view_item.php

Go to the documentation of this file.

<?php

require_once 'Smarty.class.php';
require_once 'sql.php';
require_once 'error.php';
require_once 'util.php';
require_once 'const.php';
require_once 'config.php';
require_once 'redirect.php';
require_once 'upload.php';




function view_item($smarty,$INPUT, $db) {
global $_SESSION, $opac_url, $debug_level, $actions_info;

$default = array(
        "mode" => "view",
);

## check user input 

$INPUT = array_merge($default, $INPUT);

#if (isset($_SESSION['mode'])) {
#       $INPUT['mode'] = $_SESSION['mode'];
#}

if ($debug_level > 10) {
         print "<hr><pre>Input: ";
        print_r($INPUT);
        print "</pre><hr>";
}

if (!empty($errors)) {
        user_error("Missing or malformed input parameter(s): " . 
                join($errors, ", "), E_USER_ERROR); 
}


# init mysql connection

$param = array ( "tables" => "document, collection", 
                 "columns" => "document.*,collection.password",
                 "cond" => "collection.id = document.collection_id AND document.id = " . $INPUT['document_id'], 
                );

$document = sql_query('select', $param, $db);


if (empty($document)) {
        user_error("No such record: document id = " . $INPUT['document_id'],
                E_USER_ERROR); 
}

$m = $document[0];

$ok = FALSE;
$url = '';
$file = '';
$dir = FALSE;

switch($INPUT['mode']) {

        case 'opac': 
                $ok = TRUE;
                $url = $opac_url . $m['ppn'];
                break;

        default:
                $ok = ($m['protected'] == FALSE);

                if ($INPUT['file'] != '') {
                        $file = $INPUT['file'];
                } else if ($m['url'] != '') {
                        $url = $m['url'];
                } else {
                        $dir = TRUE; $ok = TRUE;
                };

                break;
}

if ((!$ok) and (isset($INPUT['password'])) and (isset($INPUT['b_ok']))) {

        # check password 

        sleep(2);
 
        $pw = "{SHA1}" . sha1($INPUT['password']);
        $ok = ($m['password'] == $pw);

        $INPUT['wrongpass'] = TRUE;
}

if ($ok) {

        if ($dir) {
                $ls = list_files($INPUT['item'], $INPUT['document_id']);


                if (count($ls) > 1) { 

                        $tpl_var = $INPUT;
                        $tpl_var['files_info'] = $ls;
                        $tpl_var['actions_info'] = $actions_info;
                        do_template( $smarty, 'view_dir.tpl', $tpl_var );
                        exit(0);
                }
        
                if (count($ls) == 1) {

                        $files = array_keys($ls);

                        $url = 'action.php?action=view&mode=file&item=' . 
                                $INPUT['item'];
                        $url .= '&document_id=' . $INPUT['document_id'];
                        $url .= '&file=' . $files[0];
                }
        }
                
        if ($file != '') {

                # file

                $mime = guess_mime_type($file);

                
                header('Content-Type: ' . $mime);

                if (($mime == 'application/octet-stream') ) {
                        header('Content-Disposition: $mime ; filename="' . $file . '";');
                }

                $c = get_file($INPUT['item'], $INPUT['document_id'], $file);
                echo $c;
                exit(0);
        } 


        if ($url != '') {

                # url

                redirect($url); 
                exit(0);
        }


} else {
        $tpl_var = $INPUT;
        do_template( $smarty, 'view.tpl', $tpl_var );
        exit(0);
}

}
?>

---