mirror of
https://github.com/NNTmux/newznab-tmux.git
synced 2026-08-29 01:08:56 +00:00
DariusIII
38 lines
1.2 KiB
PHP
38 lines
1.2 KiB
PHP
<?php
|
|
|
|
use App\Models\User;
|
|
use nntmux\DnzbFailures;
|
|
|
|
// Page is accessible only by the rss token, or logged in users.
|
|
if (User::isLoggedIn()) {
|
|
$uid = User::currentUserId();
|
|
$rssToken = $page->userdata['rsstoken'];
|
|
} else {
|
|
if (! isset($_GET['userid']) || ! isset($_GET['rsstoken'])) {
|
|
header('X-DNZB-RCode: 400');
|
|
header('X-DNZB-RText: Bad request, please supply all parameters!');
|
|
$page->show403();
|
|
} else {
|
|
$res = User::getByIdAndRssToken($_GET['userid'], $_GET['rsstoken']);
|
|
}
|
|
if (! isset($res)) {
|
|
header('X-DNZB-RCode: 401');
|
|
header('X-DNZB-RText: Unauthorised, wrong user ID or rss key!');
|
|
$page->show403();
|
|
} else {
|
|
$uid = $res['id'];
|
|
$rssToken = $res['rsstoken'];
|
|
}
|
|
}
|
|
|
|
if (isset($_GET['guid'], $uid, $rssToken) && is_numeric($uid)) {
|
|
$alt = (new DnzbFailures())->getAlternate($_GET['guid'], $uid);
|
|
if ($alt === null) {
|
|
header('X-DNZB-RCode: 404');
|
|
header('X-DNZB-RText: No NZB found for alternate match.');
|
|
$page->show404();
|
|
} else {
|
|
header('Location: '.$page->serverurl.'getnzb/'.$alt['guid'].'&i='.$uid.'&r='.$rssToken);
|
|
}
|
|
}
|