Mercurial > defr > drupal > core
comparison includes/file.inc @ 13:8b6c45761e01 6.6
Drupal 6.6
| author | Franck Deroche <webmaster@defr.org> |
|---|---|
| date | Tue, 23 Dec 2008 14:32:33 +0100 |
| parents | 589fb7c02327 |
| children |
comparison
equal
deleted
inserted
replaced
| 12:4ca9f57cc4d4 | 13:8b6c45761e01 |
|---|---|
| 1 <?php | 1 <?php |
| 2 // $Id: file.inc,v 1.121.2.4 2008/09/17 08:13:07 goba Exp $ | 2 // $Id: file.inc,v 1.121.2.5 2008/10/20 09:42:31 goba Exp $ |
| 3 | 3 |
| 4 /** | 4 /** |
| 5 * @file | 5 * @file |
| 6 * API for handling file uploads and server file management. | 6 * API for handling file uploads and server file management. |
| 7 */ | 7 */ |
| 790 * | 790 * |
| 791 * @param $source File to transfer. | 791 * @param $source File to transfer. |
| 792 * @param $headers An array of http headers to send along with file. | 792 * @param $headers An array of http headers to send along with file. |
| 793 */ | 793 */ |
| 794 function file_transfer($source, $headers) { | 794 function file_transfer($source, $headers) { |
| 795 ob_end_clean(); | 795 if (ob_get_level()) { |
| 796 ob_end_clean(); | |
| 797 } | |
| 796 | 798 |
| 797 foreach ($headers as $header) { | 799 foreach ($headers as $header) { |
| 798 // To prevent HTTP header injection, we delete new lines that are | 800 // To prevent HTTP header injection, we delete new lines that are |
| 799 // not followed by a space or a tab. | 801 // not followed by a space or a tab. |
| 800 // See http://www.w3.org/Protocols/rfc2616/rfc2616-sec4.html#sec4.2 | 802 // See http://www.w3.org/Protocols/rfc2616/rfc2616-sec4.html#sec4.2 |
