253 lines
9.0 KiB
PHP
253 lines
9.0 KiB
PHP
<?php
|
|
//
|
|
// Written by Alex / github.com/PhantomVI
|
|
//
|
|
|
|
$base_path = realpath($_SERVER['DOCUMENT_ROOT']);
|
|
$base_config = Array(
|
|
'debug' => 1,
|
|
'tftproot' => $base_path,
|
|
'default_language' => 'English_United_States',
|
|
'firmware' => 'firmware', 'settings' => 'settings', 'wallpapers' => 'wallpapers', 'ringtones' => 'ringtones',
|
|
'locales' => 'locales', 'countries' => 'countries', 'languages' => 'languages'
|
|
);
|
|
|
|
# Merge config
|
|
$ini_array = parse_ini_file('index.cnf');
|
|
if (!empty($ini_array)) {
|
|
$config = array_merge($base_config, $ini_array);
|
|
}
|
|
|
|
#$config['tftproot'] = (!empty($config['tftproot'])) ? $config['tftproot'] : '/tftpboot';
|
|
|
|
# Fixup debug
|
|
$print_debug = (!empty($config['debug'])) ? $config['debug'] : 'off';
|
|
$print_debug = ($print_debug == 1) ? 'on' : $print_debug;
|
|
|
|
# Parse request
|
|
$request = $_REQUEST;
|
|
$req_file = !empty($request['id']) ? $request['id'] : '';
|
|
|
|
# directory content extensions map
|
|
$fw_suffix = array('.bin', '.loads', '.sbn', '.sb2', '.sbin', '.zz', '.zup');
|
|
|
|
//$settings_suffix = array('cnf.xml');
|
|
|
|
$ringtones_list = array('distinctive.xml', 'ringlist.xml');
|
|
|
|
$locale_list = array('-dictionary.', 'dictionary-ext.', '-dictionary.utf-8.', '-kate.xml', '-font.xml', '-font.dat','-tones.xml',
|
|
'be-sccp.jar', 'tc-sccp.jar', 'td-sccp.jar', 'ipc-sccp.jar', 'mk-sccp.jar', '_locale.loads', 'i-button-help.xml');
|
|
|
|
# Show debug output
|
|
if ($print_debug == 'on') {
|
|
print_r("<br> Config:<pre>");
|
|
print_r($config);
|
|
print("</pre>");
|
|
print_r("<br> Request:<br><pre>");
|
|
print_r($request);
|
|
print("</pre>");
|
|
}
|
|
|
|
# Start parsing the request
|
|
$req_file_full_path = '' ;
|
|
|
|
if (!empty($req_file)) {
|
|
$signed = FALSE;
|
|
$req_data_ar = explode('/', $req_file);
|
|
$req_data_len = count($req_data_ar) - 1;
|
|
|
|
$orig_req_file_name = end($req_data_ar);
|
|
$req_file_name = $orig_req_file_name;
|
|
|
|
if (strpos('.sgn;', strtolower($orig_req_file_name).';') !== FALSE) { // handle signed files
|
|
$signed = TRUE;
|
|
$req_file_name = basename($orig_req_file_name, '.sgn'); // strip signed part
|
|
}
|
|
|
|
|
|
if (file_exists($config['tftproot'].'/'.$req_file_name)) // prevent "/../...//" browsing - (eliminate back door)
|
|
{
|
|
$req_file_full_path = $config['tftproot'].'/'.$req_file_name;
|
|
}
|
|
else
|
|
{
|
|
$tmp_file = explode('.', $req_file_name);
|
|
|
|
if (strpos_array($req_file_name, $fw_suffix,'any') !== FALSE) { // Firmware file was requested
|
|
$firmware_list = find_all_files($config['tftproot'].'/'.$config['firmware']);
|
|
$pos2 = strpos_array($firmware_list, $req_file_name, 'any'); // case unsensitive
|
|
if ($pos2 !== FALSE) { // Request Firmware
|
|
$req_file_full_path = $firmware_list[$pos2];
|
|
}
|
|
if ($print_debug == 'on'){ print_r('<br>Requested Firmware: '. $req_file_full_path. '<br>');}
|
|
}
|
|
else
|
|
{
|
|
$tmp_file = '';
|
|
|
|
//if (strpos_array($req_file_name, $settings_suffix, 'any') !== FALSE) { // Request Settings
|
|
if (strpos(strtolower($req_file_name), '.cnf.xml') !== FALSE) { // Request Settings
|
|
$tmp_file = $config['tftproot'].'/'.$config['settings'].'/'.$req_file_name;
|
|
}
|
|
else if (strpos(strtolower($req_file), '/desktops/') !== FALSE) { // Request Wallpapers
|
|
$tmp_file = $config['tftproot'].'/'.$config['wallpapers'].'/'. $req_data_ar[$req_data_len-1].'/'. $req_file_name;
|
|
}
|
|
else if (strpos_array($ringtones_list, $req_file_name, 'any') !== FALSE) { // Request RingTones
|
|
$tmp_file = $config['tftproot'].'/'.$config['ringtones'].'/ringlist.xml';
|
|
}
|
|
else if (strpos_array($req_file, $locale_list, 'any') !== FALSE) { // Request Languages
|
|
if (!empty($req_data_ar[$req_data_len-1])) {
|
|
$tmp_file = $config['tftproot'].'/'.$config['locales'].'/'.$config['languages'].'/'. $req_data_ar[$req_data_len-1].'/'. $req_file_name;
|
|
} else {
|
|
$tmp_file = $config['tftproot'].'/'.$config['locales'].'/'.$config['languages'].'/'.$config['default_language'].'/'. $req_file_name;
|
|
}
|
|
}
|
|
|
|
/*
|
|
