<?
/* ---------------------------------------------------------------
eayz Syndication Module (pay per view)
======================================

Images are leased to partners for a certain time. 
Payment will be made after this time according to view Count!
or in Advance - then Photo will expire after MaxViews.
This script will have to run on different SERVERS: static.bilderbeute.de etc.

Parameter:
  k 	- encoded URL

  :: ezsID 
  :: expires - expiry Date
  [:: itemID ]] for setViews with same license via zkit 
  :: referer 
  
ezsID
  ID of a Container.ezs (Owner is Customer)
    ezs_maxViews: 
    ezs_currentViews (batch aus TX)/viewCount
    ezs_expiryDate
    ezs_referer (.dom.tld)
    ezs_cpV - Price per View (0.0001 �)
    ezs_exclusive (true|false)
    ezs_itemID (photo)
    ezs_imageCaption
    ezs_imageAuthor
    ezs_thumb

TODO: 
  optimize secUrl Tests first
  
------------------------------------------------------------------*/
$key=$_REQUEST['k'];

# session_cache_limiter this way!: prevents auto headers
session_cache_limiter("must-revalidate");
header("Cache-Control: private, max-age=360, must-revalidate");

include "prolog.inc.php";
require_once ($CMS['sys_path']."/lib/encrypt.php");

# alias of an image in the database
define(image_not_available, 'img-notAvailable');
$ezsDEBUG=true;
$allowView=true;
$referer=null;

# processing certificate
$attrs=zack_decodeProperties($key); 
#var_dump($attrs);
$ezsID=$attrs['l'];
$imgID=$attrs['i'];
$expire=$attrs['x'];
$size=$attrs['s']; # .$attrs['s']; // size = MM or LL
$valid_referer=$attrs['r'];
$count=true;

if($expire<=time()){
  $allowView=false;
  #echo "exp:false";
}

if(isset($_SERVER['HTTP_REFERER'])){
  $tmp=parse_url($_SERVER['HTTP_REFERER']);
  $referer=$tmp['host'];
}
else 
  $referer=$valid_referer;

#error_log("*** ezS: referer - ". $referer.'/'.$valid_referer. ":eof"); 

if($valid_referer != $referer ){
    $allowView=false;
}

# bilderbeute always ok ? - big question
if(preg_match('/bilderbeute/i',$referer)){
    $allowView=true;
    $count=false;
}

if($allowView && $ezs=$ZACK->obj_read($ezsID)){
  if($ezs->values['viewCount']>=$ezs->values['ezs_maxViews'] ){
    $allowView=false;
  }  
}

$file=$ZACK->rsrc_Path(null, $imgID, false);
$file.='__'.$size.'.jpg';

# update views iff we delivered the real image
if($allowView && $count && $ZACK->db->lock($ezs->ID,4 )) {
  
  $ZACK->db->viewCountAdd($ezsID);
  $ZACK->db->release($ezs->ID);
    
  # statistics
  $tx=array('txType' => 'ppvw', 'itemType' => 'foto', 'userID' => $ezs->ownerID,
            'itemID' => $ezsID, 'txID' => $_SERVER["REMOTE_ADDR"], 'amount' => 1 );
  $ZACK->TX('ppvw', $tx);
}

if(!$allowView) {
  if($ID=$ZACK->obj_getIDFromAlias(image_not_available)){
    $file=$ZACK->rsrc_Path(null, $ID, false);
    $file.='__M.jpg';  
  }
  else
    exit;
}
    
if(file_exists($file)) {
  header("Content-type: image/jpg");
  $handle = fopen ($file, "r");
  while($data = fread ($handle, 8192))
    echo $data;
  fclose ($handle);
}
	

?>