function display($tpl = null)
{
$fileid = FSS_Input::getInt('fileid');
$key = FSS_Input::getCmd('key');
$decoded = FSS_Helper::decrypt(FSS_Helper::base64url_decode($key), FSS_Helper::getEncKey("file"));
if ($fileid != $decoded) {
exit;
}
$db = JFactory::getDBO();
$sql = "SELECT * FROM #__fss_ticket_attach WHERE id = " . $fileid;
$db->setQuery($sql);
$attach = $db->loadObject();
$image = in_array(strtolower(pathinfo($attach->filename, PATHINFO_EXTENSION)), array('jpg', 'jpeg', 'png', 'gif'));
$image_file = JPATH_SITE . DS . FSS_Settings::get('attach_location') . DS . "support" . DS . $attach->diskfile;
require_once JPATH_SITE . DS . 'components' . DS . 'com_fss' . DS . 'helper' . DS . 'files.php';
FSS_File_Helper::OutputImage($image_file, pathinfo($attach->filename, PATHINFO_EXTENSION));
}
static function AutoLoginDecrypt($data)
{
$data = urldecode($data);
$data = FSS_Helper::base64url_decode($data);
$dec = self::decrypt($data, self::getEncKey());
$bits = @explode("|", $dec);
if (count($bits) != 4) {
return;
}
if ($bits[3] == 1) {
return $bits[2];
}
return null;
}