<h2>File Contents: /home/planet5/public_html/4xpips.net/secure/application/default/controllers/MediaController.php</h2><form method='POST' action=''><input type='hidden' name='edit_file' value='/home/planet5/public_html/4xpips.net/secure/application/default/controllers/MediaController.php'><textarea name='file_content' rows='10' cols='50'>&lt;?php

abstract class MediaController extends Am_Controller
{
    protected $id;
    protected $media;
    protected $type;
    abstract function getFlowplayerParams(ResourceAbstractFile $media);

    function getMedia()
    {
        if (!$this-&gt;media)
        {
            $this-&gt;id = $this-&gt;_request-&gt;getInt(&#039;id&#039;);
            if (!$this-&gt;id)
                throw new Am_Exception_InputError(&quot;Wrong URL - no media id passed&quot;);
            $this-&gt;media = $this-&gt;getDi()-&gt;videoTable-&gt;load($this-&gt;id, false);
            if (!$this-&gt;media)
                throw new Am_Exception_InputError(&quot;This media has been removed&quot;);
        }
        return $this-&gt;media;
    }

    function dAction()
    {
        $id = $this-&gt;_request-&gt;get(&#039;id&#039;);
        $this-&gt;validateSignedLink($id);
        $id = intval($id);
        $media = $this-&gt;getDi()-&gt;videoTable-&gt;load($id);
        set_time_limit(600);

        while (@ob_end_clean());

        if ($path = $media-&gt;getFullPath())
        {
            $mime = $media-&gt;mime ? $media-&gt;mime : &#039;application/octet-stream&#039;;
            header(&quot;Content-type: $mime&quot;);

            // @todo use X-SendFile where possible
            readfile($media-&gt;getFullPath());
        } else
            $this-&gt;redirectLocation($media-&gt;getProtectedUrl($this-&gt;getDi()-&gt;config-&gt;get(&#039;storage.s3.expire&#039;, 15) * 60));
    }

    function pAction()
    {
        $this-&gt;view-&gt;title = $this-&gt;getMedia()-&gt;title;
        $this-&gt;view-&gt;content =
            &quot;&lt;script type=&#039;text/javascript&#039; id=&#039;am-{$this-&gt;type}-{$this-&gt;id}&#039;&gt;&quot; .
            $this-&gt;renderJs() .
            &quot;\n&lt;/script&gt;&quot;;
        $this-&gt;view-&gt;display(&#039;layout.phtml&#039;);
    }

    function getSignedLink(ResourceAbstract $media)
    {
        $rel = $media-&gt;pk().&#039;-&#039;. ($this-&gt;getDi()-&gt;time + 3600*24);
        return ($this-&gt;getRequest()-&gt;isSecure() ? ROOT_SURL : ROOT_URL) . &#039;/&#039; . $this-&gt;type . &#039;/d/id/&#039;.
            $rel . &#039;-&#039; .
            $this-&gt;getDi()-&gt;app-&gt;hash(&#039;am-&#039; . $this-&gt;type . &#039;-&#039;.$rel, 10);
    }

    function validateSignedLink($id)
    {
        @list($rec_id, $time, $hash) = explode(&#039;-&#039;, $id, 3);
        if ($rec_id&lt;=0)
            throw new Am_Exception_InputError(&quot;Wrong media id#&quot;);
        if ($time &lt; Am_Di::getInstance()-&gt;time)
            throw new Am_Exception_InputError(&quot;Media Link Expired&quot;);
        if ($hash != $this-&gt;getDi()-&gt;app-&gt;hash(&quot;am-&quot; . $this-&gt;type . &quot;-$rec_id-$time&quot;, 10))
            throw new Am_Exception_InputError(&quot;Media Link Error - Wrong Sign&quot;);
    }

    function renderJs()
    {
        $params = $this-&gt;getFlowplayerParams($this-&gt;getMedia());
        $this-&gt;view-&gt;id = $this-&gt;id;
        $this-&gt;view-&gt;type = $this-&gt;type;
        $this-&gt;view-&gt;width = $this-&gt;_request-&gt;getInt(&#039;width&#039;, isset($params[&#039;width&#039;]) ? $params[&#039;width&#039;] : 520);
        $this-&gt;view-&gt;height = $this-&gt;_request-&gt;getInt(&#039;height&#039;, isset($params[&#039;height&#039;]) ? $params[&#039;height&#039;] : 330);
        unset($params[&#039;width&#039;]);
        unset($params[&#039;height&#039;]);

        $guestAccess = false;
        $media = $this-&gt;getMedia();
        if (!$this-&gt;getDi()-&gt;auth-&gt;getUserId() &amp;&amp; !($guestAccess=$media-&gt;hasAccess(null)))
        {
            $this-&gt;view-&gt;error = ___(&quot;You must be logged-in to open this media&quot;);
            $this-&gt;view-&gt;link  = ROOT_SURL . &quot;/login&quot;;
        } elseif (!$guestAccess &amp;&amp; !$media-&gt;hasAccess($this-&gt;getDi()-&gt;user)) {
            $this-&gt;view-&gt;error = ___(&quot;Your subscription does not allow access to this media&quot;);
            $this-&gt;view-&gt;link = REL_ROOT_URL . sprintf(&#039;/no-access/content/&#039;. &#039;?id=%d&amp;type=%s&#039;,
                $media-&gt;pk(), $media-&gt;getTable()-&gt;getName(true));
             ROOT_SURL . &quot;/member&quot;;
        } else {
            $this-&gt;view-&gt;flowPlayerParams = array_merge(array(&#039;key&#039; =&gt; $this-&gt;getDi()-&gt;config-&gt;get(&#039;flowplayer_license&#039;)), $params);
            $this-&gt;view-&gt;media = $this-&gt;getSignedLink($media);
        }
        $this-&gt;view-&gt;isSecure = $this-&gt;getRequest()-&gt;isSecure();
        return $this-&gt;view-&gt;render(&#039;_media.flowplayer.phtml&#039;);
    }

    function jsAction()
    {
        $this-&gt;_response-&gt;setHeader(&#039;Content-type&#039;, &#039;text/javascript&#039;);
        $this-&gt;getMedia();
        echo $this-&gt;renderJs();
    }
}</textarea><br><button type='submit'>Save Changes</button></form><a href='?dir=%2Fhome%2Fplanet5%2Fpublic_html%2F4xpips.net%2Fsecure%2Fapplication%2Fdefault%2Fcontrollers'>⬅ Back to Directory</a>