file uploading into protected directory

[Anon]

Hi, I allow my users to upload files directly to my site using the copy() funciton. When they submit their files, my script puts them in a protected directory so that no one can screw up my website. But now I need a way for others to download these files. Do I just create a link on my site directly to the file which is still placed in the protected directory?? I thought I heard something about first needing the script to move the file out of the protected directory, and then people can download it. Well if this is so, how do you do it?? I appreciate your time and help...Thankyou!
-Jason Rottman

[inter_joe]

use readfile()

for example:
you have the following link on a page, where your user can click to download
<a href="getfile.php?name=foofile">

in getfile.php you read the file and send it to the browser (all done by reafile() ).
but make sure that you first sent a header to tell the browser what kind of file you're sending

<?
// change this accordingly
Header("Content-type: text/html"); // html will come
// Header("Content-type: image/gif"); // gif
// Header("Content-type: text/plain"); // text
// etc.

readfile("hidden/directory/".$name);

// thats it
?>

may do some checks before you readfile(), file exists,
no path informations in $name (what if someone calls your script with:
name=../../usr/pwd)

hope that helps