Newer sponsor scripts found in backup\! :D :D

[mailer.git] / inc / modules / admin / what-usage.php

diff --git a/inc/modules/admin/what-usage.php b/inc/modules/admin/what-usage.php
index f5afcc325e1f71456f8b4a764573aba635fd886a..3a17999e65bc0739a9662c7de7c5932bfa72b955 100644 (file)
--- a/inc/modules/admin/what-usage.php
+++ b/inc/modules/admin/what-usage.php
@@ -32,52 +32,46 @@
  ************************************************************************/
 
 // Some security stuff...
-if ((ereg(basename(__FILE__), $_SERVER['PHP_SELF'])) || (!IS_ADMIN()))
-{
+if ((ereg(basename(__FILE__), $_SERVER['PHP_SELF'])) || (!IS_ADMIN())) {
        $INC = substr(dirname(__FILE__), 0, strpos(dirname(__FILE__), "/inc") + 4) . "/security.php";
        require($INC);
 }
+
 // Add description as navigation point
 ADD_DESCR("admin", basename(__FILE__));
 
-OPEN_TABLE("100%", "admin_content admin_content_align", "");
+// Base directory (should be moved to database)
 $usage = "usage/";
-if (!empty($_GET['image']))
-{
-       if ($_GET['type'] == "usage")
-       {
-               $file = PATH.$usage."usage.png";
-       }
-        else
-       {
+
+OPEN_TABLE("100%", "admin_content admin_content_align", "");
+
+if (!empty($_GET['image'])) {
+       if ($_GET['type'] == "usage") {
+               $file = sprintf("%s%susage.png", PATH, $usage);
+       } else {
                if (strpos($_GET['image'], "\\") > 0) $_GET['image'] = substr($_GET['image'], 0, strpos($_GET['image'], "\\"));
-               $file = PATH.$usage.$_GET['type']."_usage_".$_GET['image'].".png";
+               $file = sprintf("%s%s%s_usage_%s.png", PATH, $usage, SQL_ESCAPE($_GET['type']), SQL_ESCAPE($_GET['image']));
        }
-       if (file_exists($file))
-       {
+
+       if ((file_exists($file)) && (is_readable($file))) {
                $image = imagecreatefrompng($file);
                header("Content-type: image/png");
                imagepng($image);
                imagedestroy($image);
        }
        exit();
-}
- elseif (empty($_GET['usage']))
-{
+} elseif (empty($_GET['usage'])) {
        $file = PATH.$usage."index.html";
-}
- else
-{
+} else {
        $file = sprintf("%s%susage_%s.html",
                PATH,
                $usage,
                SQL_ESCAPE($_GET['usage'])
        );
 }
-if ($file !="")
-{
-       if (file_exists($file) && is_readable($file))
-       {
+
+if (!empty($file)) {
+       if (file_exists($file) && is_readable($file)) {
                        $tmpl_file = implode("", file($file));
                        $tmpl_file = addslashes($tmpl_file);
                        $tmpl_file = "\$content=\"".$tmpl_file."\";";
@@ -102,6 +96,7 @@ if ($file !="")
                        }
        }
 }
+
 CLOSE_TABLE();
 //
 ?>