View file file.php

<?php
require_once("includes/connect.php");
include('includes/lang.php');
require_once("includes/lib/mp3.php");
require_once("includes/lib/pclzip.lib.php");
require_once("includes/mime.php");

$queryFile = mysql_query("select * from files where id = '$id'");
if(mysql_num_rows($queryFile)>0){
$info = mysql_fetch_assoc($queryFile);
$catid = $info['catid'];
$queryCat = mysql_query("select * from file_cat where id = '$catid'");
if(mysql_num_rows($queryCat)>0){
$catinfo = mysql_fetch_assoc($queryCat);
$catname = $catinfo['name'];
}
// Removing File extentions
$Filetag = fileExt($info['name']);
$name = $info['name'];
$name = str_replace(".$Filetag","",$name);
// Passworded Files
if(isset($_POST['pas']) && $_POST['pa'] == $info['password']){
$_SESSION['pass'.$info['id']] = TRUE;
header('location:'.$url.'/load/file/'.$id.'/'.hdm_converturl($name).'.html');
}

// File Report
if(isset($_GET['report'])){
mysql_query("UPDATE files SET report = report+1 WHERE id = '$id'");
$_SESSION['rp'.$info['id']] = TRUE;
header('location: '.$url.'/load/file/'.$id.'/'.hdm_converturl($name).'.html');
}

$title = $lang["download"].'&gt'.$info['name'];
include "includes/header.php";
mysql_query("UPDATE files SET views = views+1 WHERE id = '$id'");
echo '<div class="title"><img src="'.$url.'/images/dload.png" alt="*"> '.$lang["download-file"].'</div>';
if($info['password']==''|| $_SESSION['pass'.$info['id']] == TRUE || $rights>1){
if(!isset($_SESSION['download'.$info['id']])){ $_SESSION['download'.$info['id']] = md5($time); }
if(imgExt(getExt($info['name']))) { 
echo '<center>
<span class="img">
<img src="'.$url.'/thumb.php?src='.$url.'/data/user'.$info['userid'].'/'.$info['name'].'&amp;w=150&amp;h=150&amp;q=50" class="img" />
</center></span>'; }
echo '
<div class="list"><b>'.$lang["file"].'</b>: <a href="'.$url.'/load/file/'.$id.'/'.hdm_converturl($name).'.html">'.$info['name'].'</a></div>
<div class="list"><b>'.$lang["size"].'</b>: '.size($info['size']).'</div>
<div class="list"><b>'.$lang["type"].'</b>: '.$mime[fileExt($info['name'])].'</div>
<div class="list"><b>'.$lang["category"].'</b>: <a href="'.$url.'/loads/'.$info['catid'].'/'.hdm_converturl($catname).'.html">'.$catname.'</a></div>';

// Mp3 file Tag
$type = fileExt($info['name']);
if($type == "mp3") {
$id3 = new MP3_Id();
$result = $id3->read("data/user$info[userid]/$info[name]");
$result = $id3->study();
if(!empty($id3->artists))
echo '<div class="list"><b>'.$lang["artist"].'</b>: ' . $id3->artists . '</div>';
if(!empty($id3->album))
echo '<div class="list"><b>'.$lang["album"].'</b>: ' . $id3->album . '</div>';
if(!empty($id3->year))
echo '<div class="list"><b>'.$lang["year"].'</b>: ' . $id3->year . '</div>';
if(!empty($id3->name))
echo '<div class="list"><b>'.$lang["title"].'</b>: ' . $id3->name . '</div>';
if ($id3->getTag('bitrate')) {
echo '<div class="list"><b>'.$lang["bitrate"].'</b>: ' . $id3->getTag('bitrate') . ' kb/s</div>' .
'<div class="list"><b>'.$lang["duration"].'</b>: ' . $id3->getTag('length') . '</div>';
}
}
echo '<div class="list"><b>'.$lang["description"].'</b>: '.$info['description'].'</div>
<div class="list"><b>'.$lang["uploaded"].'</b>: '.gmdate('d/m/Y, g:i',$info['time']+3600*($timezone)).'</div>
<div class="list"><b>'.$lang["uploader"].'</b>: <a href="'.$url.'/user.php?id='.$info['userid'].'">'.username($info['userid']).'</a></div>
<div class="list"><b>'.$lang["downloaded"].'</b>: '.$info['downloaded'].'&nbsp;'.$lang["times"].'</div>
<div class="list"><b>'.$lang["viewed"].'</b>: '.$info['views'].'&nbsp;'.$lang["times"].'</div>
<br/><center><a href="'.$url.'/download/'.$info['id'].'/'.$info['userid'].'/'.$_SESSION['download'.$info['id']].'/'.hdm_fileurl($info['name']).'">
<image src="'.$url.'/images/download.png"/></a></center></form>';

//Share file
echo '<div class="title"><img src="'.$url.'/images/share.png" alt="*"> '.$lang["share-file"].'</div>';
echo '<div class="list">';
echo $lang["link"].': <input
type="text" value="'.$url.'/load/file/'.$id.'/'.hdm_converturl($name).'.html"/>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;';
include "share.php";
echo '</div>';

//Facebook comments
echo '<div class="title"><b><img src="'.$url.'/images/comment.png" alt="*"> '.$lang["comments"].'</b></div>';
echo '<div class="list" data-href="'.$url.'/load/file/'.$id.'/'.hdm_converturl($name).'.html" data-width="550" data-numposts="5" data-colorscheme="light"></div>';

echo '<div class="title"><img src="'.$url.'/images/report.png" alt="*"> '.$lang["report"].'</div>
<div class="list">'.(isset($_SESSION['rp'.$id]) ? '<font color="red">'.$lang["report-ok"].'</font>' : '  <a href="'.$url.'/file.php?id='.$id.'&report">'.$lang["report-file"].'</a>').'</div>';

//If admin, bypass passworded file
if($rights==2){
echo '<div class="title"><img src="'.$url.'/images/syspan.png" alt="*"> '.$lang["manage-file"].'</div>
<div class="list">
<a href="'.$url.'/admin/?file&edit='.$info['id'].'">'.$lang["edit"].'</a> | <a href="'.$url.'/admin/?file&move='.$info['id'].'">'.$lang["move"].'</a> | <a href="'.$url.'/admin/?file&del='.$info['id'].'" style="color:red">'.$lang["delete"].'</a></div>';
} }
//If user or visitor when file is passworded
else {
echo '<div class="title"><img src="'.$url.'/images/lock.png" alt="*"> '.$lang["locked"].'</div>
<div class="list">'.$lang["locked-enter-pass"].':<br/>
<form method="post" />
<input type="password" name="pa" size="15" class="pass"/><br/>
<input type="submit" name="pas" value="'.$lang["btn-unlock"].'"/></form></div>';
} }
//If file doesn't exist
else {
$title = $lang["notfound"];
include "includes/header.php";
echo '<div class="title"><img src="'.$url.'/images/cross.png" alt="*"> '.$lang["notfound"].'</div><div class="news">'.$lang["notfound-msg"].'<br>
<a href="category.php">'.$lang["back"].'</a></div>'; } 
mysql_free_result($queryFile);
include "includes/footer.php";
?>