wiki.techinc.nl/includes/StreamFile.php

<?php
/** */

/** */
function wfStreamFile( $fname ) {
	$stat = @stat( $fname );
	if ( !$stat ) {
		header( 'HTTP/1.0 404 Not Found' );
		header( 'Cache-Control: no-cache' );
		header( 'Content-Type: text/html; charset=utf-8' );
		$encFile = htmlspecialchars( $fname );
		$encScript = htmlspecialchars( $_SERVER['SCRIPT_NAME'] );
		echo "<html><body>
<h1>File not found</h1>
<p>Although this PHP script ($encScript) exists, the file requested for output 
($encFile) does not.</p>
</body></html>
";
		return;
	}

	header( 'Last-Modified: ' . gmdate( 'D, d M Y H:i:s', $stat['mtime'] ) . ' GMT' );

	// Cancel output buffering and gzipping if set
	wfResetOutputBuffers();
	
	$type = wfGetType( $fname );
	if ( $type and $type!="unknown/unknown") {
		header("Content-type: $type");
	} else {
		header('Content-type: application/x-wiki');
	}

	if ( !empty( $_SERVER['HTTP_IF_MODIFIED_SINCE'] ) ) {
		$modsince = preg_replace( '/;.*$/', '', $_SERVER['HTTP_IF_MODIFIED_SINCE'] );
		$sinceTime = strtotime( $modsince );
		if ( $stat['mtime'] <= $sinceTime ) {
			header( "HTTP/1.0 304 Not Modified" );
			return;
		}
	}

	header( 'Content-Length: ' . $stat['size'] );

	readfile( $fname );
}

/** */
function wfGetType( $filename ) {
	global $wgTrivialMimeDetection;

	# trivial detection by file extension,
	# used for thumbnails (thumb.php)
	if ($wgTrivialMimeDetection) {
		$ext= strtolower(strrchr($filename, '.'));

		switch ($ext) {
			case '.gif': return 'image/gif';
			case '.png': return 'image/png';
			case '.jpg': return 'image/jpeg';
			case '.jpeg': return 'image/jpeg';
		}

		return 'unknown/unknown';
	}
	else {
		$magic=& MimeMagic::singleton();
		return $magic->guessMimeType($filename); //full fancy mime detection
	}
}

?>
Optional thumbnail generation by client request, using thumb.php. This removes any need for access to image files on page view. Experimental, some aspects still haven't been tested. 2005-04-16 04:33:34 +00:00			`<?php`
fix some issues with phpdoc 2005-07-05 21:22:25 +00:00			`/** */`
Optional thumbnail generation by client request, using thumb.php. This removes any need for access to image files on page view. Experimental, some aspects still haven't been tested. 2005-04-16 04:33:34 +00:00
fix some issues with phpdoc 2005-07-05 21:22:25 +00:00			`/** */`
Optional thumbnail generation by client request, using thumb.php. This removes any need for access to image files on page view. Experimental, some aspects still haven't been tested. 2005-04-16 04:33:34 +00:00			`function wfStreamFile( $fname ) {`
Suppressed file not found warning, removed unnecessary cache suppression header 2005-08-13 07:53:16 +00:00			`$stat = @stat( $fname );`
Optional thumbnail generation by client request, using thumb.php. This removes any need for access to image files on page view. Experimental, some aspects still haven't been tested. 2005-04-16 04:33:34 +00:00			`if ( !$stat ) {`
			`header( 'HTTP/1.0 404 Not Found' );`
don't cache error pages 2006-11-01 11:21:09 +00:00			`header( 'Cache-Control: no-cache' );`
* Add 'charset' to Content-Type headers on various HTTP error responses to forestall additional UTF-7-autodetect XSS issues. Probably not an issue on Apache 2.0+, but most servers send only 'text/html' by default when the script didn't specify more details. This fixes an issue with the Ajax interface error message on MSIE when $wgUseAjax is enabled (not default configuration); this UTF-7 variant on a previously fixed attack vector was discovered by Moshe BA from BugSec: http://www.bugsec.com/articles.php?Security=24 * Trackback responses now specify XML content type 2007-02-21 01:02:47 +00:00			`header( 'Content-Type: text/html; charset=utf-8' );`
Committed a bunch of live hacks from Wikimedia servers A few left, but these don't look too evil 2006-10-02 17:04:13 +00:00			`$encFile = htmlspecialchars( $fname );`
			`$encScript = htmlspecialchars( $_SERVER['SCRIPT_NAME'] );`
Optional thumbnail generation by client request, using thumb.php. This removes any need for access to image files on page view. Experimental, some aspects still haven't been tested. 2005-04-16 04:33:34 +00:00			`echo "<html><body>`
			`<h1>File not found</h1>`
Committed a bunch of live hacks from Wikimedia servers A few left, but these don't look too evil 2006-10-02 17:04:13 +00:00			`<p>Although this PHP script ($encScript) exists, the file requested for output`
			`($encFile) does not.</p>`
Set content type on error messages, and include a trailing newline 2006-11-12 10:44:48 +00:00			`</body></html>`
			`";`
Optional thumbnail generation by client request, using thumb.php. This removes any need for access to image files on page view. Experimental, some aspects still haven't been tested. 2005-04-16 04:33:34 +00:00			`return;`
			`}`