else if (strpos(strtolower($req_file), '-tones.xml') !== FALSE) { // Request Countries
|
|
$tmp_file = $config['tftproot'].'/'.$config['locales'].'/'.$config['countries'].'/'. $req_data_ar[$req_data_len-1].'/'. $req_data_ar[$req_data_len];
|
|
}
|
|
|
|
else if (strpos(strtolower($req_file), '-dictionary.') !== FALSE) { // Request Countries
|
|
$tmp_file = $config['tftproot'].'/'.$config['locales'].'/'.$config['languages'].'/'. $req_data_ar[$req_data_len-1].'/'. $req_data_ar[$req_data_len];
|
|
}
|
|
|
|
else if (strpos_array($req_file, $locale_list, 'any') !== FALSE) { // Request Languages
|
|
$tmp_file = $config['tftproot'].'/'.$config['locales'].'/'.$config['languages'].'/'. $req_data_ar[$req_data_len-1].'/'. $req_data_ar[$req_data_len];
|
|
}
|
|
|
|
else if (strpos(strtolower($req_file), '-dictionary.jar') !== FALSE) { // Request Countries
|
|
$tmp_file = $config['tftproot'].'/'.$config['locales'].'/'.$config['languages'].'/'. $req_data_ar[$req_data_len-1].'/'. $req_data_ar[$req_data_len];
|
|
}
|
|
*/
|
|
if ($print_debug == 'on'){ print_r('<br>File : '. $req_file_name. ' not found.<br>');}
|
|
|
|
if (empty($tmp_file)) {
|
|
die('ERROR: no match found.');
|
|
}
|
|
$req_file_full_path = $tmp_file;
|
|
}
|
|
}
|
|
if (!empty($req_file_full_path)) {
|
|
if ($signed) {
|
|
$req_file_full_path .= '.sgn';
|
|
}
|
|
if (!file_exists($req_file_full_path)) {
|
|
die('Could not find:'. $req_file_full_path);
|
|
}
|
|
if ($print_debug == 'on'){ print_r('<br>Returning: '. $req_file_full_path. '<br>');}
|
|
file_force_download($req_file_full_path);
|
|
}
|
|
}
|
|
|
|
/*
|
|
* Helper functiosn
|
|
*/
|
|
function file_force_download($file) {
|
|
if (file_exists($file)) {
|
|
|
|
if (ob_get_level()) {
|
|
ob_end_clean();
|
|
}
|
|
|
|
header('Content-Description: File Transfer');
|
|
header('Content-Type: application/octet-stream');
|
|
header('Content-Disposition: attachment; filename=' . basename($file));
|
|
header('Content-Transfer-Encoding: binary');
|
|
header('Expires: 0');
|
|
header('Cache-Control: must-revalidate');
|
|
header('Pragma: public');
|
|
header('Content-Length: ' . filesize($file));
|
|
|
|
if ($fd = fopen($file, 'rb')) {
|
|
while (!feof($fd)) {
|
|
print fread($fd, 1024);
|
|
}
|
|
fclose($fd);
|
|
}
|
|
exit;
|
|
}
|
|
}
|
|
|
|
/*
|
|
* Founds any string from array in array
|
|
*/
|
|
function strpos_array($haystack, $needles, $mode='any') {
|
|
if (is_array($needles)) {
|
|
foreach ($needles as $str) {
|
|
$pos = strpos_array($haystack, $str, $mode);
|
|
if ($pos !== FALSE) {
|
|
return $pos;
|
|
}
|
|
}
|
|
} else {
|
|
if (is_array($haystack)) {
|
|
foreach ($haystack as $key => $subtr) {
|
|
$pos = strpos_array($subtr, $needles, $mode);
|
|
if ($pos !== FALSE) {
|
|
return $key;
|
|
}
|
|
}
|
|
return FALSE;
|
|
} else {
|
|
if ($mode == 'any') {
|
|
return strpos(strtolower($haystack), strtolower($needles));
|
|
} else {
|
|
if ($mode == 'full') {
|
|
if ($haystack == $needles) {
|
|
return 0;
|
|
} else {
|
|
return FALSE;
|
|
}
|
|
} else {
|
|
return strpos($haystack, $needles);
|
|
}
|
|
|
|
}
|
|
}
|
|
}
|
|
return FALSE;
|
|
}
|
|
|
|
function find_all_files($dir, $file_mask=null, $mode='full'){
|
|
|
|
$result = NULL;
|
|
if (empty($dir) || (!file_exists($dir))) {
|
|
return $result;
|
|
}
|
|
|
|
$root = scandir($dir);
|
|
foreach($root as $value) {
|
|
if($value === '.' || $value === '..') {continue;}
|
|
if(is_file("$dir/$value")) {
|
|
$filter = FALSE;
|
|
if (!empty($file_mask)) {
|
|
if (is_array($file_mask)) {
|
|
foreach ($file_mask as $k){
|
|
if (strpos(strtolower($value), strtolower($k)) !== FALSE) {$filter = true;}
|
|
}
|
|
} else {
|
|
if (strpos(strtolower($value), strtolower($file_mask)) !== FALSE) {$filter = true;}
|
|
}
|
|
} else {$filter = true;}
|
|
if ($filter) {
|
|
if ($mode=='fileonly'){
|
|
$result[]="$value";
|
|
} else {
|
|
$result[]="$dir/$value";
|
|
}
|
|
} else {$result[]=null;}
|
|
continue;
|
|
}
|
|
$sub_fiend = find_all_files("$dir/$value", $file_mask, $mode);
|
|
if (!empty($sub_fiend)) {
|
|
foreach($sub_fiend as $sub_value) {
|
|
if (!empty($sub_value)) {
|
|
$result[]=$sub_value;
|
|
}
|
|
}
|
|
}
|
|
}
|
|
return $result;
|
|
}
|