Request->Items['path']; $fullPath=realpath($this->Service->BasePath.'/'.$path); if($fullPath!==false && is_file($fullPath) && strpos($fullPath,$this->Service->BasePath)!==false) { if($this->isFileTypeAllowed($this->getFileExtension($fullPath))) { $this->_fullPath=strtr($fullPath,'\\','/'); $this->_path=strtr(substr($fullPath,strlen($this->Service->BasePath)),'\\','/'); } } if($this->_fullPath===null) throw new THttpException(500,'File Not Found: %s',$path); $basePath=dirname($this->_fullPath); if($dh=opendir($basePath)) { $str="