Replaced old getSize functions from upload methods, should fix #82

Revised upload.php, now proxy and pauth should be available on plugins and small changes related to auul Updated and added some plugins
loverboyritesh · Dec 31, 2017 · 4fa1e8e · 4fa1e8e
1 parent 41cb16c
commit 4fa1e8e
Show file tree

Hide file tree

Showing 9 changed files with 125 additions and 65 deletions.
diff --git a/classes/http.php b/classes/http.php
@@ -635,7 +635,7 @@ function upfile($host, $port, $url, $referer, $cookie, $post, $file, $filename,
 		return FALSE;
 	}
 
-	$fileSize = getSize($file);
+	$fileSize = filesize($file);
 
 	if (!empty($field2name)) {
 		$postdata .= '--' . $bound . $nn;
@@ -852,7 +852,7 @@ function putfile($host, $port, $url, $referer, $cookie, $file, $filename, $proxy
 		return FALSE;
 	}
 
-	$fileSize = getSize($file);
+	$fileSize = filesize($file);
 
 	if (!empty($cookie)) {
 		if (is_array($cookie)) $cookies = (count($cookie) > 0) ? CookiesToStr($cookie) : 0;
@@ -1046,5 +1046,4 @@ function putfile($host, $port, $url, $referer, $cookie, $file, $filename, $proxy
 	}
 	$page = $header.$page;
 	return $page;
-}
-?>
+}
diff --git a/hosts/download/mega_co_nz.php b/hosts/download/mega_co_nz.php
@@ -276,7 +276,7 @@ public function CheckBack($header) {
 		if (!stream_filter_register('MegaDlDecrypt', 'Th3822_MegaDlDecrypt') && !in_array('MegaDlDecrypt', stream_get_filters())) html_error('Error: Cannot register "MegaDlDecrypt" filter.');
 
 		if (!isset($sFilters) || !is_array($sFilters)) $sFilters = array();
-		if (empty($sFilters['MegaDlDecrypt'])) $sFilters['MegaDlDecrypt'] = stream_filter_prepend($fp, 'MegaDlDecrypt', STREAM_FILTER_READ, $opts);
+		if (empty($sFilters['MegaDlDecrypt'])) $sFilters['MegaDlDecrypt'] = stream_filter_append($fp, 'MegaDlDecrypt', STREAM_FILTER_READ, $opts);
 		if (!$sFilters['MegaDlDecrypt']) html_error('Error: Unknown error while initializing MegaDlDecrypt filter, cannot continue download.');
 	}
 

diff --git a/hosts/download/rapidrar_com.php b/hosts/download/rapidrar_com.php
@@ -0,0 +1,35 @@
+<?php
+
+if (!defined('RAPIDLEECH')) {
+	require_once('index.html');
+	exit();
+}
+
+if (!file_exists(HOST_DIR . 'download/GenericXFS_DL.php')) html_error('Cannot load "'.htmlentities(HOST_DIR).'download/GenericXFS_DL.php" (File doesn\'t exists)');
+require_once(HOST_DIR . 'download/GenericXFS_DL.php');
+
+class rapidrar_com extends GenericXFS_DL {
+	public $pluginVer = 22;
+	public function Download($link) {
+		$this->wwwDomain = false; // Switch to true if filehost forces it's domain with www.
+		$this->cname = 'xfss'; // Session cookie name
+		$this->httpsOnly = true; // Force https on all the site, supersedes $this->sslLogin when true
+		$this->sslLogin = false; // Force https on login post only.
+		$this->embedDL = false; // Try to unpack player's js for finding download link. (Only hosts with video player)
+		$this->unescaper = false; // Enable JS unescape decoder
+
+		$this->Start($link);
+	}
+
+	protected function FreeDL($step = 1) {
+		// Hacky Trick :P
+		if ($step == 1) {
+			$this->page = $this->GetPage($this->link, $this->cookie, array('op' => 'download1', 'id' => $this->fid, 'method_free' => 'Free%20Download'));
+			$this->cookie = GetCookiesArr($this->page, $this->cookie);
+			$step++;
+		}
+		return parent::FreeDL($step);
+	}
+}
+
+// Written by Th3-822.
diff --git a/hosts/download/xvideos_com.php b/hosts/download/xvideos_com.php
@@ -7,33 +7,34 @@
 
