<?php
include('settings.php');
include('functions.php');

$no_files = array(
	"index.php", 
	"ipn.php", 
	"dl.php", 
	"page.php", 
	"settings.php", 
	"functions.php"
);

$txn_id = preg_replace("/[^0-9a-zA-Z]/", "", $_GET['id']);
$customer_file = basename($txn_id.'.php');

if (in_array($customer_file, $no_files)) {
    die('<h1>FATAL ERROR: Unauthorized Access</h1>');
}

if (file_exists($customer_file))
{ include($customer_file); }
else
{ die('Purchase Details Not Found. Contact Administrator.'); }

 if ($_GET['file'] == '')
{ die('Invalid File Information. Contact Administrator.'); }

$file_id = (int) $_GET['file'];

if (!isset($product_files[$file_id]))
{ die('Invalid File Information. Contact Administrator.'); }

$file = $product_files[$file_id];

if (download_is_expired($customer_info['expire_date']))
{ die('Download has expired.'); }
    
if (file_exists($file['source']))
{
    header('Content-Description: File Transfer');
    header('Content-Type: application/octet-stream');
    header('Content-Disposition: attachment; filename='.$file['filename']);
    header('Content-Transfer-Encoding: binary');
    header('Expires: 0');
    header('Cache-Control: must-revalidate, post-check=0, pre-check=0');
    header('Pragma: public');
    header('Content-Length: ' . filesize($file['source']));
    ob_clean();
    flush();
    readfile($file['source']);
    exit();
}
else
{ die("Download file ID $file_id is not valid. Please contact webmaster."); }
?>