Context Navigation

Changeset 3364351

Timestamp:

09/19/2025 06:52:00 AM (6 months ago)

Author:

wpyog

Message:

type casting of document id

File:

-                      r3364123
+                      r3364351
     if (isset($_REQUEST['document']) && !empty($_REQUEST['document'])) {
         $downloadUrl = sanitize_text_field($_REQUEST['document']);
+        $post_id = base64_decode( urldecode( $downloadUrl));
+        $post_id = intval(base64_decode( urldecode( $downloadUrl)));
+        if(empty($post_id)){
+            wp_die('invalid document id');
+        }
         $document_link = get_post_meta( $post_id, 'document_link', true );
         if (empty($document_link)){
             wp_die('file not found', 404);
+            wp_die('file not found');
+        }
 …
             header('Content-Length: ' . filesize($physical_path));
             flush(); // Flush system output buffer
+            readfile($physical_path);
+            readfile($physical_path);
+            die();
+        } else{
+            wp_die('file not found');
+        }
         die();
+    }
+    }
+}

Note: See TracChangeset for help on using the changeset viewer.