 class xvideos_com extends DownloadClass {
 	public function Download($link) {
-		if (!preg_match('@(https?://(?:[\w\-]+\.)+[\w\-]+(?:\:\d+)?/)(?:video|embedframe/|swf/xv-player\.swf\?id_video=)(\d+)@i', $link, $vid)) html_error('Invalid Link.');
-		$domain = 'www.xvideos.com';
-		$link = $GLOBALS['Referer'] = "http://$domain/video{$vid[2]}/";
+		if (!preg_match('@https?://(?:[\w\-]+\.)+[\w\-]+(?:\:\d+)?/(?:(?:video|embedframe/|swf/xv-player\.swf\?id_video=)(\d+)|video-(\w+)/)@i', $link, $vid)) html_error('Invalid Link.');
+		$domain = strtolower(parse_url($link, PHP_URL_HOST));
+		if (strpos($domain, 'www.') !== 0) $domain = "www.$domain";
+		$link = $GLOBALS['Referer'] = "http://$domain/video" . (empty($vid[2]) ? $vid[1] : '-' . $vid[2]) . "/";
 
 		$page = $this->GetPage($link);
-		if (preg_match("@\nLocation: ((https?://(?:[\w\-]+\.)+[\w\-]+(?:\:\d+)?)?/video{$vid[2]}/\S+)@i", $page, $redir)) {
+		if (preg_match("@\nLocation: ((https?://(?:[\w\-]+\.)+[\w\-]+(?:\:\d+)?)?/video" . (empty($vid[2]) ? $vid[1] : '-' . $vid[2]) . "/\S+)@i", $page, $redir)) {
 			$redir = empty($redir[2]) ? "http://$domain".$redir[1] : $redir[1];
 			$page = $this->GetPage($redir, GetCookiesArr($page));
 		}
 
-		if (!preg_match('@<h2>\s*([^"<>]+?)\s*<span[ >]@i', $page, $title)) {
+		if (!preg_match('@setVideoTitle\(\'(.+?)\'\)@', $page, $title)) {
 			is_present($page, 'Sorry but the page you requested was not found.', 'Video not found or it was deleted.');
 			is_present($page, 'We received a request to have this video deleted.', 'Video disabled for dispute.');
 			html_error('Error: Video title not found.');
 		}
 
-		if (!preg_match('@(?<=flv_url=)https?[^\"\'&]+@', $page, $DL)) html_error('Error: Download link not found.');
-		$DL = urldecode($DL[0]);
+		if (!preg_match('@setVideoUrlHigh\(["\'](https?://[^"\'\s<>]+)@i', $page, $DL) && !preg_match('@setVideoUrl(?:Low)?\(["\'](https?://[^"\'\s<>]+)@i', $page, $DL) && !(preg_match('@(?<=flv_url=)(https?[^\"\'&]+)@', $page, $DL) && ($DL[1] = urldecode($DL[1])))) html_error('Error: Download link not found.');
 
-		if (!preg_match('@\.(?:mp4|flv|webm|avi)$@i', basename($DL), $ext)) $ext = array('.flv');
-		$filename = preg_replace('@(?:\.(?:mp4|flv|mkv|webm|wmv|(m2)?ts|rm(vb)?|mpe?g?|vob|avi|[23]gp))+$@i', '', preg_replace('@[^ A-Za-z_\-\d\.,\(\)\[\]\{\}&\!\'\@\%\#]@u', '_', html_entity_decode(trim($title[1]), ENT_QUOTES, 'UTF-8')));
-		$filename .= sprintf(' [xvideos][%d]%s', $vid[2], $ext[0]);
+		if (empty($vid[1])) $vid[1] = (preg_match('@id_video=(\d+)@i', $page, $_vid) ? $_vid[1] : -1);
 
-		$this->RedirectDownload($DL, $filename, 0, 0, 0, $filename);
+		if (!preg_match('@\.(?:mp4|flv|webm|avi)$@i', basename(parse_url($DL[1], PHP_URL_PATH)), $ext)) $ext = array('.mp4');
+		$filename = preg_replace('@(?:\.(?:mp4|flv|mkv|webm|wmv|(m2)?ts|rm(vb)?|mpe?g?|vob|avi|[23]gp))+$@i', '', preg_replace('@[^ A-Za-z_\-\d\.,\(\)\[\]\{\}&\!\'\@\%\#]@u', '_', stripslashes(html_entity_decode(trim($title[1]), ENT_QUOTES, 'UTF-8'))));
+		$filename .= sprintf(' [xvideos][%d]%s', $vid[1], $ext[0]);
+
+		$this->RedirectDownload($DL[1], $filename, 0, 0, 0, $filename);
 	}
 }
 
