RyXéo » GLPI

<?php

/*

 * @version $Id: document.send.php 7763 2009-01-06 18:44:50Z moyo $

 -------------------------------------------------------------------------

 GLPI - Gestionnaire Libre de Parc Informatique

 Copyright (C) 2003-2009 by the INDEPNET Development Team.

 http://indepnet.net/   http://glpi-project.org

 -------------------------------------------------------------------------

 LICENSE

 This file is part of GLPI.

 GLPI is free software; you can redistribute it and/or modify

 it under the terms of the GNU General Public License as published by

 the Free Software Foundation; either version 2 of the License, or

 (at your option) any later version.

 GLPI is distributed in the hope that it will be useful,

 but WITHOUT ANY WARRANTY; without even the implied warranty of

 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the

 GNU General Public License for more details.

 You should have received a copy of the GNU General Public License

 along with GLPI; if not, write to the Free Software

 Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA

 --------------------------------------------------------------------------

 */

// ----------------------------------------------------------------------

// Original Author of file: Julien Dombre

// Purpose of file:

// ----------------------------------------------------------------------

$NEEDED_ITEMS=array("document","tracking");

define('GLPI_ROOT', '..');

include (GLPI_ROOT . "/inc/includes.php");

if ($CFG_GLPI["public_faq"] == 0)

checkLoginUser();

if (isset($_GET["file"])){

  $splitter=split("/",$_GET["file"]);

  if (count($splitter)==2){

    $send=false;

    if ($splitter[0]=="_dumps"&&haveRight("backup","w")) $send=true;

    if (!$send){

      $doc=new Document;

      $founded=$doc->getFromDBbyFilename($_GET["file"]);

      if ($founded){

        // Check if it is my doc

        if (isset($_SESSION["glpiID"])&&$doc->fields["FK_users"]==$_SESSION["glpiID"]){

          $send=true;

        } else {

          $send=true;

        }

        if ($job->fields["author"]==$_SESSION["glpiID"]){

          $query = "SELECT * FROM glpi_doc_device WHERE glpi_doc_device.FK_device = '".$_GET["tracking"]."' AND glpi_doc_device.device_type = '".TRACKING_TYPE."' AND FK_doc='".$doc->fields["ID"]."'";

          $result=$DB->query($query);

          if ($DB->numrows($result)>0)

            $send=true;

        }

      }

      else echo $LANG["document"][43];

    }

    if ($send&&file_exists(GLPI_DOC_DIR."/".$_GET["file"]))

      sendFile(GLPI_DOC_DIR."/".$_GET["file"],$splitter[1]);

    else echo $LANG["document"][45];

  } else echo $LANG["document"][44];

 }

?>