Kurt111780
Technical User
Hello,
I have been trying to get a header download script to work so that the file path is not revealed when someone downloads a file. I found some nice code here . For some reason it didn't work so I modified it and it seems to be working in ie 6 and firefox now. Here is the code I have so far:
It works fine now but it only downloads files in the same directory as the script. How do I modify the code to use my $path variable?
Thanks,
Kurt
It's only easy when you know how.
I have been trying to get a header download script to work so that the file path is not revealed when someone downloads a file. I found some nice code here . For some reason it didn't work so I modified it and it seems to be working in ie 6 and firefox now. Here is the code I have so far:
Code:
<?php
$file = $_GET['fileName'];
$path="D:\inetpub\site\php\files";
//First, see if the file exists
if (!is_file($file)) { die("<b>404 File not found!</b>"); }
//Gather relevent info about file
// $len = filesize($file);
//$filename = basename($file);
$file_extension = strtolower(substr(strrchr($filename,"."),1));
//This will set the Content-Type to the appropriate setting for the file
switch( $file_extension ) {
case "pdf": $ctype="application/pdf"; break;
case "exe": $ctype="application/octet-stream"; break;
case "zip": $ctype="application/zip"; break;
case "doc": $ctype="application/msword"; break;
case "xls": $ctype="application/vnd.ms-excel"; break;
case "ppt": $ctype="application/vnd.ms-powerpoint"; break;
case "gif": $ctype="image/gif"; break;
case "png": $ctype="image/png"; break;
case "jpeg":
case "jpg": $ctype="image/jpg"; break;
case "mp3": $ctype="audio/mpeg"; break;
case "wav": $ctype="audio/x-wav"; break;
case "mpeg":
case "mpg":
case "mpe": $ctype="video/mpeg"; break;
case "mov": $ctype="video/quicktime"; break;
case "avi": $ctype="video/x-msvideo"; break;
//The following are for extensions that shouldn't be downloaded (sensitive stuff, like php files)
case "php":
case "htm":
case "html":
case "txt": die("<b>Cannot be used for ". $file_extension ." files!</b>"); break;
default: $ctype="application/force-download";
?>
<?php
//Begin writing headers
header("Pragma: private");
header("Expires: 0");
header("Cache-Control: must-revalidate, post-check=0, pre-check=0");
// header("Cache-Control: public");
header("Content-Description: File Transfer");
//Use the switch-generated Content-Type
header("Content-Type: application/force-download");
header("Content-Type: $ctype", FALSE);
header("Content-Type: application/download", FALSE);
//Force the download
//$header="Content-Disposition: attachment; filename=".$filename.";";
//header($header );
header("Content-Disposition: attachment; filename=".basename($file));
header("Content-Transfer-Encoding: binary");
header("Content-Length: ".filesize($file));
readfile("$file");
exit;
}
?>It works fine now but it only downloads files in the same directory as the script. How do I modify the code to use my $path variable?
Thanks,
Kurt
It's only easy when you know how.