summaryrefslogtreecommitdiff
path: root/includes/ShowUserPicture.php
diff options
context:
space:
mode:
authorichdasich <ichdasich@29ba0400-6e00-0410-a75a-ca02368028f8>2008-09-10 03:42:44 +0000
committerichdasich <ichdasich@29ba0400-6e00-0410-a75a-ca02368028f8>2008-09-10 03:42:44 +0000
commitb00d5b96c6d33572b6d7c68688d6d1c4fbd0f0f4 (patch)
treecf02da8b2839bea3b6a966b575f2ba84966676bb /includes/ShowUserPicture.php
parent34aff10f383fe963cd3f8fd7f096321302e1efb6 (diff)
moved /inc to ../includes
git-svn-id: svn://svn.cccv.de/engel-system@281 29ba0400-6e00-0410-a75a-ca02368028f8
Diffstat (limited to 'includes/ShowUserPicture.php')
-rw-r--r--includes/ShowUserPicture.php58
1 files changed, 58 insertions, 0 deletions
diff --git a/includes/ShowUserPicture.php b/includes/ShowUserPicture.php
new file mode 100644
index 00000000..8e058127
--- /dev/null
+++ b/includes/ShowUserPicture.php
@@ -0,0 +1,58 @@
+<?PHP
+
+include ("./inc/config.php");
+include ("./inc/error_handler.php");
+include ("./inc/config_db.php");
+if( !isset($_SESSION)) session_start();
+include ("./inc/secure.php");
+
+
+// Parameter check
+if( !isset($_GET["UID"]) )
+ $_GET["UID"]= "-1";
+
+$SQL= "SELECT * FROM `UserPicture` WHERE `UID`='". $_GET["UID"]. "'";
+$res = mysql_query( $SQL, $con);
+
+if( mysql_num_rows($res) == 1)
+{
+ //genügend rechte
+ if( !isset($_SESSION['UID']) || $_SESSION['UID'] == -1)
+ {
+ header( "HTTP/1.0 403 Forbidden");
+ die( "403 Forbidden");
+ }
+
+ // ist das bild sichtbar?
+ if( (mysql_result($res, 0, "show")=="N") AND
+ ($_SESSION['UID']!=$_GET["UID"]) AND
+ ($_SESSION['CVS'][ "admin/UserPicture.php" ] == "N"))
+ {
+ $SQL= "SELECT * FROM `UserPicture` WHERE `UID`='-1'";
+ $res = mysql_query( $SQL, $con);
+ if( mysql_num_rows($res) != 1)
+ {
+ header( 'HTTP/1.0 404 Not Found');
+ die( "404 Not Found");
+ }
+ }
+
+ /// bild aus db auslesen
+ $bild = mysql_result($res, 0, "Bild");
+
+ // ausgabe bild
+ header( "Accept-Ranges: bytes");
+ header( "Content-Length: ". strlen($bild));
+ header( "Content-type: ". mysql_result($res, 0, "ContentType"));
+ header( "Cache-control: public");
+ header( "Cache-request-directive: min-fresh = 120");
+ header( "Cache-request-directive: max-age = 360");
+ echo $bild;
+}
+else
+{
+ header( 'HTTP/1.0 404 Not Found');
+ die( "404 Not Found");
+}
+
+?>