.1 304 Not Modified');

			$db->close();

			exit;

		}

	}

	if ( isset($_GET['download']) )

	{

		// determine an appropriate non-revealing filename

		$filename = str_replace(' ', '_', $row['img_title']);

		$filename = preg_replace('/([^\w\._-]+)/', '-', $filename);

		$filename = trim($filename, '-');

		$filename .= ".$ext";

		header('Content-disposition: attachment; filename=' . $filename);

	}

	echo $contents;

	gzip_output();

	$db->close();

	exit;

}

?>