/**
* download
*
* file download
*
* @param array $_map
* request data
*/
function download($_map)
{
$id = '';
$query = '';
if (isset($_map['oid'])) {
$id = intval($_map['oid']);
$query = 'SELECT * FROM #wp__easycontactforms_files WHERE id=\'' . $id . '\' AND Webdir=FALSE';
} else {
EasyContactFormsFiles::fileNotFound($_map);
}
$token = isset($_map['token']) ? $_map['token'] : '';
$md5 = md5(EasyContactFormsSecurityManager::getServerPwd() . $id);
if (isset($_map['token']) && $md5 != $token) {
EasyContactFormsFiles::fileNotFound($_map);
}
if (!isset($_map['token']) && (!isset($_map['easycontactusr']) || $_map['easycontactusr']->id == 0)) {
EasyContactFormsIHTML::getNotLoggedInHTML();
exit;
}
$response = EasyContactFormsDB::getObjects($query);
if (EasyContactFormsDB::err() || count($response) == 0) {
EasyContactFormsFiles::fileNotFound($_map);
}
$ds = DIRECTORY_SEPARATOR;
$downloaddir = EASYCONTACTFORMS__fileUploadDir;
$Count = intval($response[0]->Count);
$Size = $response[0]->Size;
$Type = $response[0]->Type;
$Name = $response[0]->Name;
$filepath = $downloaddir . $ds . $response[0]->Storagename;
if (!is_file($filepath)) {
EasyContactFormsFiles::fileNotFound($_map);
}
header("Content-length: {$Size}");
header("Content-type: {$Type}");
header("Content-Disposition: attachment; filename={$Name}");
readfile($filepath);
$valuemap = array();
$valuemap['Count'] = ++$Count;
EasyContactFormsDB::update($valuemap, 'Files', $response[0]->id);
exit;
}
/**
* getACLViewName
*
* Returns a view name based on a user role, object type and request
* method
*
* @param string $role
* a role name
* @param string $type
* an object type
* @param string $method
* a method name
*
* @return string
* a view name
*/
function getACLViewName($role, $type, $method)
{
$query = "SELECT\n\t\t\t\tname\n\t\t\tFROM\n\t\t\t\t#wp__easycontactforms_acl\n\t\t\tWHERE\n\t\t\t\tobjtype='{$type}'\n\t\t\t\tAND role='{$role}'\n\t\t\t\tAND method='{$method}'";
$result = EasyContactFormsDB::getValue($query);
if (EasyContactFormsDB::err()) {
return '';
}
return $result;
}
/**
* getList
*
* performs an actual query to a database
*
* @param string $listquery
* a query to execute
* @param array $params
* an optional list of query parameters
*
* @return array
* an array containing object records
*/
function getList($listquery, $params = NULL)
{
$listquery = EasyContactFormsDB::getQueryText($listquery, $params);
if (!isset($this->rsholder[$listquery])) {
$rslist = EasyContactFormsDB::getObjects($listquery);
if (EasyContactFormsDB::err()) {
return NULL;
}
$this->rsholder[$listquery] = $rslist;
} else {
$rslist = $this->rsholder[$listquery];
}
return $rslist;
}
