Protected pending comics

3 files changed, 35 insertions, 2 deletions

@@ -7,5 +7,7 @@ RewriteRule header.php / [R]
 RewriteRule footer.php / [R]
 RewriteCond %{REQUEST_FILENAME} !.png
 RewriteRule images/ / [R]
+RewriteCond %{REQUEST_FILENAME} .png
+RewriteRule images/comics/(.+).png /comic.php?id=$1 [L]
 RewriteCond %{REQUEST_FILENAME} .htm
 RewriteRule (.+).htm /index.php?area=$1 [QSA,L]
@@ -0,0 +1,31 @@
+<?php
+
+include('includes/db.php');
+
+if (!isset($_GET['id']))
+{
+        header('Location: /');
+        exit;
+}
+
+$getcomic = "SELECT * FROM comics WHERE filename = \"" . $_GET['id'] . ".png\"";
+$getcomic2 = mysql_query($getcomic);
+$getcomic3 = mysql_fetch_array($getcomic2);
+
+if ($getcomic3['filename'] != ($_GET['id'] . '.png'))
+{
+        header('Location: /');
+        exit;
+}
+
+if ($getcomic3['status'] != 'publish')
+{
+        header('Location: /');
+        exit;
+}
+
+header('Content-type: image/png');
+
+readfile($_SERVER['DOCUMENT_ROOT'] . '/images/comics/' . $_GET['id'] . '.png');
+
+?>
@@ -21,8 +21,8 @@ if (isset($title))
 
 <?php
 
-include_once($_SERVER['DOCUMENT_ROOT'] . '/db.php');
-include_once($_SERVER['DOCUMENT_ROOT'] . '/functions.php');
+include_once($_SERVER['DOCUMENT_ROOT'] . '/includes/db.php');
+include_once($_SERVER['DOCUMENT_ROOT'] . '/includes/functions.php');
 
 $getlast = "SELECT * FROM config WHERE name = \"lastUpdated\"";
 $getlast2 = mysql_query($getlast);