37 lines
670 B
PHP
37 lines
670 B
PHP
<?php
|
|
|
|
require_once 'lib/base.php';
|
|
|
|
$mode = \OC_Avatar::getMode();
|
|
if ($mode === "none") {
|
|
exit();
|
|
}
|
|
|
|
if (isset($_GET['user'])) {
|
|
//SECURITY TODO does this fully eliminate directory traversals?
|
|
$user = stripslashes($_GET['user']);
|
|
} else {
|
|
$user = false;
|
|
}
|
|
|
|
if (isset($_GET['size']) && ((int)$_GET['size'] > 0)) {
|
|
$size = (int)$_GET['size'];
|
|
if ($size > 2048) {
|
|
$size = 2048;
|
|
}
|
|
} else {
|
|
$size = 64;
|
|
}
|
|
|
|
|
|
$image = \OC_Avatar::get($user, $size);
|
|
|
|
if ($image instanceof \OC_Image) {
|
|
$image->show();
|
|
} elseif (is_string($image)) { // Gravatar alike services
|
|
header("Location: ".$image);
|
|
} else {
|
|
$image = \OC_Avatar::getDefaultAvatar($size);
|
|
$image->show();
|
|
}
|