<?php

// +----------------------------------------------------------------------+
// | OpenConf                                                             |
// +----------------------------------------------------------------------+
// | Copyright (c) 2002-2008 Zakon Group LLC.  All Rights Reserved.       |
// +----------------------------------------------------------------------+
// | This source file is subject to the OpenConf License, available on    |
// | the OpenConf web site: www.OpenConf.com                              |
// +----------------------------------------------------------------------+

require_once "../include.php";
require_once OCC_MIME_FILE;

$printHeader = 'Voir un fichier';
$printHeaderFunction = 3;

// Check that we're still open
if (! $OC_statusAR['OC_view_file_open']) {
	warn('Files may no longer be viewed', $printHeader, $printHeaderFunction);
}

// Check whether this is a submission
if (isset($_POST['submit']) && ($_POST['submit'] == "Voir le fichier")) {
	// Check inputs
	if (!preg_match("/^\d+$/",$_POST['pid']) || empty($_POST['pwd'])) {
		warn('Please go back and check that the correct submission ID and password were entered.',$printHeader,$printHeaderFunction);
	}

	// Valid pid/pwd?
	$pq = "SELECT format, password FROM " . OCC_TABLE_PAPER . " WHERE paperid='" . $_POST['pid'] . "'";
	$pr = ocsql_query($pq) or err("Unable to view file (" . mysql_errno() . ")",$printHeader,$printHeaderFunction);
	if (mysql_num_rows($pr) != 1) {
		warn("Unable to find submission ID ".$_POST['pid'],$printHeader,$printHeaderFunction);
	}
	$pl = mysql_fetch_array($pr);
	if ((hashPassword($_POST['pwd'], $pl['password']) != $pl['password']) && (md5($_POST['pwd']) != $pl['password']) && (!OCC_CHAIR_PWD_TRUMPS || (hashPassword($_POST['pwd'], $OC_configAR['OC_chair_pwd']) != $OC_configAR['OC_chair_pwd']))) {
		warn('Password entered is not valid for submission ID '.$_POST['pid'],$printHeader,$printHeaderFunction);
	}
	
	$filename = $_POST['pid'] . '.' . $pl['format'];

	if (file_exists($OC_configAR['OC_paperDir'] . $filename)) {
		header("Content-type: " . $mimetypes[$pl['format']]);
		header("Content-Disposition: ; filename=" . $filename);
		header("Content-Length: " . filesize($OC_configAR['OC_paperDir'] . $filename));
		header("Cache-control: private");
		// Below added to resolve download issue with IE https downloads
		header("Pragma: public");
		readfile($OC_configAR['OC_paperDir'] . $filename);
		exit;
	}
	else {
		warn("Unable to retrieve submission " . $_POST['pid'],$printHeader,$printHeaderFunction);
	}
}

printHeader($printHeader,$printHeaderFunction);

print '<form method="POST" enctype="multipart/form-data" action="' . $_SERVER['PHP_SELF'] . '">
<table border=0 cellspacing=0 cellpadding=5>
<tr><td><b>Soumission n°</b></td><td><input name="pid" size="5" tabindex="1"> ( <a href="email_papers.php">Id oublié ?</a> )</td></tr>
<tr><td><b>Mot de passe :</b></td><td><input name="pwd" type="password" size="20" maxlength="255" tabindex="2"> ( <a href="reset.php">mot de passe oublié ?</a> )</td></tr>
</table>
<p>
<input type="submit" name="submit" value="Voir le fichier" tabindex="3">
</form>
<p>
<script language="javascript">
<!--
document.forms[0].elements[1].focus();
// -->
</script>
';

printFooter();

?>
