70 lines
1.8 KiB
PHP
70 lines
1.8 KiB
PHP
<?php
|
|
$agent = @$_SERVER['HTTP_USER_AGENT'];
|
|
if (substr($agent, 0, 5)!=='ebusd') {
|
|
header('Location: https://upd.ebusd.eu/', true, 301);
|
|
exit;
|
|
}
|
|
$dir=realpath('.');
|
|
$p=@$_REQUEST['p'];
|
|
$e=@$_REQUEST['t'];
|
|
$a=@$_REQUEST['a'];
|
|
$l=@$_REQUEST['l'];
|
|
while ($p && $p[0]==='/') {
|
|
$p=substr($p, 1);
|
|
}
|
|
if ($p && $p[strlen($p)-1]==='/') {
|
|
$p=substr($p, 0, strlen($p)-1);
|
|
}
|
|
if ($l && strlen($l)===2 && ctype_alpha($l) && is_dir($l)) {
|
|
$l=strtolower($l).'/';
|
|
} else {
|
|
$l='de/';
|
|
}
|
|
$p=$l.($p ? $p : '.');
|
|
if ($p && strpos($p, '..')===FALSE && is_file($p) && (substr($p, -4)==='.csv' || substr($p, -4)==='.inc')
|
|
&& strncmp(realpath($p), $dir, strlen($dir))===0
|
|
) {
|
|
header('Content-Type: text/comma-separated-values');
|
|
header('Cache-Control: Private');
|
|
$t=@filemtime($p);
|
|
if ($t) {
|
|
header('Last-Modified: '.gmdate('D, d M Y H:i:s', $t).' GMT');
|
|
}
|
|
ob_start();
|
|
echo @file_get_contents($p);
|
|
header('Content-Length: '.ob_get_length());
|
|
ob_end_flush();
|
|
exit;
|
|
}
|
|
if (!$e) {
|
|
header('HTTP/1.1 404 Not Found');
|
|
exit;
|
|
}
|
|
$e=".$e";
|
|
if (strpos($p, '/', strlen($l))!==FALSE || strpos($p, '\\')!==FALSE || strpos($p, '..')!==FALSE) {
|
|
header('HTTP/1.1 400 Bad Request');
|
|
exit;
|
|
}
|
|
$prefix=$a ? $a==='-' ? $a : substr(dechex(0x100|hexdec($a)), 1).'.' : NULL;
|
|
$dir=@opendir($p);
|
|
if ($dir===FALSE) {
|
|
header('HTTP/1.1 404 Not Found');
|
|
exit;
|
|
}
|
|
header('Content-Type: text/comma-separated-values');
|
|
header('Cache-Control: Private');
|
|
ob_start();
|
|
while(($f=@readdir())!==FALSE) {
|
|
if (!$f || !is_file($p.'/'.$f) || substr($f, -strlen($e))!==$e) {
|
|
continue;
|
|
}
|
|
if ($f!=='_templates'.$e && $prefix && ($prefix==='-' ? strpos($f, '.') === 2 : substr($f, 0, strlen($prefix))!==$prefix)) {
|
|
continue;
|
|
}
|
|
echo "$f\n";
|
|
}
|
|
@closedir($dir);
|
|
header('Content-Length: '.ob_get_length());
|
|
ob_end_flush();
|
|
?>
|