403Webshell
Server IP : 138.197.176.125  /  Your IP : 216.73.217.55
Web Server : Apache/2.4.41 (Ubuntu)
System : Linux SuiteCRM-8 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64
User : root ( 0)
PHP Version : 8.3.19
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /mnt/volume_fra1_01/vtiger80/modules/Emails/actions/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /mnt/volume_fra1_01/vtiger80/modules/Emails/actions/DownloadFile.php
<?php
/*+***********************************************************************************
 * The contents of this file are subject to the vtiger CRM Public License Version 1.0
 * ("License"); You may not use this file except in compliance with the License
 * The Original Code is:  vtiger CRM Open Source
 * The Initial Developer of the Original Code is vtiger.
 * Portions created by vtiger are Copyright (C) vtiger.
 * All Rights Reserved.
 *************************************************************************************/

class Emails_DownloadFile_Action extends Vtiger_Action_Controller {

	public function requiresPermission(\Vtiger_Request $request) {
		$permissions = parent::requiresPermission($request);
		$permissions[] = array('module_parameter' => 'module', 'action' => 'DetailView');
		return $permissions;
	}
	
	public function checkPermission(Vtiger_Request $request) {
		return parent::checkPermission($request);
	}

	public function process(Vtiger_Request $request) {
        $db = PearDatabase::getInstance();

        $attachmentId = $request->get('attachment_id');
        $name = $request->get('name');
        $query = "SELECT * FROM vtiger_attachments WHERE attachmentsid = ? AND name = ?" ;
        $result = $db->pquery($query, array($attachmentId, $name));

        if($db->num_rows($result) == 1)
        {
            $row = $db->fetchByAssoc($result, 0);
            $fileType = $row["type"];
            $name = $row["name"];
            $filepath = $row["path"];
            $name = decode_html($name);
            $storedFileName = $row['storedname'];
            if (!empty($name)) {
                if(!empty($storedFileName)){
                    $saved_filename = $attachmentId."_". $storedFileName;
                }else if(is_null($storedFileName)){
                    $saved_filename = $attachmentId."_". $name;
                }
                $disk_file_size = filesize($filepath.$saved_filename);
                $filesize = $disk_file_size + ($disk_file_size % 1024);
                $fileContent = fread(fopen($filepath.$saved_filename, "r"), $filesize);

                header("Content-type: $fileType");
                header("Pragma: public");
                header("Cache-Control: private");
                header("Content-Disposition: attachment; filename=$name");
                header("Content-Description: PHP Generated Data");
                echo $fileContent;
            }
        }
    }
}

?>

Youez - 2016 - github.com/yon3zu
LinuXploit