X-Git-Url: http://git.roojs.org/?p=Pman.Core;a=blobdiff_plain;f=Images.php;h=bfda2826ca553b7843eda775815488e85a9443ac;hp=68cc36273600ee5f9ed3f4a5167066203c61ccff;hb=refs%2Fheads%2Fwip_alan_T6343_generic_progress_bar_delete;hpb=c0cbd55977fb547c2c797e9c4000e31fd4ca569d diff --git a/Images.php b/Images.php index 68cc3627..bfda2826 100644 --- a/Images.php +++ b/Images.php @@ -42,7 +42,9 @@ class Pman_Core_Images extends Pman { // tables that do not need authentication checks before serving. - var $public_image_tables = array(); + var $public_image_tables = array( + 'crm_mailing_list_message' // we know these are ok... + ); var $sizes = array( '100', @@ -75,6 +77,7 @@ class Pman_Core_Images extends Pman var $as_mimetype = false; var $method = 'inline'; var $page = false; + var $is_local = false; function get($s, $opts=array()) // determin what to serve!!!! { @@ -83,6 +86,8 @@ class Pman_Core_Images extends Pman // return $this->post(); //} + $this->is_local = (!empty($_SERVER['HTTP_HOST']) && $_SERVER['HTTP_HOST'] == 'localhost') ? true : false; + $this->as_mimetype = empty($_REQUEST['as']) ? '' : $_REQUEST['as']; $this->page = empty($_REQUEST['page']) ? false : (int) $_REQUEST['page']; @@ -182,8 +187,12 @@ class Pman_Core_Images extends Pman $this->imgErr("image has been removed or deleted.",$s); } + if($this->is_local) { + return $this->serve($img); + } + if (!$this->authUser && !in_array($img->ontable,$this->public_image_tables)) { - + if ($img->ontable != 'core_company') { $this->imgErr("not-authenticated {$img->ontable}",$s); } @@ -220,6 +229,9 @@ class Pman_Core_Images extends Pman function post($v) { + if (!empty($_REQUEST['_get'])) { + return $this->get($v); + } if (!$this->authUser) { $this->jerr("image conversion only allowed by registered users"); @@ -327,6 +339,10 @@ class Pman_Core_Images extends Pman } function validateSize() { + if($this->is_local) { + return true; + } + if (($this->authUser && !empty($this->authUser->company_id) && $this->authUser->company()->comptype=='OWNER') || $_SERVER['SERVER_ADDR'] == $_SERVER['REMOTE_ADDR']) { return true;