 //[25-1-2016]  Written by Th3-822.
-
-?>
+//[30-12-2017] Updated. - Th3-822
diff --git a/hosts/upload/katfile.com.index.php b/hosts/upload/katfile.com.index.php
@@ -0,0 +1,4 @@
+<?php
+$upload_services[] = 'katfile.com';
+$max_file_size['katfile.com'] = 2048; // Filesize limit (MB)
+$page_upload['katfile.com'] = 'katfile.com.php';
diff --git a/hosts/upload/katfile.com.php b/hosts/upload/katfile.com.php
@@ -0,0 +1,28 @@
+<?php
+
+if (!defined('RAPIDLEECH')) exit;
+$_T8 = array('v' => 9); // Version of this config file. (Do Not Edit)
+
+/* # Plugin's Settings # */
+$_T8['domain'] = 'katfile.com'; // May require the www. (Check first if the site adds the www.).
+$_T8['anonUploadDisable'] = false; // Disallow non-registered users upload. (XFS Pro)
+$_T8['anonUploadLimit'] = 0; // File-size limit for non-registered users (MB) | 0 = Plugin's limit | (XFS Pro)
+
+// Advanced Settings (Don't edit it unless you know what are you doing)
+	$_T8['port'] = 80; // Server's port, default: 80 | 443 = https.
+	$_T8['xfsFree'] = false; // Change to true if the host is using XFS free.
+	$_T8['path'] = '/'; // URL path to XFS script, default: '/'
+	$_T8['sslLogin'] = true; // Force https on login.
+	$_T8['opUploadName'] = 'upload'; // Custom ?op=value for checking upload page, default: 'upload'
+	$_T8['flashUpload'] = false; // Forces the use of flash upload method... Also filename for .cgi if it's a non empty string. (XFS Pro)
+
+$acc_key_name = str_ireplace(array('www.', '.'), array('', '_'), $_T8['domain']); // (Do Not Edit)
+
+/* # Account Info # */
+$upload_acc[$acc_key_name]['user'] = ''; //Set your login
+$upload_acc[$acc_key_name]['pass'] = ''; //Set your password
+
+if (!file_exists(HOST_DIR . 'upload/GenericXFSHost.inc.php')) html_error('Cannot load "'.htmlentities(HOST_DIR).'upload/GenericXFSHost.inc.php" (File doesn\'t exists), please install lastest version from: http://rapidleech.com/forum/viewtopic.php?f=17&t=80 or http://pastebin.com/E0z7qMU1 ');
+require(HOST_DIR . 'upload/GenericXFSHost.inc.php');
+
+// Written by Th3-822
diff --git a/hosts/upload/mediafire.com_member.index.php b/hosts/upload/mediafire.com_member.index.php
@@ -1,10 +1,4 @@
 <?php
-$upload_services[]="mediafire.com_member";
-$max_file_size["mediafire.com_member"]=200;
-$page_upload["mediafire.com_member"] = "mediafire.com_member.php";
-
-/******************mediafire.com****************************\
-mediafire.com Member Upload Plugin
-WRITTEN by Raj Malhotra on 06 Feb 2011
-\******************mediafire.com****************************/
-?>
+$upload_services[] = 'mediafire.com_member';
+$max_file_size['mediafire.com_member'] = 20480;
+$page_upload['mediafire.com_member'] = 'mediafire.com_member.php';
diff --git a/hosts/upload/mediafire.com_member.php b/hosts/upload/mediafire.com_member.php
@@ -38,9 +38,9 @@
 	echo "</table>\n</form>\n";
 } else {
 	$login = $not_done = false;
-	$domain = 'mediafire.com';
+	$domain = 'www.mediafire.com';
 	$referer = "https://$domain/";
-	$app = array('id' => '44595', 'api_version' => '1.4'); // Application ID for MediaFire's API @ https://www.mediafire.com/#settings/applications
+	$app = array('id' => '44595', 'api_version' => '1.5'); // Application ID for MediaFire's API @ https://www.mediafire.com/#settings/applications
 
 	// Login
 	echo "<table style='width:600px;margin:auto;'>\n<tr><td align='center'>\n<div id='info' width='100%' align='center'>Login to $domain</div>\n";
@@ -64,7 +64,7 @@
 	// Preparing Upload
 	echo "<script type='text/javascript'>document.getElementById('info').innerHTML = 'Preparing Upload';</script>\n";
 
