<?
define('IN_COPPERMINE', true);


$pid = $_REQUEST["pid"];
$mode = $_REQUEST["mode"];

echo $pid;
echo $_REQUEST["pid"];
echo "****";

if (!isset($pid) || $pid == '') {
    die('bad request (pid)');
}
if (!isset($mode) || $mode == '') {
    die('bad request (mode)');
}

function add_slashes($str) {
    return (get_magic_quotes_gpc() == 1) ? $str : addslashes($str);
}

$pid = add_slashes($pid);

$sql = "SELECT * FROM ".$CONFIG['TABLE_PREFIX']."pictures WHERE pid=$pid";
$db = mysql_connect($CONFIG['dbserver'], $CONFIG['dbuser'], $CONFIG['dbpass']);
mysql_select_db($CONFIG['dbname'], $db);

$result = mysql_query($sql, $db);
$row = mysql_fetch_array($result);

$pic_prefix = array(
   'thumb' => $CONFIG['thumb_pfx'],
   'normal' => $CONFIG['normal_pfx'],
   'fullsize' => ''
);

header('Content-Type: image/jpeg');
header("Content-Disposition: inline; filename=".($row["filename"]).";");

$cmd = "{$CONFIG['impath']}composite -strip -compose over -gravity SouthEast \"".realpath("./watermark.png")."\" \"".realpath('./'.$CONFIG["fullpath"].$row["filepath"].$pic_prefix[$mode].$row["filename"])."\" jpg:-";
$cmda = "{$CONFIG['impath']}composite -compose over -gravity SouthEast \"".realpath("./watermark.png")."\" \"".realpath('./'.$CONFIG["fullpath"].$row["filepath"].$pic_prefix[$mode].$row["filename"])."\" jpg /svc/urbantwilight.net/www/data/test/test.jpg";

echo $cmd;

passthru ($cmd, $output);


?>