Gazelle/sections/torrents/download.php

<?
if (!isset($_REQUEST['authkey']) || !isset($_REQUEST['torrent_pass'])) {
	enforce_login();
	$TorrentPass = $LoggedUser['torrent_pass'];
	$DownloadAlt = $LoggedUser['DownloadAlt'];
	$UserID		 = $LoggedUser['ID'];
	$AuthKey	 = $LoggedUser['AuthKey'];
} else {
	$UserInfo = $Cache->get_value('user_'.$_REQUEST['torrent_pass']);
	if(!is_array($UserInfo)) {
		$DB->query("SELECT
			ID,
			DownloadAlt
			FROM users_main AS m
			INNER JOIN users_info AS i ON i.UserID=m.ID
			WHERE m.torrent_pass='".db_string($_REQUEST['torrent_pass'])."'
			AND m.Enabled='1'");
		$UserInfo = $DB->next_record();
		$Cache->cache_value('user_'.$_REQUEST['torrent_pass'], $UserInfo, 3600);
	}
	$UserInfo = array($UserInfo);
	list($UserID,$DownloadAlt)=array_shift($UserInfo);
	if(!$UserID) { error(403); }
	$TorrentPass = $_REQUEST['torrent_pass'];
	$AuthKey = $_REQUEST['authkey'];
}

$TorrentID = $_REQUEST['id'];



if (!is_number($TorrentID)){ error(0); }

/* uTorrent remote redownloads .torrent files every fifteen minutes
	to prevent this retardation from blowing bandwidth etc., let's block it
	if he's downloaded the .torrent file twice before */
if (strpos($_SERVER['HTTP_USER_AGENT'], 'BTWebClient') !== FALSE) {
	$DB->query("SELECT 1 FROM users_downloads WHERE UserID=$UserID AND TorrentID=$TorrentID LIMIT 3");
	if ($DB->record_count() > 2) {
		error('You have already downloaded this .torrent three times. If you need to download it again, please do so from your browser, not through uTorrent remote.');
		die();
	}
}

$Info = $Cache->get_value('torrent_download_'.$TorrentID);
if(!is_array($Info) || !array_key_exists('PlainArtists', $Info) || empty($Info[10])) {
	$DB->query("SELECT
		t.Media,
		t.Format,
		t.Encoding,
		IF(t.RemasterYear=0,tg.Year,t.RemasterYear),
		tg.ID AS GroupID,
		tg.Name,
		tg.WikiImage,
		tg.CategoryID,
		t.Size,
		t.FreeTorrent,
		t.info_hash
		FROM torrents AS t
		INNER JOIN torrents_group AS tg ON tg.ID=t.GroupID
		WHERE t.ID='".db_string($TorrentID)."'");
	if($DB->record_count() < 1) {
		error(404);
	}
	$Info = array($DB->next_record(MYSQLI_NUM, array(4,5,6,10)));
	$Artists = Artists::get_artist($Info[0][4],false);
	$Info['Artists'] = Artists::display_artists($Artists, false, true);
	$Info['PlainArtists'] = Artists::display_artists($Artists, false, true, false);
	$Cache->cache_value('torrent_download_'.$TorrentID, $Info, 0);
}
if(!is_array($Info[0])) {
	error(404);
}
list($Media,$Format,$Encoding,$Year,$GroupID,$Name,$Image, $CategoryID, $Size, $FreeTorrent, $InfoHash) = array_shift($Info); // used for generating the filename
$Artists = $Info['Artists'];

// If he's trying use a token on this, we need to make sure he has one,
// deduct it, add this to the FLs table, and update his cache key.
if ($_REQUEST['usetoken'] && $FreeTorrent == '0') {
	if (isset($LoggedUser)) {
		$FLTokens = $LoggedUser['FLTokens'];
		if ($LoggedUser['CanLeech'] != '1') {
			error('You cannot use tokens while leech disabled.');
		}
	}
	else {
		$UInfo = Users::user_heavy_info($UserID);
		if ($UInfo['CanLeech'] != '1') {
			error('You may not use tokens while leech disabled.');
		}
		$FLTokens = $UInfo['FLTokens'];
	}

	// First make sure this isn't already FL, and if it is, do nothing

	if (!Torrents::has_token($TorrentID)) {
		if ($FLTokens <= 0) {
			error("You do not have any freeleech tokens left. Please use the regular DL link.");
		}
		if ($Size >= 1073741824) {
			error("This torrent is too large. Please use the regular DL link.");
		}

		// Let the tracker know about this
		if (!Tracker::update_tracker('add_token', array('info_hash' => rawurlencode($InfoHash), 'userid' => $UserID))) {
			error("Sorry! An error occurred while trying to register your token. Most often, this is due to the tracker being down or under heavy load. Please try again later.");
		}

		if (!Torrents::has_token($TorrentID)) {
			$DB->query("INSERT INTO users_freeleeches (UserID, TorrentID, Time) VALUES ($UserID, $TorrentID, NOW())
							ON DUPLICATE KEY UPDATE Time=VALUES(Time), Expired=FALSE, Uses=Uses+1");
			$DB->query("UPDATE users_main SET FLTokens = FLTokens - 1 WHERE ID=$UserID");

			// Fix for downloadthemall messing with the cached token count
			$UInfo = Users::user_heavy_info($UserID);
			$FLTokens = $UInfo['FLTokens'];

			$Cache->begin_transaction('user_info_heavy_'.$UserID);
			$Cache->update_row(false, array('FLTokens'=>($FLTokens - 1)));
			$Cache->commit_transaction(0);

			$Cache->delete_value('users_tokens_'.$UserID);
		}
	}
}

//Stupid Recent Snatches On User Page
if($CategoryID == '1' && $Image != "") {
	$RecentSnatches = $Cache->get_value('recent_snatches_'.$UserID);
	if(!empty($RecentSnatches)) {
		$Snatch = array('ID'=>$GroupID,'Name'=>$Name,'Artist'=>$Artists,'WikiImage'=>$Image);
		if(!in_array($Snatch, $RecentSnatches)) {
			if(count($RecentSnatches) == 5) {
				array_pop($RecentSnatches);
			}
			array_unshift($RecentSnatches, $Snatch);
		} elseif(!is_array($RecentSnatches)) {
			$RecentSnatches = array($Snatch);
		}
		$Cache->cache_value('recent_snatches_'.$UserID, $RecentSnatches, 0);
	}
}

$DB->query("INSERT IGNORE INTO users_downloads (UserID, TorrentID, Time) VALUES ('$UserID', '$TorrentID', '".sqltime()."')");


$DB->query("SELECT File FROM torrents_files WHERE TorrentID='$TorrentID'");

list($Contents) = $DB->next_record(MYSQLI_NUM, false);
$FileName = TorrentsDL::construct_file_name($Info['PlainArtists'], $Name, $Year, $Media, $Format, $Encoding, false, $DownloadAlt);

if ($DownloadAlt) {
	header('Content-Type: text/plain; charset=utf-8');
} else if (!$DownloadAlt || $Failed) {
	header('Content-Type: application/x-bittorrent; charset=utf-8');
}
header('Content-disposition: attachment; filename="'.$FileName.'"');

echo TorrentsDL::get_file($Contents, ANNOUNCE_URL."/$TorrentPass/announce");

define('IE_WORKAROUND_NO_CACHE_HEADERS', 1);