-	$uploadCheck = array_map('strtolower', mf_apireq('upload/check', array('size' => $fsize, 'hash' => $fileHash, 'filename' => $lname)));
+	$uploadCheck = array_map('strtolower_nr', mf_apireq('upload/check', array('size' => $fsize, 'hash' => $fileHash, 'filename' => $lname)));
 	mf_checkErrors($uploadCheck, 'Pre-Upload Check Error');
 
 	if ($uploadCheck['storage_limit_exceeded'] == 'yes') html_error('User storage limit exceeded.');
@@ -101,7 +101,7 @@
 	$up_url = $referer . "api/{$app['api_version']}/upload/simple.php?response_format=json&session_token={$getAToken['action_token']}&action_on_duplicate=" . $uploadPrefs['action_on_duplicate'];
 
 	$url = parse_url($up_url);
-	$upfiles = upfile($url['host'], defport($url), $url['path'].(!empty($url['query']) ? '?'.$url['query'] : ''), $referer.(!empty($fileHash) ? "\r\nX-Filehash: $fileHash" : ''), 0, 0, $lfile, $lname, 'Filedata', '', 0, 0, 0, $url['scheme']);
+	$upfiles = upfile($url['host'], defport($url), $url['path'].(!empty($url['query']) ? '?'.$url['query'] : ''), $referer.(!empty($fileHash) ? "\r\nX-Filehash: $fileHash" : ''), 0, 0, $lfile, $lname, 'Filedata', '', $_GET['proxy'], $pauth, 0, $url['scheme']);
 
 	// Upload Finished
 	echo "<script type='text/javascript'>document.getElementById('progressblock').style.display='none';</script>\n";
@@ -157,7 +157,7 @@
 	} while ($x++ < 20 && $poll_upload['doupload']['status'] != '99');
 
 	if (empty($poll_upload['doupload']['quickkey'])) html_error('Upload: quickkey not found.');
-	$download_link = "$referer?" . $poll_upload['doupload']['quickkey'];
+	$download_link = str_replace('www.', '', "$referer?") . $poll_upload['doupload']['quickkey'];
 
 	// I will try to kill the action_token... Why this request needs session_token?
 	mf_apireq('user/destroy_action_token', array('action_token' => $getAToken['action_token']));
@@ -238,7 +238,7 @@ function mf_apireq($action, $post = array()) {
 	$path = "api/{$GLOBALS['app']['api_version']}/$action.php";
 	if ($GLOBALS['cURL']) $page = cURL($GLOBALS['referer'] . $path, 0, $post, $GLOBALS['referer']);
 	else {
-		$page = geturl($GLOBALS['domain'], 443, "/$path", $GLOBALS['referer'], 0, $post, 0, 0, 0, 0, 'https'); // geturl doesn't support https proxy
+		$page = geturl($GLOBALS['domain'], 443, "/$path", $GLOBALS['referer'], 0, $post, 0, $_GET['proxy'], $GLOBALS['pauth'], 0, 'https');
 		is_page($page);
 	}
 
@@ -250,6 +250,9 @@ function mf_apireq($action, $post = array()) {
 	return $json;
 }
 
-//[18-2-2015]  Written by Th3-822.
+function strtolower_nr($str) {
+	return (is_string($str) ? strtolower($str) : $str);
+}
 
-?>
+//[18-2-2015]  Written by Th3-822.
+//[30-12-2017] Updated API to 1.5 & small fixes. - Th3-822
diff --git a/upload.php b/upload.php
@@ -20,23 +20,19 @@
 
 if (!file_exists($lfile)) html_error(sprintf(lang(64), htmlspecialchars($lname)));
 if (!is_readable($lfile)) html_error(sprintf(lang(65), htmlspecialchars($lname)));
-$fsize = getSize($lfile);
 
