arewefastyet/website/data.php

<?php

include "lib/internals.php";

global $config;

function fault() {
	exit();
}

if (!isset($_GET["file"]))
	fault();

$name = $_GET["file"];
if (substr($name, 0, 4) == "auth")
	fault();
if (!preg_match("/^[a-zA-Z0-9-. _]*$/i", $name)) {
	if (!preg_match("/^treeherder-logs\/[a-zA-Z0-9-. _]*$/i", $name))
		fault();
}

$file = $config->data_folder.$name;
if (has_permissions()) {
	$authfile = $config->data_folder."auth-".$name;
	if (file_exists($authfile))
		$file = $authfile;
}
if (!file_exists($file))
	fault();

if (isset($_SERVER['HTTP_IF_MODIFIED_SINCE']) &&
    strtotime($_SERVER['HTTP_IF_MODIFIED_SINCE']) == filemtime($file))
{
    header('Last-Modified: '.gmdate('D, d M Y H:i:s', filemtime($file)).' GMT', true, 304);
} else {
    header('Last-Modified: '.gmdate('D, d M Y H:i:s', filemtime($file)).' GMT', true, 200);
    header('Content-Length: '.filesize($file));
	echo file_get_contents($file); 
}