index.php | searchcode

/index.php

http://rapidleech36b.googlecode.com/
PHP | 381 lines | 296 code | 42 blank | 43 comment | 127 complexity | ed1e619434c50fe9927ad787fab46055 MD5 | raw file

<?php
/*****************************************************
 * Rapidleech 36B Rv.8
 *
 * $Id: index.php - 05apr2010-Idx $
 *****************************************************/

define('RAPIDLEECH', 'yes');

require_once "./global.php";

//PROTECTED AREA, REMOVING THIS YOU'RE DEAD MAN!
define('BUILD', '23082007');
define('CREDITS', '<a href="http://www.rapidleech.com/" style="text-decoration:none"><b>RL</b></a>&nbsp;<b class="footer1">PlugMod rev. ' . $rev_num . '</b> <span class="footer2">' . $dev_name . '</span><br /><small class="footer2">Credits to Pramode &amp; Checkmate &amp; Kloon. Mod by: MsNeil &amp; Idoenk<br />In memoriam our beloving brother, husband and father, Ruud v.Tony(15/03/1978 - 21/07/2009)</small>');
define('VERSION', '<small class="footer3"><span>[ olc | ccpb | kaskus ]</span><br />[ Shout: Viant77, Jujuan, Huka, Limpy ]</small>');
//END OF PROTECTED AREA
//************************
// MAIN ...
//************************

$_REQUEST['premium_acc'] = $_POST['premium_acc'] = isset($_REQUEST['premium_acc']) && $_REQUEST['premium_acc'] == 'on' ? 'on' : false;
foreach ($_POST as $key => $value) {
	$_GET[$key] = $value;
}

if (!$_COOKIE) {
	if (strstr($_SERVER["HTTP_COOKIE"], ";")) {
		foreach (explode("; ", $_SERVER["HTTP_COOKIE"]) as $key => $value) {
			list($var, $val) = explode("=", $value);
			$_COOKIE[$var] = $val;
		}
	} else if (!empty($_SERVER ["HTTP_COOKIE"])) {
		list ($var, $val) = @explode("=", $_SERVER ["HTTP_COOKIE"]);
		$_COOKIE [$var] = $val;
	}
}

require_once(CLASS_DIR . "cookie.php");

if (!@file_exists(HOST_DIR . "download/hosts.php")) {
	create_hosts_file(HOST_DIR . "download/hosts.php");
}

require_once (HOST_DIR . "download/hosts.php");

if (!empty($_GET["image"])) {
	require_once(CLASS_DIR . "http.php");
	require_once(CLASS_DIR . "image.php");
	exit();
}

if (isset($_GET["useproxy"]) && (!$_GET["proxy"] || !strstr($_GET["proxy"], ":"))) {
	html_error($L->say['wrong_proxy']);
} else {
	if (!empty($_GET["pauth"])) {
		$pauth = $_GET["pauth"];
	} else {
		$pauth = (!empty($_GET ["proxyuser"]) && !empty($_GET ["proxypass"])) ? base64_encode($_GET ["proxyuser"] . ":" . $_GET ["proxypass"]) : "";
	}
}

if (empty($_GET ["path"]) || $options['download_dir_is_changeable'] == false) {
	if (empty($_GET ["host"])) {
		$_GET["path"] = (substr($options["download_dir"], 0, 6) != "ftp://") ? realpath(DOWNLOAD_DIR) : $options["download_dir"];
	} else {
		$_GET["saveto"] = (substr($options["download_dir"], 0, 6) != "ftp://") ? realpath(DOWNLOAD_DIR) : $options["download_dir"];
	}
}

if (empty($_GET ["filename"]) || empty($_GET ["host"]) || empty($_GET ["path"])) {
	if (!isset($_POST["link"])) {
		if (isset($_GET["idx"])) {
			// link was sent from audl
			$LINK = (isset($_GET["link"]) ? utf8_strrev(base64_decode($_GET["link"])) : "");
		} else {
			$LINK = (isset($_GET["link"]) ? $_GET["link"] : "");
		}
	} else {
		$LINK = $_POST["link"];
	}

