argc != 2) { throw new \Friendica\Network\HTTPException\BadRequestException(); } // @TODO: Replace with parameter from router $item_id = intval($a->argv[1]); // Check for existence $item = MAttach::exists(['id' => $item_id]); if ($item === false) { throw new \Friendica\Network\HTTPException\NotFoundException(L10n::t('Item was not found.')); } // Now we'll fetch the item, if we have enough permisson $item = MAttach::getByIdWithPermission($item_id); if ($item === false) { throw new \Friendica\Network\HTTPException\ForbiddenException(L10n::t('Permission denied.')); } $data = MAttach::getData($item); if (is_null($data)) { Logger::log('NULL data for attachment with id ' . $item['id']); throw new \Friendica\Network\HTTPException\NotFoundException(L10n::t('Item was not found.')); } // Use quotes around the filename to prevent a "multiple Content-Disposition" // error in Chrome for filenames with commas in them header('Content-type: ' . $item['filetype']); header('Content-length: ' . $item['filesize']); if (isset($_GET['attachment']) && $_GET['attachment'] === '0') { header('Content-disposition: filename="' . $item['filename'] . '"'); } else { header('Content-disposition: attachment; filename="' . $item['filename'] . '"'); } echo $data; exit(); // NOTREACHED } }