1 files changed, 31 insertions, 0 deletions

@@ -0,0 +1,31 @@
+<?php
+
+include('includes/db.php');
+
+if (!isset($_GET['id']))
+{
+        header('Location: /');
+        exit;
+}
+
+$getcomic = "SELECT * FROM comics WHERE filename = \"" . $_GET['id'] . ".png\"";
+$getcomic2 = mysql_query($getcomic);
+$getcomic3 = mysql_fetch_array($getcomic2);
+
+if ($getcomic3['filename'] != ($_GET['id'] . '.png'))
+{
+        header('Location: /');
+        exit;
+}
+
+if ($getcomic3['status'] != 'publish')
+{
+        header('Location: /');
+        exit;
+}
+
+header('Content-type: image/png');
+
+readfile($_SERVER['DOCUMENT_ROOT'] . '/images/comics/' . $_GET['id'] . '.png');
+
+?>