getNsText( NS_IMAGE ) . ":" . wfBaseName( $_SERVER['PATH_INFO'] ); # Check if the filename is in the correct directory if ( substr( $filename, 0, strlen( $realUploadDirectory ) ) != $realUploadDirectory ) { wfForbidden(); } if ( is_array( $wgWhitelistRead ) && !in_array( $imageName, $wgWhitelistRead ) && !$wgUser->getID() ) { wfForbidden(); } if( !file_exists( $filename ) ) { wfForbidden(); } if( is_dir( $filename ) ) { wfForbidden(); } # Write file wfStreamFile( $filename ); wfLogProfilingData(); function wfForbidden() { header( 'HTTP/1.0 403 Forbidden' ); print "
You need to log in to access files on this server
"; wfLogProfilingData(); exit; } ?>