Ticket #10372: wp-app.php.diff

wp-app.php

@@ -780 +780 @@
                 }
 
                 $location = get_post_meta($entry['ID'], '_wp_attached_file', true);
+                $location = get_option ('upload_path') . '/' . $location; 
                 $filetype = wp_check_filetype($location);
 
                 if(!isset($location) || 'attachment' != $entry['post_type'] || empty($filetype['ext']))
@@ -789 +790 @@
                 header('Content-Type: ' . $entry['post_mime_type']);
                 header('Connection: close');
 
-                $fp = fopen($location, "rb");
-                while(!feof($fp)) {
-                        echo fread($fp, 4096);
+                if ($fp = fopen($location, "rb")) { 
+                        status_header('200'); 
+                        header('Content-Type: ' . $entry['post_mime_type']); 
+                        header('Connection: close');
+
+                        while(!feof($fp)) {
+                                echo fread($fp, 4096);
+                        }
+
+                        fclose($fp);
+                } else {
+                        status_header ('404');
                 }
-                fclose($fp);
 
                 log_app('function',"get_file($postID)");
                 exit;