view.php

<?php
// File viewer and downloader
// Serves media files securely

if (!isset($_GET['file'])) {
    http_response_code(400);
    die('No file specified');
}

// Decode file path (supports both base64 and regular paths)
$filePath = $_GET['file'];
if (isset($_GET['encoded']) && $_GET['encoded'] == '1') {
    $filePath = base64_decode($filePath);
}

// Security check: Verify file exists and is readable
if (!file_exists($filePath) || !is_file($filePath) || !is_readable($filePath)) {
    http_response_code(404);
    // Debug output
    header('Content-Type: text/plain');
    echo "File not found or not accessible\n";
    echo "Decoded path: " . $filePath . "\n";
    echo "File exists: " . (file_exists($filePath) ? 'yes' : 'no') . "\n";
    echo "Is file: " . (is_file($filePath) ? 'yes' : 'no') . "\n";
    echo "Is readable: " . (is_readable($filePath) ? 'yes' : 'no') . "\n";
    die();
}

// Get file information
$fileName = basename($filePath);
$fileExtension = strtolower(pathinfo($filePath, PATHINFO_EXTENSION));
$fileSize = filesize($filePath);

// Define MIME types
$mimeTypes = [
    // Images
    'jpg' => 'image/jpeg',
    'jpeg' => 'image/jpeg',
    'png' => 'image/png',
    'gif' => 'image/gif',
    'webp' => 'image/webp',
    'svg' => 'image/svg+xml',
    
    // PDFs
    'pdf' => 'application/pdf',
    
    // Videos
    'mp4' => 'video/mp4',
    'webm' => 'video/webm',
    'ogg' => 'video/ogg',
    'mov' => 'video/quicktime',
    'avi' => 'video/x-msvideo'
];

// Get MIME type
$mimeType = isset($mimeTypes[$fileExtension]) ? $mimeTypes[$fileExtension] : 'application/octet-stream';

// Check if download is requested
$isDownload = isset($_GET['download']) && $_GET['download'] == '1';

// Clear output buffer
if (ob_get_level()) {
    ob_end_clean();
}

// Set headers
header('Content-Type: ' . $mimeType);
header('Content-Length: ' . $fileSize);
header('Accept-Ranges: bytes');

if ($isDownload) {
    header('Content-Disposition: attachment; filename="' . $fileName . '"');
} else {
    header('Content-Disposition: inline; filename="' . $fileName . '"');
}

// Cache headers for better performance
header('Cache-Control: public, max-age=31536000');
header('Expires: ' . gmdate('D, d M Y H:i:s', time() + 31536000) . ' GMT');
header('Last-Modified: ' . gmdate('D, d M Y H:i:s', filemtime($filePath)) . ' GMT');

// Handle range requests for video streaming
if (isset($_SERVER['HTTP_RANGE'])) {
    $range = $_SERVER['HTTP_RANGE'];
    $range = str_replace('bytes=', '', $range);
    $range = explode('-', $range);
    $start = intval($range[0]);
    $end = isset($range[1]) && $range[1] !== '' ? intval($range[1]) : $fileSize - 1;
    
    $length = $end - $start + 1;
    
    http_response_code(206);
    header('Content-Range: bytes ' . $start . '-' . $end . '/' . $fileSize);
    header('Content-Length: ' . $length);
    
    $file = fopen($filePath, 'rb');
    fseek($file, $start);
    
    $buffer = 8192;
    $bytesLeft = $length;
    
    while ($bytesLeft > 0 && !feof($file)) {
        $bytesToRead = min($buffer, $bytesLeft);
        echo fread($file, $bytesToRead);
        $bytesLeft -= $bytesToRead;
        flush();
    }
    
    fclose($file);
} else {
    // Regular file output
    readfile($filePath);
}

exit;
?>