mirror of
https://github.com/NNTmux/newznab-tmux.git
synced 2026-09-01 10:48:53 +00:00
DariusIII
38 lines
1.2 KiB
PHP
38 lines
1.2 KiB
PHP
<?php
|
|
|
|
use App\Models\User;
|
|
use App\Models\Release;
|
|
|
|
// Page is accessible only by the rss token, or logged in users.
|
|
if (User::isLoggedIn()) {
|
|
$uid = User::currentUserId();
|
|
$rssToken = $page->userdata['rsstoken'];
|
|
} else {
|
|
if (! request()->has('userid') || ! request()->has('rsstoken')) {
|
|
header('X-DNZB-RCode: 400');
|
|
header('X-DNZB-RText: Bad request, please supply all parameters!');
|
|
$page->show403();
|
|
} else {
|
|
$res = User::getByIdAndRssToken(request()->input('userid'), request()->input('rsstoken'));
|
|
}
|
|
if (! isset($res)) {
|
|
header('X-DNZB-RCode: 401');
|
|
header('X-DNZB-RText: Unauthorised, wrong user ID or rss key!');
|
|
$page->show403();
|
|
} else {
|
|
$uid = $res['id'];
|
|
$rssToken = $res['rsstoken'];
|
|
}
|
|
}
|
|
|
|
if (isset($uid, $rssToken) && is_numeric($uid) && request()->has('guid')) {
|
|
$alt = Release::getAlternate(request()->input('guid'), $uid);
|
|
if ($alt === null) {
|
|
header('X-DNZB-RCode: 404');
|
|
header('X-DNZB-RText: No NZB found for alternate match.');
|
|
$page->show404();
|
|
} else {
|
|
header('Location: '.$page->serverurl.'getnzb/'.$alt['guid'].'&i='.$uid.'&r='.$rssToken);
|
|
}
|
|
}
|