	// urldecode, trim, strip * in link
	$LINK = urlcleaner(trim(urldecode($LINK)));

	if (!$LINK) {

		_create_list();

		require_once(CLASS_DIR . "main.php");
		exit();
	} elseif ($limitation_alert === true) {
		html_error('Limitation alerted, can not use RL! ' . $msg, 1);
	}

	check_referer();
	// Detect if it doesn't have a protocol assigned
	if (substr($LINK, 0, 7) != "http://" && substr($LINK, 0, 6) != "ftp://" && substr($LINK, 0, 6) != "ssl://" && substr($LINK, 0, 8) != "https://" && !stristr($LINK, '://')) {
		// Automatically assign http://
		$LINK = "http://" . $LINK;
	}

	if (!empty($_GET["saveto"]) && !$_GET["path"]) {
		html_error($L->say['path_not_defined']);
	}

	if (empty($_GET["useproxy"])) {
		$_GET["proxy"] = "";
	}

	if (!empty($_GET["domail"]) && !checkmail($_GET["email"])) {
		html_error($L->say['didnt_enter_mail']);
		if (!empty($_GET ["split"]) && !is_numeric($_GET ["partSize"])) {
			html_error($L->say['size_not_true']);
		}
	}

	$Url = parse_url($LINK);
	$Url['path'] = str_replace('%2F', '/', rawurlencode(urldecode($Url['path'])));
	$LINK = rebuild_url($Url);
	if (empty($_GET ["referer"])) {
		$Referer = $Url;
		// Remove login from Referer
		unset($Referer['user'], $Referer['pass']);
		$Referer = rebuild_url($Referer);
	} else {
		$Referer = trim(urldecode($_GET ["referer"]));
	}

	if ($Url['scheme'] != 'http' && $Url['scheme'] != 'https' && $Url['scheme'] != 'ftp') {
		$LINK = urlcleaner(utf8_strrev(base64_decode($LINK)));
		$Url = parse_url($LINK);
		if ($Url['scheme'] != 'http' && $Url['scheme'] != 'https' && $Url['scheme'] != 'ftp') {
			html_error($L->say['url_unknown']);
		}
	}

	if (empty($Url['user']) xor empty($Url['pass'])) {
		unset($Url['user'], $Url['pass']);
		$LINK = rebuild_url($Url);
	}

	if (isset($_GET['user_pass']) && $_GET['user_pass'] == "on" && !empty($_GET['iuser']) && !empty($_GET['ipass'])) {
		$Url['user'] = $_GET['iuser'];
		$Url['pass'] = $_GET['ipass'];
		// Rebuild url
		$LINK = rebuild_url($Url);
	}
	// If Url has user & pass, use them as premium login for plugins and set $auth for direct download.
	if (!empty($Url['user']) && !empty($Url['pass'])) {
		if (!$_REQUEST['premium_acc']) $_GET['premium_acc'] = $_POST['premium_acc'] = $_REQUEST['premium_acc'] = 'on';
		$_GET['premium_user'] = $_POST['premium_user'] = $_REQUEST['premium_user'] = $Url['user'];
		$_GET['premium_pass'] = $_POST['premium_pass'] = $_REQUEST['premium_pass'] = $Url['pass'];
		$auth = "&auth=" . urlencode(encrypt(base64_encode(rawurlencode($Url ["user"]) . ":" . rawurlencode($Url ["pass"]))));
		// We have premium_acc and $auth setted, delete User and Pass from link.
		unset($Url['user'], $Url['pass']);
		$LINK = rebuild_url($Url);
	} else {
		$auth = "";
	}
	$litehead = 1;
	if (!isset($_GET['dis_plug']) || $_GET ['dis_plug'] != "on") {
		//check Domain-Host
		if (isset($_GET["vBulletin_plug"])) {
			$page_title = $L->say['downloading'];
			include(TEMPLATE_DIR . 'header.php');
			require_once(CLASS_DIR . "http.php");
			require_once(HOST_DIR . "download/vBulletin_plug.php");
			exit();
		} else {
			foreach ($host as $site => $file) {
				if (preg_match("/^(.+\.)?" . str_replace('.', '\.', $site) . "$/i", $Url ["host"])) {
					$page_title = $L->say['prep_dl'] . " " . $LINK;
					$shortcut_icon = ROOT_URL . IMAGE_DIR . "rsload_2.gif";
					include(TEMPLATE_DIR . 'header.php');
					require_once(CLASS_DIR . "http.php");
					require_once (HOST_DIR . "DownloadClass.php");
					require_once(HOST_DIR . 'download/' . $file);
					$class = substr($file, 0, -4);
					$firstchar = substr($file, 0, 1);
					if ($firstchar > 0) {
						$class = "d" . $class;
					}
					if (class_exists($class)) {
						$hostClass = new $class();
						$hostClass->Download($LINK);
					}
					exit();
				}
			}
		}
	}

