ffzg/recall_notices.pl: added --interval and --dedup

[koha.git] / opac / opac-retrieve-file.pl

diff --git a/opac/opac-retrieve-file.pl b/opac/opac-retrieve-file.pl
index 4c122d2..d19f9dd 100755 (executable)
--- a/opac/opac-retrieve-file.pl
+++ b/opac/opac-retrieve-file.pl
@@ -19,29 +19,35 @@
 
 use Modern::Perl;
 use CGI;
+use Encode;
 
+use C4::Auth;
 use C4::Context;
-use C4::UploadedFiles;
-
-my $input = new CGI;
-
-my $id = $input->param('id');
-my $file = C4::UploadedFiles::GetUploadedFile($id);
-exit 1 if not $file;
-
-my $file_path = $file->{filepath};
-
-if( -f $file_path ) {
-    open my $fh, '<', $file_path or die "Can't open file: $!";
-    print $input->header(
-        -type => "application/octet-stream",
-        -attachment => $file->{filename}
-    );
-    while(<$fh>) {
+use C4::Output;
+use Koha::UploadedFiles;
+
+my $input = CGI::->new;
+my $hash = $input->param('id'); # historically called id (used in URLs?)
+
+my $rec = Koha::UploadedFiles->search({
+    hashvalue => $hash, public => 1,
+    # DO NOT REMOVE the public flag: this is an opac script !
+})->next;
+my $fh = $rec? $rec->file_handle: undef;
+
+if( !$rec || !$fh ) {
+    my ( $template, $user, $cookie ) = get_template_and_user({
+        query           => $input,
+        template_name   => 'opac-retrieve-file.tt',
+        type            => 'opac',
+        authnotrequired => 1,
+    });
+    $template->param( hash => $hash );
+    output_html_with_http_headers $input, $cookie, $template->output;
+} else {
+    print Encode::encode_utf8( $input->header( $rec->httpheaders ) );
+    while( <$fh> ) {
         print $_;
     }
-} else {
-    exit 1;
+    $fh->close;
 }
-
-exit 0;