<?php
// INCOMING LINK: ct & id
// content_type -- 0= photoset, 1= video, 2= free photoset
	if (isset($_GET['ct'])) {
		$ct = addslashes($_GET['ct']);
	} else {
		die("illegal use");
	}

	if (isset($_GET['id'])) {
		$id = addslashes($_GET['id']);
	} else {
		die("illegal use");
	}
	
include('config.php');
	if ($member_id == 0) {
		printf("<meta http-equiv=\"Refresh\" content=\"0;url=./join.php\">"); 
		die();
	}
dbConn();

if ($ct == 0) { // purchased photoset

	$check = @mysql_query("SELECT `cms_content`.`zip_file` FROM cms_members_access
	INNER JOIN cms_content ON `cms_content`.`content_id` = `cms_members_access`.`content_id`
	WHERE `cms_content`.`releasedate` <= '".$today."' AND `cms_members_access`.`member_id` = '".$member_id."' AND `cms_content`.`content_id` = '".$id."'");

	if(@mysql_num_rows($check) == 0) {
		die("illegal use");
	} else {
		$file = $fileroot.@mysql_result($check, 0, 'zip_file');
	}

} elseif($ct == 2) { // free photoset
	
	
	
	$check = @mysql_query("SELECT `cms_content_free`.`zip_file` FROM cms_content_free
	INNER JOIN cms_content ON `cms_content`.`content_id` = `cms_content_free`.`content_id`
	WHERE `cms_content_free`.`releasedate` BETWEEN '".$_SESSION['dnjoindate']."' AND '".$today."' AND `cms_content`.`content_id` = '".$id."'");

	if(@mysql_num_rows($check) == 0) {
		die("illegal use");
	} else {
		$file = $freeroot.@mysql_result($check, 0, 'zip_file');
	}

} else {
	die("illegal use");
}


if (file_exists($file)) {
    header('Content-Description: File Transfer');
    header('Content-Type: application/octet-stream');
    header('Content-Disposition: attachment; filename='.basename($file));
    header('Content-Transfer-Encoding: binary');
    header('Expires: 0');
    header('Cache-Control: must-revalidate, post-check=0, pre-check=0');
    header('Pragma: public');
    header('Content-Length: ' . filesize($file));
    ob_clean();
    flush();
    readfile($file);
    exit;
} else {
	die("error... contact support!");
}
?>