View file wapbuzz downloads script/file.php

<?php include 'header.php'; ?>
<?php ;

function format_size($size, $round = 2) {
$sizes = array('Byts', 'kb', 'mb', 'gb','TB');
$total = count($sizes)-1;
for ($i=0; $size > 1024 && $i < $total; $i++) $size /= 1024;
return round($size,$round).$sizes[$i];
}

if($_REQUEST['file'])
$file = $_REQUEST['file'];

// calling function to get file lists
if(is_file($file))
{
/*
Prem:: printing file list to screen
*/
echo "<div class='title'>" .str_replace('(wapbuzz.net)','',substr($file,strrpos($file,'/')+1))."</div>";
if(substr($file,strrpos($file,'.')+1)=='jpg' || substr($file,strrpos($file,'.')+1)=='jpeg' || substr($file,strrpos($file,'.')+1)=='png'){
echo '<div class="link">';
echo "<img src=\"image.php?w=120&amp;h=90&amp;f=$file&amp;q=70\" alt=\"-\"/><br />";
echo '</div>';
}
else{
$thumb = str_replace(substr($file,strrpos($file,'/')+1),'thumb-'.substr($file,strrpos($file,'/')+1),$file);
$thumb = substr($thumb,0,strrpos($thumb,'.')).'.jpg';
if(is_file($thumb)){
echo "<img src='$thumb' width='70' height='90' alt='-' /><br/>";
}
}

// for image
if(substr($file,strrpos($file,'.')+1)=='jpg' || substr($file,strrpos($file,'.')+1)=='jpeg' || substr($file,strrpos($file,'.')+1)=='png'){
echo ' <a href="image.php?w=128&amp;h=128&amp;f='.$file.'"> 128 x 128</a>';
echo '<br />';
echo '<a href="image.php?w=128&amp;h=160&amp;f='.$file.'"> 128 x 160</a>';
echo '<br />';
echo '<a href="image.php?w=176&amp;h=144&amp;f='.$file.'"> 176 x 144</a>';
echo '<br />';
echo '<a href="image.php?w=176&amp;h=208&amp;f='.$file.'"> 176 x 208</a>';
echo '<br />';
echo '<a href="image.php?w=208&amp;h=208&amp;f='.$file.'"> 208 x 208</a>';
echo '<br />';
echo '<a href="image.php?w=240&amp;h=320&amp;f='.$file.'"> 240 x 320</a>';
echo '<br />';
echo '<a href="image.php?w=320&amp;h=240&amp;f='.$file.'"> 320 x 240</a>';
}
echo "<div class='nav'><img src=\"img/dl.png\" alt=\"-\"/> <b><a href='".$file."'>Download</a></b> <small>(".format_size(filesize($file)).")</small></div>";
}
else
echo '<br/><h2>Error: wrong path entered.</h2><br/>';
echo '<div class="n"><img src="img/b.png" alt="-"/> <a href="index.php"> Home</a> 
<a href="index.php?dir='.substr($file,0,strrpos($file,'/')).'&amp;a='.$_REQUEST['a'].'">&#187; Back</a>
</div>';
include('footer.php');
?>