togethere.cloud/private_html/api/admin_task_file.php

57 lines
1.7 KiB
PHP

<?php
declare(strict_types=1);
require_once __DIR__ . '/admin_bootstrap.php';
$pdo = admin_get_pdo();
admin_require_auth($pdo);
$fileId = isset($_GET['file_id']) ? (int)$_GET['file_id'] : 0;
$id = isset($_GET['id']) ? (int)$_GET['id'] : 0;
if ($fileId <= 0 && $id <= 0) {
http_response_code(400);
header('Content-Type: text/plain; charset=utf-8');
echo 'Nieprawidłowe ID pliku';
exit;
}
try {
$row = null;
if ($fileId > 0) {
$stmt = $pdo->prepare('SELECT file_name, file_mime, file_size, file_data FROM admin_task_files WHERE id = :id LIMIT 1');
$stmt->execute([':id' => $fileId]);
$row = $stmt->fetch(PDO::FETCH_ASSOC);
} else {
$stmt = $pdo->prepare('SELECT file_name, file_mime, file_size, file_data FROM admin_tasks WHERE id = :id LIMIT 1');
$stmt->execute([':id' => $id]);
$row = $stmt->fetch(PDO::FETCH_ASSOC);
}
if (!$row || empty($row['file_data'])) {
http_response_code(404);
header('Content-Type: text/plain; charset=utf-8');
echo 'Brak pliku';
exit;
}
$name = (string)($row['file_name'] ?? 'plik');
$mime = (string)($row['file_mime'] ?? 'application/octet-stream');
header('Content-Type: ' . $mime);
header('Content-Disposition: attachment; filename="' . str_replace('"', '', $name) . '"');
if (!empty($row['file_size'])) {
header('Content-Length: ' . (string)$row['file_size']);
}
// PDO może zwrócić BLOB jako string
echo $row['file_data'];
exit;
} catch (Throwable $e) {
http_response_code(500);
header('Content-Type: text/plain; charset=utf-8');
echo 'Błąd pobierania pliku';
exit;
}