	$page_title = $L->say['leeching'];
	$shortcut_icon = ROOT_URL . IMAGE_DIR . "rsload_2.gif";
	include(TEMPLATE_DIR . 'header.php');

	$Url = parse_url($LINK);
	$FileName = isset($Url ["path"]) ? basename($Url ["path"]) : '';
	$mydomain = $_SERVER['SERVER_NAME'];
	$myip = $_SERVER['SERVER_ADDR'];
	if ($options['bw_save'] && preg_match("/($mydomain|$myip)/i", $Url["host"])) {
		html_error($L->sprintf($L->say['leech_not_allowed'], $mydomain, $myip));
	}
	if (isset($_GET ['cookieuse'])) {
		if (strlen($_GET ['cookie'] > 0)) {
			$_GET ['cookie'] .= ';' . $_POST ['cookie'];
		} else {
			$_GET ['cookie'] = $_POST ['cookie'];
		}
	}
	insert_location("$PHP_SELF?filename=" . urlencode($FileName) . "&host=" . $Url ["host"] . "&port=" . (isset($Url ["port"]) ? $Url ["port"] : '') . "&path=" . (!empty($Url ["path"]) ? urlencode($Url ["path"]) : '') . (!empty($Url ["query"]) ? urlencode("?" . $Url ["query"]) : "") . "&referer=" . urlencode($Referer) . "&email=" . (!empty($_GET ["domail"]) ? $_GET ["email"] : "") . "&partSize=" . (!empty($_GET ["split"]) ? $_GET ["partSize"] : "") . "&method=" . (!empty($_GET ["method"]) ? $_GET ["method"] : '') . (!empty($_GET ["proxy"]) ? "&useproxy=on&proxy=" . $_GET ["proxy"] : "") . "&saveto=" . $_GET ["path"] . "&link=" . urlencode($LINK) . (isset($_GET ["add_comment"]) && $_GET ["add_comment"] == "on" && !empty($_GET ["comment"]) ? "&comment=" . urlencode($_GET ["comment"]) : "") . $auth . ($pauth ? "&pauth=$pauth" : "") . (isset($_GET["idx"]) ? "&idx=" . $_GET["idx"] : "") . "&cookie=" . (!empty($_GET ["cookie"]) ? urlencode(encrypt($_GET ['cookie'])) : '' . "&dis_plug=on"));
} else {
	$page_title = 'nYedoTz...';
	$shortcut_icon = ROOT_URL . IMAGE_DIR . "rsload_2.gif";
	$litehead = 1;
	include(TEMPLATE_DIR . 'header.php');
	check_referer();
	echo('<div align="center">');

	/* Deprecated of useless and unworth feature for some cases might fail this status.
	  if ($options['MaxServerJob'] > 0) {
	  if ($options['MaxServerJob'] <= ongoingGet()) {
	  html_error($L->sprintf($L->say['maxjob_limited'], $options['MaxServerJob']));
	  }
	  } */

	if ($options["limitbyip"]) {
		if ($ada_acc) {
			$trheute = $heute + 1;
			if ($trheute > $options['maximum_free_downloads']) {
				html_error($msgNya);
			}
		}
	}

	/* Deprecated of useless and unworth feature for some cases might fail this status.
	  ongoingAdd(); */

	do {
		$_GET ["filename"] = urldecode(trim($_GET ["filename"]));
		if (strstr($_GET ["filename"], '?') !== false) list ($_GET ["filename"], $tmp) = explode('?', $_GET ["filename"], 2);
		$_GET["saveto"] = urldecode(trim($_GET["saveto"]));
		$_GET["host"] = urldecode(trim($_GET["host"]));
		$_GET["path"] = urldecode(trim($_GET["path"]));
		$_GET ["port"] = !empty($_GET ["port"]) ? urldecode(trim($_GET ["port"])) : 80;
		$_GET ["referer"] = !empty($_GET ["referer"]) ? urldecode(trim($_GET ["referer"])) : 0;
		$_GET["link"] = urldecode(trim($_GET["link"]));
		$_GET ["post"] = !empty($_GET ["post"]) ? unserialize(stripslashes(urldecode(trim($_GET ["post"])))) : 0;
		$_GET ["cookie"] = !empty($_GET ["cookie"]) ? decrypt(urldecode(trim($_GET["cookie"]))) : "";
		$_GET ["proxy"] = !empty($_GET ["proxy"]) ? $_GET ["proxy"] : "";
		$redirectto = "";

