Hi,
How can I hide my download url so that everyone has to register first and not go directly to my
ty,
angelbear
How can I hide my download url so that everyone has to register first and not go directly to my
ty,
angelbear
Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations strongm on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
hide my url
- Thread starter Phutie
- Start date
danielhozac
Programmer
Put your downloads in a directory outside of your webtree. Like if your web files are in /var/ you could put it in /usr/local/sites/downloads or whatever directory you want. Then write a script that checks if a user is logged in, if the user is logged in, fetch the file and print it to the browser.
Such a script could look something like this:
//Daniel
Such a script could look something like this:
Code:
<?php
$directory = "/path/to/downloads/"; // Remember the trailing slash here
if ($userIsLoggedIn) // Change this line to whatever you use to check if someone is logged in.
{
$file = preg_replace(array("/\.\./", "!/!"), array("", ""), $_GET['file']); // Replace .. and /, this secures the script somewhat
if (file_exists($directory . $file))
{
header('Content-type: INSERT MIME TYPE HERE'); // You have to change the mime type here to match the mime type of your documents
readfile($directory . $file);
}
else
{
echo "File could not be found.";
}
}
else
{
echo "You have to be logged in to download.";
}
?>I use these 2 scripts, the first one I embed in the download page, the second you *should* never see and it "pushes" the download at you.
If someone heads directly for download.php it won't be much help to them
*note, change YOUR_HIDDE_DIRECTORY to the right path.
-----------------sender.php
<?php
if(!file_exists("YOUR_HIDDE_DIRECTORY/$filename"){
echo "<html><head><title>404 - File not found</title></head<<body>";
echo "<h1>Unspecified file or file not found</h1><br> File: <b>$filename</b> Not located on this server";
echo "</body></html>";
}else{
if(isset($filename)){
$counter = "$filename.txt";
if(!file_exists($counter)){
echo "File: $filename has been downloaded 0 times<br>";
}else{
$fd = fopen ($counter, "r"
$count = fread ($fd, filesize ($counter));
fclose ($fd);
echo "File: <b>$filename </b>has been downloaded <b>$count</b> time(s)<br>";
}
echo "<form name=download action=download.php method=post>";
echo "<input type=hidden name=filename value=\"$filename\">";
echo "<input type=hidden name=count value=\"$count\">";
echo "<input type=hidden name=counter value=\"$counter\">";
echo "<input type=submit value=\"download it\">";
echo "</form>";
}else{
echo "<h1> Select a file you muppet!</h1>";
}
}
?>
------------download.php
<?php
if(isset($filename)){
if(file_exists("YOUR_HIDDE_DIRECTORY/$filename"){
$size = filesize('YOUR_HIDDE_DIRECTORY/$filename');
header("Content-Type: application/save"
header("Content-Length: $size"
header("Content-Disposition: attachment; filename=$filename"
header("Content-Transfer-Encoding: binary"
$fh = fopen("YOUR_HIDDE_DIRECTORY/$filename", "r"
fpassthru($fh);
// increment counter
$count++;
$fp=fopen("$counter","w"
fputs($fp, $count);
fclose($fp);
exit;
}else{
echo "No file selected";
}
}else{
echo "<h1>Use the proper file selection method or go away!</h1>";
}
?> ______________________________________________________________________
There's no present like the time, they say. - Henry's Cat.
If someone heads directly for download.php it won't be much help to them
*note, change YOUR_HIDDE_DIRECTORY to the right path.
-----------------sender.php
<?php
if(!file_exists("YOUR_HIDDE_DIRECTORY/$filename"
){echo "<html><head><title>404 - File not found</title></head<<body>";
echo "<h1>Unspecified file or file not found</h1><br> File: <b>$filename</b> Not located on this server";
echo "</body></html>";
}else{
if(isset($filename)){
$counter = "$filename.txt";
if(!file_exists($counter)){
echo "File: $filename has been downloaded 0 times<br>";
}else{
$fd = fopen ($counter, "r"
;$count = fread ($fd, filesize ($counter));
fclose ($fd);
echo "File: <b>$filename </b>has been downloaded <b>$count</b> time(s)<br>";
}
echo "<form name=download action=download.php method=post>";
echo "<input type=hidden name=filename value=\"$filename\">";
echo "<input type=hidden name=count value=\"$count\">";
echo "<input type=hidden name=counter value=\"$counter\">";
echo "<input type=submit value=\"download it\">";
echo "</form>";
}else{
echo "<h1> Select a file you muppet!</h1>";
}
}
?>
------------download.php
<?php
if(isset($filename)){
if(file_exists("YOUR_HIDDE_DIRECTORY/$filename"
){$size = filesize('YOUR_HIDDE_DIRECTORY/$filename');
header("Content-Type: application/save"
;header("Content-Length: $size"
;header("Content-Disposition: attachment; filename=$filename"
;header("Content-Transfer-Encoding: binary"
;$fh = fopen("YOUR_HIDDE_DIRECTORY/$filename", "r"
;fpassthru($fh);
// increment counter
$count++;
$fp=fopen("$counter","w"
;fputs($fp, $count);
fclose($fp);
exit;
}else{
echo "No file selected";
}
}else{
echo "<h1>Use the proper file selection method or go away!</h1>";
}
?> ______________________________________________________________________
There's no present like the time, they say. - Henry's Cat.
- Thread starter
- #5
- Thread starter
- #6
Im trying what Karver suggested but it gives me an error:
Unspecified file or file not found
I replaced the YOUR_HIDDE_DIRECTORY with the specific path of my setup.exe like this:
if(!file_exists("
what could be wrong?
Unspecified file or file not found
I replaced the YOUR_HIDDE_DIRECTORY with the specific path of my setup.exe like this:
if(!file_exists("
what could be wrong?
danielhozac
Programmer
The path should be a LOCAL path, not a URL. //Daniel
- Thread starter
- #8
- Thread starter
- #9
Ohh hard one, you'd need to use java client side to confirm the download back to the server, thats well beyond me I'm afraid.
Another point tho, for more security you can use :
if($HTTP_REFERER == "<download.php code>
}else{
echo "please download the file from my sites links";
} ______________________________________________________________________
There's no present like the time, they say. - Henry's Cat.
Another point tho, for more security you can use :
if($HTTP_REFERER == "<download.php code>
}else{
echo "please download the file from my sites links";
} ______________________________________________________________________
There's no present like the time, they say. - Henry's Cat.
- Status