Changeset 208 for trunk/banners/banner.php

Timestamp:

Jun 19, 2009, 8:17:16 PM (15 years ago)

Author:

george

Message:

• Přidáno: Kontrola existence proměnné "odkud přišli" a správnosti zadání obrázku.

File:

• trunk/banners/banner.php (modified) (1 diff)

trunk/banners/banner.php

@@ -3 +3 @@
 include('../includes/global.php');
 
-header('Content-Type: image/png');
-$Referer = addslashes($_SERVER['HTTP_REFERER']);
-$Referer = substr($Referer, strpos($Referer, '/') + 2);
-$HostName = substr($Referer, 0, strpos($Referer, '/'));
-if(substr($HostName, -1) == '.') $HostName = substr($HostName, 0, -1);
-if($HostName != gethostbyname($HostName))
+if(array_key_exists('image', $_GET))
 {
-  $Referer = 'http://'.$HostName.'/';
-  $DbResult = mysql_query('SELECT * FROM `banner` WHERE `Web` = "'.$Referer.'"', $Database->id_connection);
-  if(mysql_num_rows($DbResult) > 0)
-    $Database->SQLCommand('UPDATE `banner` SET `DateLast` = NOW(), `LastURL` = "'.addslashes($_SERVER['HTTP_REFERER']).'" WHERE `Web` = "'.$Referer.'"');
-    else mysql_query('INSERT INTO `banner` (`Web`, `DateFirst`, `DateLast`, LastURL`) VALUES ("'.$Referer.'", NOW(), NOW( ), "'.addslashes($_SERVER['HTTP_REFERER']).'")', $Database->id_connection);
-}
+  if(file_exists($_GET['image']))
+  {
+    Header('Content-Type: image/png');
+    if(array_key_exists('HTTP_REFERER', $_SERVER)) $Referer = addslashes($_SERVER['HTTP_REFERER']);
+      else $Referer = '';
+    $Referer = substr($Referer, strpos($Referer, '/') + 2);
+    $HostName = substr($Referer, 0, strpos($Referer, '/'));
+    if(substr($HostName, -1) == '.') $HostName = substr($HostName, 0, -1);
+    if($HostName != gethostbyname($HostName))
+    {
+      $Referer = 'http://'.$HostName.'/';
+      $DbResult = mysql_query('SELECT * FROM `banner` WHERE `Web` = "'.$Referer.'"', $Database->id_connection);
+      if(mysql_num_rows($DbResult) > 0)
+        $Database->SQLCommand('UPDATE `banner` SET `DateLast` = NOW(), `LastURL` = "'.addslashes($_SERVER['HTTP_REFERER']).'" WHERE `Web` = "'.$Referer.'"');
+        else mysql_query('INSERT INTO `banner` (`Web`, `DateFirst`, `DateLast`, LastURL`) VALUES ("'.$Referer.'", NOW(), NOW( ), "'.addslashes($_SERVER['HTTP_REFERER']).'")', $Database->id_connection);
+    }
 
-$Image = imagecreatefromjpeg(addslashes($_GET['image']));
-imagepng($Image);
+    $Image = imagecreatefromjpeg($_GET['image']);
+    imagepng($Image);
+  } else echo('Zadaný obrázek neexistuje.');
+} else echo('Nutno zadat parameter image.');
 
 ?>