+$fsize = filesize($lfile);
 // We want to check if the selected upload service is a valid ones
-$upload_services = $max_file_size = $page_upload = array();
-if (file_exists(HOST_DIR . "upload/$uphost.index.php") && file_exists(HOST_DIR . "upload/$uphost.php")) {
-	require_once(HOST_DIR . "upload/$uphost.index.php");
-	if (!in_array("$uphost", $upload_services, true)) html_error(lang(48));
-	if (!empty($max_file_size["$uphost"]) && $fsize > ($max_file_size["$uphost"] * 1048576)) html_error(lang(66));
-	require_once(HOST_DIR . "upload/$uphost.php");
-} else html_error(lang(67));
-
-$_GET['proxy'] = isset($_GET['proxy']) ? $_GET['proxy'] : ''; // EDIT HERE
-
 if (isset($_REQUEST['useuproxy']) && (empty($_REQUEST['uproxy']) || !strstr($_REQUEST['uproxy'], ':'))) {
 	html_error(lang(324));
 } else {
-	$proxy = $_REQUEST['uproxy'];
+	$_GET['proxy'] = $_REQUEST['uproxy'];
+}
+
+$proxy = $_GET['proxy'] = isset($_GET['proxy']) ? $_GET['proxy'] : '';
+
+if (!empty($_GET['proxy']) && strpos($_GET['proxy'], ':') < 1) {
+	html_error(lang(324));
 }
 
 if (!empty($_REQUEST['upauth'])) {
@@ -45,6 +41,15 @@
 	$pauth = (!empty($_REQUEST['uproxyuser']) && !empty($_REQUEST['uproxypass'])) ? base64_encode($_REQUEST['uproxyuser'] . ':' . $_REQUEST['uproxypass']) : '';
 }
 
+// We want to check if the selected upload service is a valid ones
+$upload_services = $max_file_size = $page_upload = array();
+if (file_exists(HOST_DIR . "upload/$uphost.index.php") && file_exists(HOST_DIR . "upload/$uphost.php")) {
+	require_once(HOST_DIR . "upload/$uphost.index.php");
+	if (!in_array("$uphost", $upload_services, true)) html_error(lang(48));
+	if (!empty($max_file_size["$uphost"]) && $fsize > ($max_file_size["$uphost"] * 1048576)) html_error(lang(66));
+	require_once(HOST_DIR . "upload/$uphost.php");
+} else html_error(lang(67));
+
 echo '<script type="text/javascript">var orlink="' . htmlspecialchars($lname, ENT_QUOTES) . ' to ' . htmlspecialchars($uphost, ENT_QUOTES) . '";</script>';
 
 if (!empty($download_link) || !empty($delete_link) || !empty($stat_link) || !empty($adm_link)) {
@@ -59,42 +64,33 @@
 	echo "</table>\n";
 
