309 lines
10 KiB
PHP
309 lines
10 KiB
PHP
<?php
|
|
/**
|
|
* Download handler
|
|
*
|
|
* Handle digital downloads.
|
|
*
|
|
* @class WC_Download_Handler
|
|
* @version 2.1.0
|
|
* @package WooCommerce/Classes
|
|
* @category Class
|
|
* @author WooThemes
|
|
*/
|
|
class WC_Download_Handler {
|
|
|
|
/**
|
|
* Constructor
|
|
*/
|
|
public function __construct() {
|
|
add_action( 'init', array( $this, 'download_product' ) );
|
|
}
|
|
|
|
/**
|
|
* Check if we need to download a file and check validity
|
|
*/
|
|
public function download_product() {
|
|
if ( isset( $_GET['download_file'] ) && isset( $_GET['order'] ) && isset( $_GET['email'] ) ) {
|
|
|
|
global $wpdb;
|
|
|
|
$product_id = (int) urldecode($_GET['download_file']);
|
|
$order_key = urldecode( $_GET['order'] );
|
|
$email = sanitize_email( str_replace( ' ', '+', urldecode( $_GET['email'] ) ) );
|
|
$download_id = isset( $_GET['key'] ) ? preg_replace( '/\s+/', ' ', urldecode( $_GET['key'] ) ) : '';
|
|
$_product = get_product( $product_id );
|
|
|
|
if ( ! is_email( $email) )
|
|
wp_die( __( 'Invalid email address.', 'woocommerce' ) . ' <a href="' . home_url() . '">' . __( 'Go to homepage →', 'woocommerce' ) . '</a>' );
|
|
|
|
$query = "
|
|
SELECT order_id,downloads_remaining,user_id,download_count,access_expires,download_id
|
|
FROM " . $wpdb->prefix . "woocommerce_downloadable_product_permissions
|
|
WHERE user_email = %s
|
|
AND order_key = %s
|
|
AND product_id = %s";
|
|
|
|
$args = array(
|
|
$email,
|
|
$order_key,
|
|
$product_id
|
|
);
|
|
|
|
if ( $download_id ) {
|
|
// backwards compatibility for existing download URLs
|
|
$query .= " AND download_id = %s";
|
|
$args[] = $download_id;
|
|
}
|
|
|
|
$download_result = $wpdb->get_row( $wpdb->prepare( $query, $args ) );
|
|
|
|
if ( ! $download_result )
|
|
wp_die( __( 'Invalid download.', 'woocommerce' ) . ' <a href="'.home_url().'">' . __( 'Go to homepage →', 'woocommerce' ) . '</a>' );
|
|
|
|
$download_id = $download_result->download_id;
|
|
$order_id = $download_result->order_id;
|
|
$downloads_remaining = $download_result->downloads_remaining;
|
|
$download_count = $download_result->download_count;
|
|
$user_id = $download_result->user_id;
|
|
$access_expires = $download_result->access_expires;
|
|
|
|
if ( $user_id && get_option( 'woocommerce_downloads_require_login' ) == 'yes' ) {
|
|
|
|
if ( ! is_user_logged_in() )
|
|
wp_die( __( 'You must be logged in to download files.', 'woocommerce' ) . ' <a href="' . wp_login_url( get_permalink( woocommerce_get_page_id( 'myaccount' ) ) ) . '">' . __( 'Login →', 'woocommerce' ) . '</a>', __( 'Log in to Download Files', 'woocommerce' ) );
|
|
|
|
elseif ( !current_user_can( 'download_file', $download_result ) )
|
|
wp_die( __( 'This is not your download link.', 'woocommerce' ) );
|
|
|
|
}
|
|
|
|
if ( ! get_post( $product_id ) )
|
|
wp_die( __( 'Product no longer exists.', 'woocommerce' ) . ' <a href="' . home_url() . '">' . __( 'Go to homepage →', 'woocommerce' ) . '</a>' );
|
|
|
|
if ( $order_id ) {
|
|
$order = new WC_Order( $order_id );
|
|
|
|
if ( ! $order->is_download_permitted() || $order->post_status != 'publish' )
|
|
wp_die( __( 'Invalid order.', 'woocommerce' ) . ' <a href="' . home_url() . '">' . __( 'Go to homepage →', 'woocommerce' ) . '</a>' );
|
|
}
|
|
|
|
if ( $downloads_remaining == '0' )
|
|
wp_die( __( 'Sorry, you have reached your download limit for this file', 'woocommerce' ) . ' <a href="'.home_url().'">' . __( 'Go to homepage →', 'woocommerce' ) . '</a>' );
|
|
|
|
if ( $access_expires > 0 && strtotime( $access_expires) < current_time( 'timestamp' ) )
|
|
wp_die( __( 'Sorry, this download has expired', 'woocommerce' ) . ' <a href="' . home_url() . '">' . __( 'Go to homepage →', 'woocommerce' ) . '</a>' );
|
|
|
|
if ( $downloads_remaining > 0 ) {
|
|
$wpdb->update( $wpdb->prefix . "woocommerce_downloadable_product_permissions", array(
|
|
'downloads_remaining' => $downloads_remaining - 1,
|
|
), array(
|
|
