X-Git-Url: http://git.pjr.cc/?p=quickshow.git;a=blobdiff_plain;f=show.php;fp=show.php;h=5d70a62ba215778ac8bd31599e203eb676c4db47;hp=2489d451ad452f85b0ddb67f85920cbcd6a4837b;hb=792b369efc1fd193d9abf3d642745ff0e468e971;hpb=22c496f2f1d3d9466e138d44c49d9572a23e0bd0
diff --git a/show.php b/show.php
index 2489d45..5d70a62 100644
--- a/show.php
+++ b/show.php
@@ -31,6 +31,21 @@ if(isset($_REQUEST["showpic"])) {
} else {
header("Status: 404 Not Found");
}
+} else if(isset($_REQUEST["fullpic"])) {
+ $file = $_REQUEST["fullpic"];
+ if(preg_match("/.*\/+.*/", $_REQUEST["fullpic"])) {
+ error_log("throwing 403");
+ header("Status: 403 i dont think so");
+ return;
+ }
+ $afile = "$show_dir/".$_REQUEST["fullpic"];
+ if(file_exists($afile)) {
+ echo "Fullsize picture $file
![](\"$this_url?showpic=$file\")
";
+ } else {
+ header("Status: 403 i dont think so");
+ return;
+ }
+ return;
} else if(isset($_REQUEST["medpic"])) {
$file = $_REQUEST["medpic"];
if(preg_match("/.*\/+.*/", $_REQUEST["medpic"])) {
@@ -40,11 +55,12 @@ if(isset($_REQUEST["showpic"])) {
}
$afile = "$show_dir/".$_REQUEST["medpic"];
if(file_exists($afile)) {
- echo "Picture $file
![](\"$this_url?showmedpic=$file\")
";
+ echo "Picture $file
";
} else {
header("Status: 403 i dont think so");
return;
}
+ return;
} else if(isset($_REQUEST["showmedpic"])) {
if(preg_match("/.*\/+.*/", $_REQUEST["showmedpic"])) {
error_log("throwing 403");