 	if (!$options['upload_html_disable'] && !isset($_GET['auul']) && !file_exists("$lfile.upload.html")) {
-		$upload_html = '<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml">
-<head>
-	<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
-	<title>' . lang(75) . '</title>
-	<style type="text/css">.bluefont,body{font-family:tahoma,arial,"times New Roman",georgia,verdana,sans-serif;font-size:11px}.linktitle,hr{border-style:solid}.bluefont,.host .links a,body{font-size:11px}body{color:#333;background-color:#EFF0F4;margin:0;padding:0}.linktitle{width:576px;background-color:#C291F9;text-align:center;padding:3px;margin:25px auto 0;border-width:1px 1px 0;border-color:#C7C4FB}.host .links,.host .title{text-align:left;padding:3px 0 3px 10px}.bluefont{color:#0E078F}hr{height:1px;background-color:#046FC6;color:#046FC6;width:90%;border-width:0}.host .links{width:95%;margin:0 auto;border:1px dashed #666;background-color:#F2F1FE}.host{width:600px;margin:10px auto}.host .links a{text-decoration:none;color:#666}.host .links a:hover{text-decoration:none;color:#E8740B}.host .title{width:95%;margin:0 auto;background-color:#C7C4FB;color:#000;font-size:12px;font-family:Georgia,"Times New Roman",Times,serif;border-width:1px 1px 0;border-style:dashed;border-color:#333}</style>
-</head>
-<body>' . sprintf(lang(76), htmlspecialchars($lname), bytesToKbOrMbOrGb($fsize));
-
-		$upload_html .= '<div class="host"><div class="title"><strong>' . htmlspecialchars($uphost) . '</strong> - <span class="bluefont">'.date("Y-m-d H:i:s").'</span></div>
-		<div class="links">'.
+		$upload_html = '<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>' . lang(75) . '</title><style type="text/css">.bluefont,body{font-family:tahoma,arial,"times New Roman",georgia,verdana,sans-serif;font-size:11px}.linktitle,hr{border-style:solid}.bluefont,.host .links a,body{font-size:11px}body{color:#333;background-color:#EFF0F4;margin:0;padding:0}.linktitle{width:576px;background-color:#C291F9;text-align:center;padding:3px;margin:25px auto 0;border-width:1px 1px 0;border-color:#C7C4FB}.host .links,.host .title{text-align:left;padding:3px 0 3px 10px}.bluefont{color:#0E078F}hr{height:1px;background-color:#046FC6;color:#046FC6;width:90%;border-width:0}.host .links{width:95%;margin:0 auto;border:1px dashed #666;background-color:#F2F1FE}.host{width:600px;margin:10px auto}.host .links a{text-decoration:none;color:#666}.host .links a:hover{text-decoration:none;color:#E8740B}.host .title{width:95%;margin:0 auto;background-color:#C7C4FB;color:#000;font-size:12px;font-family:Georgia,"Times New Roman",Times,serif;border-width:1px 1px 0;border-style:dashed;border-color:#333}</style></head><body>' . sprintf(lang(76), htmlspecialchars($lname), bytesToKbOrMbOrGb($fsize)) . '<div class="host"><div class="title"><strong>' . htmlspecialchars($uphost) . '</strong> - <span class="bluefont">' . date("Y-m-d H:i:s") . '</span></div><div class="links">' . 
 		(!empty($download_link) ? '<strong>'.lang(68).': <a href="'.htmlspecialchars($download_link).'" target="_blank">'.htmlspecialchars($download_link).' </a></strong>' : '').
 		(!empty($delete_link) ? '<br />'.lang(69).': <a href="'.htmlspecialchars($delete_link).'" target="_blank">'.htmlspecialchars($delete_link).' </a>' : '').
 		(!empty($stat_link) ? '<br />'.lang(70).': <a href="'.htmlspecialchars($stat_link).'" target="_blank">'.htmlspecialchars($stat_link).' </a>' : '').
 		(!empty($adm_link) ? '<br />'.lang(71).': <a href="'.htmlspecialchars($adm_link).'" target="_blank">'.htmlspecialchars($adm_link).' </a>' : '').
 		(!empty($user_id) ? '<br />'.lang(72).': <a href="'.htmlspecialchars($user_id).'" target="_blank">'.htmlspecialchars($user_id).' </a>' : '').
 		(!empty($access_pass) ? '<br />'.lang(74).': <a href="'.htmlspecialchars($access_pass).'" target="_blank">'.htmlspecialchars($access_pass).' </a>' : '').
 		(!empty($ftp_uplink) ? '<br />'.lang(73).': <a href="'.htmlspecialchars($ftp_uplink).'" target="_blank">'.htmlspecialchars($ftp_uplink).' </a>' : '').
-		'</div></div>';
-		write_file("$lfile.upload.html", $upload_html, 0);
+		'</div></div></body></html>';
+		file_put_contents("$lfile.upload.html", $upload_html);
 	}
 }
 
-echo $not_done ? '' : '<p><center><b><a href="javascript:window.close();">' . lang(77) . '</a></b></center>';
+
+if (empty($not_done)) {
+	echo '<p><center><b><a href="javascript:window.close();">' . lang(77) . '</a></b></center>';
 
 if (isset($_GET['auul'])) {
-	echo "<script type='text/javascript'>parent.nextlink{$_GET['auul']}();</script>";
+		printf('<script type="text/javascript">parent.nextlink%d();</script>', $_GET['auul']);
 	// Write links to a file
 	if (!$options['myuploads_disable']) {
 		if (empty($_GET['save_style']) || $_GET['save_style'] == lang(51)) $_GET['save_style'] = base64_encode('{name}\n' . str_repeat('=', 80) . '\n{link}\n');
 
 		$save_style = str_ireplace(array('{link}', '{name}', '\n', '{size}', '{sizeb}'), array($download_link, $lname, "\r\n", bytesToKbOrMbOrGb($fsize), $fsize), base64_decode($_GET['save_style']));
-		write_file(DOWNLOAD_DIR . 'myuploads.txt', "$save_style\r\n", 0); // Obviously it was a mistake not making it a variable earlier
+			file_put_contents(DOWNLOAD_DIR . 'myuploads.txt', "$save_style\r\n", FILE_APPEND | LOCK_EX); // Obviously it was a mistake not making it a variable earlier
+		}
 	}
 }
 
 include(TEMPLATE_DIR . '/footer.php');
-
-?>