<?php
/**
 * Install script to log downloads.
 * @package amo
 * @subpackage docs
 */

// If we don't have our required URI, terminate the request immediately.
if (empty($_GET['uri'])) {
    exit;
}

require_once('includes.php');

$uri = mysql_real_escape_string(str_replace(" ","+",$_GET["uri"]));
$db->query("
    SELECT
        vid,
        m.id,
        uri
    FROM version v 
    INNER JOIN main m ON m.id=v.id
    WHERE 
        uri='$uri' 
    LIMIT
        1
", SQL_INIT, SQL_ASSOC);

if (empty($db->record)) {
    exit;
} else {
    $row=$db->record;
    $uri=$row['uri']; 
    $id = $row['id'];
    $vid = $row['vid'];
}

//Are we behind a proxy and given the IP via an alternate enviroment variable? If so, use it.
if (!empty($_SERVER["HTTP_X_FORWARDED_FOR"])) {
    $remote_addr = mysql_real_escape_string($_SERVER["HTTP_X_FORWARDED_FOR"]);
} else {
    $remote_addr = mysql_real_escape_string($_SERVER["REMOTE_ADDR"]);
}

// Clean the user agent string.
$http_user_agent = mysql_real_escape_string($_SERVER['HTTP_USER_AGENT']);

/*
// Rate limit set to 10 minutes.
$sql = "
    SELECT
        did
    FROM
        downloads
    WHERE
        id='$id' AND
        vid='$vid' AND
        user_ip='$remote_addr' AND
        user_agent='$http_user_agent' AND
        date>DATE_SUB(NOW(), INTERVAL 10 MINUTE)
    LIMIT 
        1
";
$db->query($sql,SQL_INIT,SQL_ASSOC);

if (empty($db->record)) {
*/
    $db->query("
        INSERT INTO 
            downloads (ID, date, vID, user_ip, user_agent) 
        VALUES
            ('${id}',NOW(),'{$vid}', '{$remote_addr}', '{$http_user_agent}')
    ",SQL_NONE);
//}

// Set a no-cache header to make sure this page is never cached.
header('Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, private');
header('Pragma: no-cache');
header('Location: '.$uri);
exit;
?>