Fixed some obvious bugs with the new code and implemented If-Modified-Since handling 2005-04-16 05:48:21 +00:00			`header( 'Last-Modified: ' . gmdate( 'D, d M Y H:i:s', $stat['mtime'] ) . ' GMT' );`

Cancel output buffering in StreamFile; when used inside gzip buffering this could cause funny timeout behavior as the Content-Length was wrong. 2006-06-13 20:22:08 +00:00			`// Cancel output buffering and gzipping if set`
* (bug 8148) Handle non-removable output buffers gracefully when cleaning buffers for HTTP 304 responses, StreamFile, and Special:Export. Duplicated code merged into wfResetOutputBuffers() and wfClearOutputBuffers() 2006-12-11 01:51:21 +00:00			`wfResetOutputBuffers();`
Cancel output buffering in StreamFile; when used inside gzip buffering this could cause funny timeout behavior as the Content-Length was wrong. 2006-06-13 20:22:08 +00:00
* Return correct content-type header with 304 responses for StreamFile; it confuses Safari if you let it return "text/html". 2006-06-13 23:54:08 +00:00			`$type = wfGetType( $fname );`
			`if ( $type and $type!="unknown/unknown") {`
			`header("Content-type: $type");`
			`} else {`
			`header('Content-type: application/x-wiki');`
			`}`

Fixed some obvious bugs with the new code and implemented If-Modified-Since handling 2005-04-16 05:48:21 +00:00			`if ( !empty( $_SERVER['HTTP_IF_MODIFIED_SINCE'] ) ) {`
Fixed various bugs with new image code, changed thumbnail paths as per JeLuF's suggestion 2005-04-16 11:05:41 +00:00			`$modsince = preg_replace( '/;.*$/', '', $_SERVER['HTTP_IF_MODIFIED_SINCE'] );`
			`$sinceTime = strtotime( $modsince );`
Fixed some obvious bugs with the new code and implemented If-Modified-Since handling 2005-04-16 05:48:21 +00:00			`if ( $stat['mtime'] <= $sinceTime ) {`
			`header( "HTTP/1.0 304 Not Modified" );`
			`return;`
			`}`
			`}`
* s~\t+$~~ 2006-01-07 13:31:29 +00:00
* (bug 898) Mime type autodetection. 2005-05-21 07:46:17 +00:00			`header( 'Content-Length: ' . $stat['size'] );`
* s~\t+$~~ 2006-01-07 13:31:29 +00:00
Optional thumbnail generation by client request, using thumb.php. This removes any need for access to image files on page view. Experimental, some aspects still haven't been tested. 2005-04-16 04:33:34 +00:00			`readfile( $fname );`
			`}`

fix some issues with phpdoc 2005-07-05 21:22:25 +00:00			`/** */`
Optional thumbnail generation by client request, using thumb.php. This removes any need for access to image files on page view. Experimental, some aspects still haven't been tested. 2005-04-16 04:33:34 +00:00			`function wfGetType( $filename ) {`
* (bug 898) Mime type autodetection. 2005-05-21 07:46:17 +00:00			`global $wgTrivialMimeDetection;`
Optional thumbnail generation by client request, using thumb.php. This removes any need for access to image files on page view. Experimental, some aspects still haven't been tested. 2005-04-16 04:33:34 +00:00
* (bug 898) Mime type autodetection. 2005-05-21 07:46:17 +00:00			`# trivial detection by file extension,`
			`# used for thumbnails (thumb.php)`
			`if ($wgTrivialMimeDetection) {`
			`$ext= strtolower(strrchr($filename, '.'));`
* s~\t+$~~ 2006-01-07 13:31:29 +00:00
* (bug 898) Mime type autodetection. 2005-05-21 07:46:17 +00:00			`switch ($ext) {`
fix some issues with phpdoc 2005-07-05 21:22:25 +00:00			`case '.gif': return 'image/gif';`
			`case '.png': return 'image/png';`
			`case '.jpg': return 'image/jpeg';`
			`case '.jpeg': return 'image/jpeg';`
Optional thumbnail generation by client request, using thumb.php. This removes any need for access to image files on page view. Experimental, some aspects still haven't been tested. 2005-04-16 04:33:34 +00:00			`}`
* s~\t+$~~ 2006-01-07 13:31:29 +00:00
fix some issues with phpdoc 2005-07-05 21:22:25 +00:00			`return 'unknown/unknown';`
* (bug 898) Mime type autodetection. 2005-05-21 07:46:17 +00:00			`}`
			`else {`
* Removed lots of explicit require_once statements. The autoloader should theoretically be faster, because it always uses an absolute path, eliminating the need for a search, and it is never called unnecessarily. Absolute paths are also more robust in the face of odd configurations or usage patterns. Moved a few constants around to support this, they always have to be available before the method call. * Deleted DatabaseMysql.php, no longer necessary, database classes are autoloaded. * Moved wfGetMimeMagic() to MimeMagic::singleton() * Fixed a couple of __CLASS__.'::'.__FUNCTION__ things. 2006-10-03 13:00:52 +00:00			`$magic=& MimeMagic::singleton();`
* (bug 898) Mime type autodetection. 2005-05-21 07:46:17 +00:00			`return $magic->guessMimeType($filename); //full fancy mime detection`
Optional thumbnail generation by client request, using thumb.php. This removes any need for access to image files on page view. Experimental, some aspects still haven't been tested. 2005-04-16 04:33:34 +00:00			`}`
			`}`

			`?>`