<?php
include('config.php');
$file = $_SERVER['REQUEST_URI'];
if($script_path)
{
$slash = '/';
}
$replace = $slash.$script_path.'/'.MFORUM.'/';
if($file == $slash.$script_path.'/'.MFORUM)
{
header('Location: '.$replace);
exit;
}
if(ereg('^'.$replace.'admin', $file) && !ereg('login.php', $file))
{
chdir('admin');
$admin = 'yes';
$file = ereg_replace('^'.$replace.'admin/', '', $file);
}
if($admin != 'yes')
{
$file = ereg_replace('^'.$replace, '', $file);
}
if(!$file)
{
include('index.php');
exit;
}
$file = explode('?', $file);
$file = $file[0];
if(ereg('..', $file))
{
die('<b><center>Invalid file!</center></b>');
}
$extension = explode('.', $file);
$count = count($extension);
$count--;
$extension = $extension[$count];

if(!function_exists('mime_content_type'))
{
function mime_content_type($file)
{
$extension = explode('.', $file);
$count = count($extension);
$count--;
$extension = $extension[$count];
$file = file('mime.dat');
for($i = 0; $i < count($file); $i++)
{
$line = $file[$i];
$line = explode(':', $line);
if($line[1] == $extension)
{
return $line[0];
}
}
}
}

if($extension == 'php')
{
include($file);
}
else
{
$mime = mime_content_type($file);
header('(anti-spam-content-type:) '.$mime);
print file_get_contents($file);
}
?>