function Download()
{
global $wpdb, $current_user, $user_ID;
@error_reporting(0);
wpfb_loadclass('Category', 'Download');
$downloader_ip = preg_replace('/[^0-9a-fA-F:., ]/', '', $_SERVER['REMOTE_ADDR']);
get_currentuserinfo();
$logged_in = !empty($user_ID);
$user_role = $logged_in ? reset($current_user->roles) : null;
// get user's highest role (like in user-eidt.php)
$is_admin = current_user_can('manage_options');
// check user level
if (!$this->CurUserCanAccess()) {
$this->DownloadDenied('inaccessible_msg');
}
// check offline
if ($this->file_offline && !$is_admin) {
wp_die(WPFB_Core::$settings->file_offline_msg);
}
// check referrer
if ($this->file_direct_linking != 1) {
// if referer check failed, redirect to the file post
if (!WPFB_Download::RefererCheck()) {
$url = WPFB_Core::GetPostUrl($this->file_post_id);
if (empty($url)) {
$url = home_url();
}
wp_redirect($url);
exit;
}
}
// check traffic
if ($this->IsLocal() && !WPFB_Download::CheckTraffic($this->file_size)) {
header('HTTP/1.x 503 Service Unavailable');
wp_die(WPFB_Core::$settings->traffic_exceeded_msg);
}
// check daily user limit
if (!$is_admin && WPFB_Core::$settings->daily_user_limits) {
if (!$logged_in) {
$this->DownloadDenied('inaccessible_msg');
}
$today = intval(date('z'));
$usr_dls_today = intval(get_user_option(WPFB_OPT_NAME . '_dls_today'));
$usr_last_dl_day = intval(date('z', intval(get_user_option(WPFB_OPT_NAME . '_last_dl'))));
if ($today != $usr_last_dl_day) {
$usr_dls_today = 0;
}
// check for limit
$dl_limit = intval(WPFB_Core::GetOpt('daily_limit_' . $user_role));
if ($dl_limit > 0 && $usr_dls_today >= $dl_limit) {
$this->DownloadDenied(sprintf(WPFB_Core::$settings->daily_limit_exceeded_msg, $dl_limit));
}
$usr_dls_today++;
update_user_option($user_ID, WPFB_OPT_NAME . '_dls_today', $usr_dls_today);
update_user_option($user_ID, WPFB_OPT_NAME . '_last_dl', time());
}
// count download
if (!$is_admin || !WPFB_Core::$settings->ignore_admin_dls) {
$last_dl_time = mysql2date('U', $this->file_last_dl_time, false);
if (empty($this->file_last_dl_ip) || $this->file_last_dl_ip != $downloader_ip || time() - $last_dl_time > 86400) {
$wpdb->query("UPDATE " . $wpdb->wpfilebase_files . " SET file_hits = file_hits + 1, file_last_dl_ip = '" . $downloader_ip . "', file_last_dl_time = '" . current_time('mysql') . "' WHERE file_id = " . (int) $this->file_id);
}
}
// external hooks
do_action('wpfilebase_file_downloaded', $this->file_id);
$url = $this->GetRemoteUri();
$is_local_remote = !empty($url) && parse_url($url, PHP_URL_SCHEME) === 'file' && is_readable($url);
// download or redirect
if ($this->IsLocal() || $is_local_remote) {
$bw = 'bitrate_' . ($logged_in ? 'registered' : 'unregistered');
WPFB_Download::SendFile($is_local_remote ? $url : $this->GetLocalPath(), array('bandwidth' => WPFB_Core::$settings->{$bw}, 'etag' => $this->file_hash, 'md5_hash' => WPFB_Core::$settings->fake_md5 ? null : $this->file_hash, 'force_download' => WPFB_Core::$settings->force_download || $this->file_force_download, 'cache_max_age' => 10, 'filename' => empty($this->file_name_original) ? $this->file_name : $this->file_name_original));
} else {
//header('HTTP/1.1 301 Moved Permanently');
header('Cache-Control: no-store, no-cache, must-revalidate');
header('Expires: Thu, 01 Jan 1970 00:00:00 GMT');
header('Location: ' . $url);
}
exit;
}
<?php
define('FASTLOAD', true);
require_once 'wpfb-load.php';
wpfb_loadclass('Core', 'File', 'Category', 'Download');
$item = null;
if (isset($_GET['fid'])) {
$fid = intval($_GET['fid']);
if ($fid == 0) {
$img_path = ABSPATH . WPINC . '/images/';
if (file_exists($img = $img_path . 'crystal/default.png') || file_exists($img = $img_path . 'default.png') || file_exists($img = $img_path . 'blank.gif')) {
WPFB_Download::SendFile($img, array('cache_max_age' => -1));
}
//was 3600 * 12
exit;
}
$item = WPFB_File::GetFile($fid);
} elseif (isset($_GET['cid'])) {
$item = WPFB_Category::GetCat(intval($_GET['cid']));
}
if ($item == null || !$item->CurUserCanAccess(true)) {
exit;
}
// if no thumbnail, redirect
if (empty($item->file_thumbnail) && empty($item->cat_icon)) {
header('Location: ' . $item->GetIconUrl());
exit;
}
// send thumbnail
WPFB_Download::SendFile($item->GetThumbPath(), array('cache_max_age' => -1));
// was 3600 * 12