		$pauth = !empty($_GET ["pauth"]) ? urldecode(trim($_GET ["pauth"])) : '';
		$_GET['auth'] = isset($_GET['auth']) ? trim($_GET['auth']) : '';
		if ($_GET['auth'] == "1") {
			if (!preg_match("|^(?:.+\.)?(.+\..+)$|i", $_GET ["host"], $hostmatch)) html_error('No valid hostname found for authorisation!');
			$hostmatch = str_replace('.', '_', $hostmatch[1]);
			if ($premium_acc ["$hostmatch"] && $premium_acc ["$hostmatch"] ["user"] && $premium_acc ["$hostmatch"] ["pass"]) {
				$auth = base64_encode($premium_acc ["$hostmatch"] ["user"] . ":" . $premium_acc ["$hostmatch"] ["pass"]);
			} else {
				html_error('No useable premium account found for this download - please set one in accounts.php');
			}
		} elseif (!empty($_GET['auth'])) {
			$auth = decrypt(urldecode($_GET['auth']));
			$AUTH ["use"] = true;
			$AUTH ["str"] = $auth;
		} else {
			$auth = $AUTH = false;
		}
		$pathWithName = $_GET["saveto"] . PATH_SPLITTER . $_GET["filename"];
		while (stristr($pathWithName, "\\\\")) {
			$pathWithName = str_replace("\\\\", "\\", $pathWithName);
		}

		if (strstr($pathWithName, '?') !== false) list ($pathWithName, $tmp) = explode('?', $pathWithName, 2);

		$ftp = parse_url($_GET["link"]);
		if ($ftp ["scheme"] == "ftp" && !$_GET ["proxy"]) {
			$AUTH ["ftp"] = array("login" => !empty($ftp ["user"]) ? $ftp ["user"] : "anonymous", "password" => !empty($ftp ["pass"]) ? $ftp ["pass"] : "anonymous@leechget.com");
			require_once (CLASS_DIR . "ftp.php");
			$file = getftpurl($_GET ["host"], !empty($ftp ["port"]) ? $ftp ["port"] : 21, $_GET ["path"], $pathWithName);
		} else {
			require_once (CLASS_DIR . "http.php");
			!empty($_GET ["force_name"]) ? $force_name = urldecode($_GET ["force_name"]) : '';
			$file = geturl($_GET ["host"], $_GET ["port"], $_GET ["path"], $_GET ["referer"], $_GET ["cookie"], $_GET ["post"], $pathWithName, $_GET ["proxy"], $pauth, $auth, $ftp ["scheme"]);
		}
		if ($options['redir'] && $lastError && stristr($lastError, $L->say['_error'] . " " . $L->say['_redirect_to'] . " [")) {
			$redirectto = trim(cut_str($lastError, $L->say['_error'] . " " . $L->say['_redirect_to'] . " [", "]"));
			print $L->say['_redirecting_to'] . " <b>$redirectto</b> ... <br />$nn";
			$_GET ["referer"] = $_GET ["link"];
			$_GET["link"] = $redirectto;
			$purl = parse_url($redirectto);
			if (strstr(basename($redirectto), '?') !== false) list ($_GET ["filename"], $tmp) = explode('?', basename($redirectto));
			else $_GET ["filename"] = basename($redirectto);
			// In case the redirect didn't include the host
			$_GET ["host"] = ($purl ["host"]) ? $purl ["host"] : $_GET ["host"];
			$_GET ["path"] = $purl ["path"] . ($purl ["query"] ? "?" . $purl ["query"] : "");
			$_GET ['port'] = $purl ['port'] ? $purl ['port'] : 80;
			$_GET ['cookie'] = !empty($_GET ["cookie"]) ? urlencode(encrypt($_GET["cookie"])) : "";
			$lastError = "";
		}
	} while ($redirectto && !$lastError);

	/* Deprecated of useless and unworth feature for some cases might fail this status.
	  ongoingRemove(); */

	if ($lastError) {
		html_error($lastError, 0);
	} elseif ($file["bytesReceived"] == $file["bytesTotal"] || $file["size"] == "Unknown") {
		list($final_link, $current_time) = link_for_file(dirname($pathWithName) . "/" . basename($file["file"]), false, true);

		echo "<script type=\"text/javascript\">pr(100, '" . $file["size"] . "', '" . $file["speed"] . "')</script>";
		echo $L->sprintf($L->say['_filesaved'], $final_link, $file ["size"], $file ["time"], $file ["speed"]);