'user_email' => $email,
|
|
'order_key' => $order_key,
|
|
'product_id' => $product_id,
|
|
'download_id' => $download_id
|
|
), array( '%d' ), array( '%s', '%s', '%d', '%s' ) );
|
|
}
|
|
|
|
// Count the download
|
|
$wpdb->update( $wpdb->prefix . "woocommerce_downloadable_product_permissions", array(
|
|
'download_count' => $download_count + 1,
|
|
), array(
|
|
'user_email' => $email,
|
|
'order_key' => $order_key,
|
|
'product_id' => $product_id,
|
|
'download_id' => $download_id
|
|
), array( '%d' ), array( '%s', '%s', '%d', '%s' ) );
|
|
|
|
// Trigger action
|
|
do_action( 'woocommerce_download_product', $email, $order_key, $product_id, $user_id, $download_id, $order_id );
|
|
|
|
// Get the download URL and try to replace the url with a path
|
|
$file_path = $_product->get_file_download_path( $download_id );
|
|
|
|
// Download it!
|
|
$this->download( $file_path, $product_id );
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Download a file - hook into init function.
|
|
*/
|
|
public function download( $file_path, $product_id ) {
|
|
global $wpdb, $is_IE;
|
|
|
|
$file_download_method = apply_filters( 'woocommerce_file_download_method', get_option( 'woocommerce_file_download_method' ), $product_id );
|
|
|
|
if ( ! $file_path )
|
|
wp_die( __( 'No file defined', 'woocommerce' ) . ' <a href="'.home_url().'">' . __( 'Go to homepage →', 'woocommerce' ) . '</a>' );
|
|
|
|
// Redirect to the file...
|
|
if ( $file_download_method == "redirect" ) {
|
|
header( 'Location: ' . $file_path );
|
|
exit;
|
|
}
|
|
|
|
// ...or serve it
|
|
if ( ! is_multisite() ) {
|
|
|
|
/*
|
|
* Download file may be either http or https.
|
|
* site_url() depends on whether the page containing the download (ie; My Account) is served via SSL because WC
|
|
* modifies site_url() via a filter to force_ssl.
|
|
* So blindly doing a str_replace is incorrect because it will fail when schemes are mismatched. This code
|
|
* handles the various permutations.
|
|
*/
|
|
$scheme = parse_url( $file_path, PHP_URL_SCHEME );
|
|
|
|
if ( $scheme ) {
|
|
$site_url = set_url_scheme( site_url( '' ), $scheme );
|
|
} else {
|
|
$site_url = is_ssl() ? str_replace( 'https:', 'http:', site_url() ) : site_url();
|
|
}
|
|
|
|
$file_path = str_replace( trailingslashit( $site_url ), ABSPATH, $file_path );
|
|
|
|
} else {
|
|
|
|
$network_url = is_ssl() ? str_replace( 'https:', 'http:', network_admin_url() ) : network_admin_url();
|
|
$upload_dir = wp_upload_dir();
|
|
|
|
// Try to replace network url
|
|
$file_path = str_replace( trailingslashit( $network_url ), ABSPATH, $file_path );
|
|
|
|
// Now try to replace upload URL
|
|
$file_path = str_replace( $upload_dir['baseurl'], $upload_dir['basedir'], $file_path );
|
|
}
|
|
|
|
// See if its local or remote
|
|
if ( strstr( $file_path, 'http:' ) || strstr( $file_path, 'https:' ) || strstr( $file_path, 'ftp:' ) ) {
|
|
$remote_file = true;
|
|
} else {
|
|
$remote_file = false;
|
|
|
|
// Remove Query String
|
|
if ( strstr( $file_path, '?' ) )
|
|
$file_path = current( explode( '?', $file_path ) );
|
|
|
|
$file_path = realpath( $file_path );
|
|
}
|
|
|
|
$file_extension = strtolower( substr( strrchr( $file_path, "." ), 1 ) );
|
|
$ctype = "application/force-download";
|
|
|
|
foreach ( get_allowed_mime_types() as $mime => $type ) {
|
|
$mimes = explode( '|', $mime );
|
|
if ( in_array( $file_extension, $mimes ) ) {
|
|
$ctype = $type;
|
|
break;
|
|
}
|
|
}
|
|
|
|
// Start setting headers
|
|
if ( ! ini_get('safe_mode') )
|
|
@set_time_limit(0);
|
|
|
|
if ( function_exists( 'get_magic_quotes_runtime' ) && get_magic_quotes_runtime() )
|
|
@set_magic_quotes_runtime(0);
|
|
|
|
if( function_exists( 'apache_setenv' ) )
|
|
@apache_setenv( 'no-gzip', 1 );
|
|
|
|
@session_write_close();
|
|
@ini_set( 'zlib.output_compression', 'Off' );
|
|
|
|
@ob_clean(); // Clear the output buffer
|
|
|
|
if ( $is_IE && is_ssl() ) {
|
|
// IE bug prevents download via SSL when Cache Control and Pragma no-cache headers set.
