404Forbiden

✏️ Editing: addvideo.php

<?
require_once "../include/user.inc.php";
require_once "../include/video.inc.php";
require_once "../include/S3.php";

$postData = file_get_contents('php://input');
$_POST = json_decode($postData,true);

/*$_POST= array();
$_POST['user_id'] = 1367;
$_POST['title'] = "video test";
$_POST['player_swf'] = "player001_black.swf";
$_POST['width'] = 320;
$_POST['height'] = 180;
$_POST['video_file'] = "2.mov";
$_POST['template_id'] = "1";*/

require_once "checklogin.inc.php";

function die_error($str)
{
	die("ERROR\n$str");
}

if(!empty($_POST))
{
	//storage cap limit check
	$url = $_POST['video_file'];
	$working_dir = $USERS_DIR . $user->id . "/";
	
	$storage_cap = DbQuery("SELECT SUM(SPACE) FROM videos WHERE userid=".$user->id);
	$used = $storage_cap / (1024*1024*1024);		//in GB
	
	$user->storage_cap = DbQuery("SELECT storage_cap FROM users WHERE id=".$user->id);
	if($user->storage_cap <= $used)
	{
		echo "ERROR\nStorage Limit Reached.";
		@unlink($working_dir.$_POST['video_file']);
		exit;
	}
	
	//checking that file exists or not
	if(!file_exists($working_dir.$url))
		die_error("Can't find uploaded file: " . $url);

$v = new Video();
	$v->userid = $user->id;
	$v->title = $_POST['title'];
	$v->width = intval($_POST["width"]);
	$v->height = intval($_POST["height"]);
	
	if($_POST['template_id'] != "" && $_POST['template_id'] != 0)
	{
		$v->isTemplate = "Y";
		$v->templateId = $_POST['template_id'];
		
		$res = mysql_query("select * from templates where templateId=".$_POST['template_id']);
		$template_data = mysql_fetch_assoc($res);
		if($template_data['pro_template'] == 1)
			$v->templateContent = $template_data['default_color']."|||".$template_data['templateText'];
	}
	
	$v->Save();

$file_script = "/" . $v->code . "/";
	$src_dir = $user->id . "/";
	$dest_dir = $user->id . "/" . $v->code . "/";
	
	$storage = $user->GetStorage();
	if (!$storage->makeDir($dest_dir))
		die_error("Can't create video directory: " . $dest_dir);

function moveFile($src, $dest)
	{
		global $v, $storage, $src_dir, $dest_dir;
		$res = $storage->uploadFile($src_dir . $src, $dest_dir . $dest);
		if ($res)
			$v->space += $storage->getFileSize($dest_dir . $dest);
		return $res;
	}
	
	$thumb = "";
	$basename = $v->code . "_0";

if ($url!="")
	{
		//getting new name of video
		$info = pathinfo($url);
		if (strtolower($info["extension"]) == "mp4" || strtolower($info["extension"]) == "flv")
			$newname = $basename . ".mp4";
		else
			$newname = $basename . ".flv";		//for backward compatibility
		$newname = $basename . ".mov";
		
		$width = $v->width;
		$height = $v->height;

//creating thumb image of video
		$thumb = date('ymd_his')."_".rand(0,100).".jpg";
		exec("ffmpeg -i ".$working_dir.$url." -an -r 2 -y -s ".$v->width."x".$v->height." ".$working_dir.$thumb);

if (!moveFile($url, $newname))
			die_error("Can't find file: " . $working_dir . $newname);

$video_url = $file_script . $newname;
	}
	
	if ($thumb!="")
	{
		$newname = $basename . ".jpg";
		moveFile($thumb, $newname);
		$thumb_url = $file_script . $newname;
	}

$v->xml = '<?xml version="1.0"?>'.
				'<data>'.
				  '<playlist>'.
					'<video id="0" url="'.$video_url.'" thumb="'.$thumb_url.'" title="'.$v->title.'"/>'.
				  '</playlist>'.
				  '<settings>'.
					'<setting name="start" value="none"/>'.
					'<setting name="end" value="stop"/>'.
					'<setting name="embed" value="True"/>'.
					'<setting name="AddThis" value="True"/>'.
					'<setting name="style" value="'.$_POST['player_swf'].'"/>'.
					'<setting name="logoURL" value=""/>'.
					'<setting name="logoPosition" value="topright"/>'.
					'<setting name="logoLink" value=""/>'.
					'<setting name="redirectURL" value=""/>'.
				  '</settings>'.
				'</data>';
	$v->Save();

echo "SUCCESS\n" . $v->code;
	exit;
}
?>

Sid Gifari From Gifari Industries - BD Cyber Security Team