<?php
$ValidAccess = 2010;

require_once("include/globals.php");

unset($file_name);

//
// Get document record from database
//
if (array_key_exists('dnum',$_GET) && $_GET['dnum'] > 0) {
   $dnum = intval(db_escape_string($_GET['dnum']));
   if ($dnum > 0) {
      $query = "select * from documents " .
               "where school_num = $school_num " .
               "and record_num = $dnum";
      $results = db_query($query);

      if (db_num_rows($results)) {
         $row = db_fetch_array($results);
         extract($row);
         $fname = "filename=\"$file_name\"";
         $filedir = $uploaddir;
      }
      else {
         echo("<p>Document Not Found</p>\n");
         exit();
      }
   }
   else {
      echo("<p>Invalid Document</p>\n");
      exit();
   }
}


if (!isset($file_name) && array_key_exists('dn',$_GET) && strlen($_GET['dn']) > 0) {
   $file_name = db_escape_string(trim($_GET['dn']));
   $file = explode("/",$file_name);
   $file_name = $file[0];
   $fname = "filename=\"$file_name\"";
   $filedir = "docs";
}


if (isset($file_name)) {
   if (is_file("$filedir/$file_name")) {
      $file_parts = pathinfo($file_name);
      if (array_key_exists('extension', $file_parts)) {
         switch ($file_parts['extension']) {
            case 'pdf':
               header('Pragma: public');
               header('Expires: 0');
               header('Cache-Control: must-revalidate, post-check=0, pre-check=0');
               header('Cache-Control: private',false);
               header('Content-Type: application/pdf');
               header("Content-Disposition: attachment; $fname");
               header('Content-Transfer-Encoding: binary');
               readfile("$filedir/$file_name");
               break;

            case 'doc':
            case 'docx':
            case 'rtf':
               header('Pragma: public');
               header('Expires: 0');
               header('Cache-Control: must-revalidate, post-check=0, pre-check=0');
               header('Cache-Control: private',false);
               header('Content-Type: application/octet-stream');
               header("Content-Disposition: attachment; $fname");
               header('Content-Transfer-Encoding: binary');
               readfile("$filedir/$file_name");
               break;

            case 'xls':
            case 'xlsx':
               header('Pragma: public');
               header('Expires: 0');
               header('Cache-Control: must-revalidate, post-check=0, pre-check=0');
               header('Cache-Control: private',false);
               header('Content-Type: application/octet-stream');
               header("Content-Disposition: attachment; $fname");
               header('Content-Transfer-Encoding: binary');
               readfile("$filedir/$file_name");
               break;

            case 'gif':
               header('Content-Type: image/gif');
               header('Content-Length: '.filesize("$filedir/$file_name"));
               readfile("$filedir/$file_name");
               break;

            case 'jpg':
            case 'jpeg':
            case 'jpe':
               header('Content-Type: image/jpeg');
               header('Content-Length: '.filesize("$filedir/$file_name"));
               readfile("$filedir/$file_name");
               break;
         }
      }
   }
}
else {
   if (!isset($file_name)) $file_name = 'unknown';
   echo("<p>Document Not Found</p>\n");
   echo("<p>$file_name</p>\n");
   exit();
}

?>