sakura/public/imageserve.php

<?php
/*
 * Sakura user image serving
 */

// Declare Namespace
namespace Sakura;

// Define that this page won't require templating
define('SAKURA_NO_TPL', true);

// Include components
require_once str_replace(basename(__DIR__), '', dirname(__FILE__)) . '_sakura/sakura.php';

// Set Content type
header('Content-Type: application/octet-stream');

// Path to user uploads
$userDirPath = ROOT . Configuration::getConfig('user_uploads') . '/';

// Check if the m(ode) GET request is set
if (isset($_GET['m'])) {
    switch ($_GET['m']) {
        case 'avatar':
            // Set paths
            $noAvatar = ROOT . str_replace(
                '{{ TPL }}',
                $templateName,
                Configuration::getConfig('no_avatar_img')
            );
            $deactiveAvatar = ROOT . str_replace(
                '{{ TPL }}',
                $templateName,
                Configuration::getConfig('deactivated_avatar_img')
            );
            $bannedAvatar = ROOT . str_replace(
                '{{ TPL }}',
                $templateName,
                Configuration::getConfig('banned_avatar_img')
            );

            // If ?u= isn't set or if it isn't numeric
            if (!isset($_GET['u']) || !is_numeric($_GET['u'])) {
                $serveImage = $noAvatar;
                break;
            }

            // Get user data
            $user = new User($_GET['u']);

            // If user is deactivated use deactive avatar
            if ($user->checkIfUserHasRanks([0, 1])) {
                $serveImage = $deactiveAvatar;
                break;
            }

            // Check if user is banned
            if ($user->checkBan()) {
                $serveImage = $bannedAvatar;
                break;
            }

            // Check if user has an avatar set
            if (empty($user->data['user_data']['userAvatar']) || !file_exists($userDirPath . $user->data['user_data']['userAvatar'])) {
                $serveImage = $noAvatar;
                break;
            }

            // Check if the avatar exist and assign it to a value
            $serveImage = $userDirPath . $user->data['user_data']['userAvatar'];
            break;

        case 'background':
            // Set paths
            $noBackground = ROOT . Configuration::getConfig('no_background_img');

            // If ?u= isn't set or if it isn't numeric
            if (!isset($_GET['u']) || !is_numeric($_GET['u'])) {
                $serveImage = $noBackground;
                break;
            }

            // Get user data
            $user = new User($_GET['u']);

            // If user is deactivated use deactive avatar
            if ($user->checkIfUserHasRanks([0, 1])) {
                $serveImage = $noBackground;
                break;
            }

            // Check if user is banned
            if (Bans::checkBan($_GET['u'])) {
                $serveImage = $noBackground;
                break;
            }

            // Check if user has a background set
            if (empty($user->data['user_data']['profileBackground'])
                || !file_exists($userDirPath . $user->data['user_data']['profileBackground'])) {
                $serveImage = $noBackground;
                break;
            }

            // Check if the avatar exist and assign it to a value
            $serveImage = $userDirPath . $user->data['user_data']['profileBackground'];
            break;

        case 'header':
            // Set paths
            $noHeader = ROOT . Configuration::getConfig('no_header_img');

            // If ?u= isn't set or if it isn't numeric
            if (!isset($_GET['u']) || !is_numeric($_GET['u'])) {
                $serveImage = $noHeader;
                break;
            }

            // Get user data
            $user = new User($_GET['u']);

            // If user is deactivated use deactive avatar
            if ($user->checkIfUserHasRanks([0, 1])) {
                $serveImage = $noHeader;
                break;
            }

            // Check if user is banned
            if (Bans::checkBan($_GET['u'])) {
                $serveImage = $noHeader;
                break;
            }

            // Check if user has a background set
            if (empty($user->data['user_data']['profileHeader'])
                || !file_exists($userDirPath . $user->data['user_data']['profileHeader'])) {
                $serveImage = $noHeader;
                break;
            }

            // Check if the avatar exist and assign it to a value
            $serveImage = $userDirPath . $user->data['user_data']['profileHeader'];
            break;

        default:
            $serveImage = ROOT . Configuration::getConfig('pixel_img');

    }
} else {
    $serveImage = ROOT . Configuration::getConfig('pixel_img');
}

$serveImage = file_get_contents($serveImage);

header('Content-Type: ' . getimagesizefromstring($serveImage)['mime']);

print $serveImage;