|
|
header( 'Expires: Wed, 11 Jan 1984 05:00:00 GMT' );
|
|
header( 'Cache-Control: private' );
|
|
} else {
|
|
nocache_headers();
|
|
}
|
|
|
|
$file_name = basename( $file_path );
|
|
|
|
if ( strstr( $file_name, '?' ) )
|
|
$file_name = current( explode( '?', $file_name ) );
|
|
|
|
header( "Robots: none" );
|
|
header( "Content-Type: " . $ctype );
|
|
header( "Content-Description: File Transfer" );
|
|
header( "Content-Disposition: attachment; filename=\"" . $file_name . "\";" );
|
|
header( "Content-Transfer-Encoding: binary" );
|
|
|
|
if ( $size = @filesize( $file_path ) )
|
|
header( "Content-Length: " . $size );
|
|
|
|
if ( $file_download_method == 'xsendfile' ) {
|
|
|
|
// Path fix - kudos to Jason Judge
|
|
if ( getcwd() )
|
|
$file_path = trim( preg_replace( '`^' . getcwd() . '`' , '', $file_path ), '/' );
|
|
|
|
header( "Content-Disposition: attachment; filename=\"" . $file_name . "\";" );
|
|
|
|
if ( function_exists( 'apache_get_modules' ) && in_array( 'mod_xsendfile', apache_get_modules() ) ) {
|
|
|
|
header("X-Sendfile: $file_path");
|
|
exit;
|
|
|
|
} elseif ( stristr( getenv( 'SERVER_SOFTWARE' ), 'lighttpd' ) ) {
|
|
|
|
header( "X-Lighttpd-Sendfile: $file_path" );
|
|
exit;
|
|
|
|
} elseif ( stristr( getenv( 'SERVER_SOFTWARE' ), 'nginx' ) || stristr( getenv( 'SERVER_SOFTWARE' ), 'cherokee' ) ) {
|
|
|
|
header( "X-Accel-Redirect: /$file_path" );
|
|
exit;
|
|
|
|
}
|
|
}
|
|
|
|
if ( $remote_file )
|
|
$this->readfile_chunked( $file_path ) or header( 'Location: ' . $file_path );
|
|
else
|
|
$this->readfile_chunked( $file_path ) or wp_die( __( 'File not found', 'woocommerce' ) . ' <a href="' . home_url() . '">' . __( 'Go to homepage →', 'woocommerce' ) . '</a>' );
|
|
|
|
exit;
|
|
}
|
|
|
|
/**
|
|
* readfile_chunked
|
|
*
|
|
* Reads file in chunks so big downloads are possible without changing PHP.INI - http://codeigniter.com/wiki/Download_helper_for_large_files/
|
|
*
|
|
* @param string file
|
|
* @param boolean return bytes of file
|
|
*/
|
|
public static function readfile_chunked( $file, $retbytes = true ) {
|
|
|
|
$chunksize = 1 * ( 1024 * 1024 );
|
|
$buffer = '';
|
|
$cnt = 0;
|
|
|
|
$handle = @fopen( $file, 'r' );
|
|
if ( $handle === FALSE )
|
|
return FALSE;
|
|
|
|
while ( ! feof( $handle ) ) {
|
|
$buffer = fread( $handle, $chunksize );
|
|
echo $buffer;
|
|
ob_flush();
|
|
flush();
|
|
|
|
if ( $retbytes )
|
|
$cnt += strlen( $buffer );
|
|
}
|
|
|
|
$status = fclose( $handle );
|
|
|
|
if ( $retbytes && $status )
|
|
return $cnt;
|
|
|
|
return $status;
|
|
}
|
|
}
|
|
|
|
new WC_Download_Handler(); |