		$file["date"] = getNowzone($current_time);

		$tosave = array("name" => $file["file"], "size" => str_replace(" ", "&nbsp;", $file["size"]), "date" => $file["date"], "age" => $L->say['less_a_minute'], "link" => $_GET["link"], "comment" => str_replace("\n", "\\n", str_replace("\r", "\\r", $_GET["comment"])), "ip" => $ipmu);
		//print_r($tosave);
		$result = write_file(FILES_LST, serialize($tosave) . "\r\n", 0);
		$result2 = write_file(IP_L33CH_L0G, serialize(array("name" => $file["file"], "date" => $file["date"], "ip" => $ipmu)) . "\r\n", 0);

		if (!$result || !$result2) {
			echo $L->say['error_upd_list'] . "<br />";
		}

		if ($options["limitbytraffic"]) {
			if ($options["max_trafic"] > 0) {
				if (!is_numeric($traffic->total)) $traffic->total = 0;
				$traffic->total += $file["bytesReceived"];
				$traffic->updTraffic();
			}
		}

		if (!empty($_GET ["email"])) {
			require_once(CLASS_DIR . "mail.php");
			$_GET ["partSize"] = (isset($_GET ["partSize"]) && is_numeric($_GET ["partSize"]) ? $_GET ["partSize"] * 1024 * 1024 : false);
			if (xmail($fromaddr, $_GET ["email"], "File " . basename($file ["file"]), "File: " . basename($file ["file"]) . "\r\n" . "Link: " . $_GET ["link"] . (!empty($_GET ["comment"]) ? "\r\n" . "Comments: " . str_replace("\\r\\n", "\r\n", $_GET ["comment"]) : ""), $pathWithName, $_GET ["partSize"], ($_GET ["partSize"] && !empty($_GET ["method"]) ? $_GET ["method"] : ''))) {
				print $L->sprintf($L->say['mail_file_sent'], $_GET['email'], basename($file['file']));
			} else {
				print "<div class='acthistory_result'>" . $L->say['mail_error_send'] . "</div>";
			}
		}

		if ($options['new_window']) {
			print '<br /><a href="javascript:window.close();">' . $L->say['closewin'] . '</a>';
		} else {
			/* 			if ($options['pointboost'] > 0 && empty($_GET["idx"])) {
			  // i'd rather not delete current downloaded file
			  if(!defined("DOWNLOADED_FILE")){define('DOWNLOADED_FILE', DOWNLOAD_DIR.basename($file["file"]));}
			  @write_file(DOWNLOADED_FILE, " ");
			  if($numidx < $options["pointboost"]-1)
			  {
			  // generate reload form (link, secondcounterdown, auth, indexnumber)
			  echo genReload($_GET["link"], 3, $auth, $numidx);
			  }
			  } */
			$rnd = rand(11, 99);
			// generate delete link
			echo $L->sprintf($L->say['_del_link'], 'del.php?d=' . str_replace("=", "", rotN(base64_encode($file["date"] . ':' . '4puZ'), $rnd)) . "-" . $rnd, date("M-d, Y - H:i:s", $file["date"]));
			print "<br /><a id='tdone' href=\"" . $PHP_SELF . "\">[&nbsp;<b><span id='txtdone'>" . $L->say['back_main'] . "&nbsp;]</b></span></a><br />";
		}
	} else {
		@unlink($pathWithName);
		print $L->say['con_lost'] . "<br /><a href=\"javascript:location.reload();\">" . $L->say['_reload'] . "</a>";
		print '<script type="text/javascript">setTimeout("location.reload()",1000);</script>';
	}
	//check whether this index called from audl.php
	$audlparam = (isset($_GET["idx"])) ? $_GET["idx"] : '';
	if ($audlparam != '') {
		$audlparam = explode('|', $audlparam);
		$audlparam[0] = ($audlparam[0] != '' ? true : false);
		if ($audlparam[1] == '') {
			$audlparam[1] = 'none';
		}
		echo autoNext($audlparam[0], true, $audlparam[1]);
	}
	echo('</div>');
	echo('</body>');
	echo('</html>');
}
?>