This file is indexed.

/usr/share/photofloat/web/redirect.php is in photofloat 0~20120917+dfsg-3.

This file is owned by root:root, with mode 0o644.

The actual contents of the file can be viewed below.

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
<?php
function cachePath($path) {
	if ($path[0] == '/')
		$path = substr($path, 1);
	if ($path[strlen($path) - 1] == '/')
		$path = substr($path, 0, strlen($path) - 1);
	$path = str_replace('_-_', '-', str_replace('/', '-', str_replace(' ', '_', str_replace('(', '', str_replace(')', '', str_replace('#', '', str_replace('[', '', str_replace(']', '', str_replace('&', '', str_replace(',', '', str_replace('"', '', str_replace("'", '', strtolower($path)))))))))))));
	while (strpos($path, "--") !== false)
		$path = str_replace("--", "-", $path);
	while (strpos($path, "__") !== false)
		$path = str_replace("__", "_", $path);
	if (strlen(path) == 0)
		$path = "root";
	
	return $path;
}

$url = str_replace("\b", "", str_replace("\r", "", str_replace("\n", "", $_SERVER["SCRIPT_URL"])));
if ($url[strlen($url) - 1] == '/')
	$url = substr($url, 0, strlen($url) - 1);

if (strpos(strtolower($url), ".php") == strlen($url) - 4) {
	$url = substr($url, 0, strlen($url) - 4);
	$index = strrpos($url, "/");
	$redirect = "/#!/".cachePath(substr($url, 0, $index))."/".cachePath(substr($url, $index));
} else if (strpos(strtolower($url), ".jpg") == strlen($url) - 4) {
	$index = strrpos($url, "/");
	$redirect = "/#!/".cachePath(substr($url, 0, $index))."/".cachePath(substr($url, $index));
} else if (strpos($url, "/cache/") === 0 || strpos($url, "/albums/") === 0 || strpos($url, "/img/") === 0 || strpos($url, "/img/") === 0 || strpos($url, "/js/") === 0 || strpos($url, "/css/") === 0) {
	header("HTTP/1.1 404 Not Found");
	exit();
} else
	$redirect = "/#!/".cachePath($url);

header("HTTP/1.1 301 Moved Permanently");
header("Location: $redirect");

?>