| Server IP : 104.21.21.239 / Your IP : 216.73.216.11 Web Server : Apache/2.4.68 (Amazon Linux) OpenSSL/3.5.5 System : Linux ip-172-31-69-123.ec2.internal 6.1.176-223.369.amzn2023.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Jul 24 13:34:27 UTC 2026 x86_64 User : ec2-user ( 1000) PHP Version : 8.4.23 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : ON Directory : /home/mitzvahm/planner/mod/ |
Upload File : |
<?php include('_mod_security.php'); ?>
<?php
session_start();
switch ($_REQUEST['type']) :
case 'vendor' :
$sql = "SELECT * FROM vendor_documents WHERE id = ".mysqli_real_escape_string($GLOBALS['con'], trim($_REQUEST['id']))." AND event_id = ".$_SESSION['active_event']." AND user_id = ".$_SESSION['user_id'];
$result_file = mysqli_query($GLOBALS['con'], $sql);
if (mysqli_num_rows($result_file) > 0) :
$row_file = mysqli_fetch_object($result_file);
$downloadfile = $app_upload_dir.'/vendocs/'.str_pad($row_file->vendor_id, 10, '0', STR_PAD_LEFT).'/'.str_pad($row_file->id, 10, '0', STR_PAD_LEFT).'_'.$row_file->doc_file;
header("Cache-Control: no-cache, must-revalidate");
header("Expires: Sat, 26 Jul 1997 05:00:00 GMT");
header('Content-type: application/force-download');
header('Content-Disposition: attachment; filename="'.$row_file->doc_file.'"');
readfile($downloadfile);
endif;
break;
endswitch;
?>