readfile()

[Anon]

Hey, I wrote a script that allows users to upload files to my site, however the files are kept in a hidden unknown directory so that users can not just run files off my website. I also have a script that lets the users download the files that were previously uploaded out of the hidden folder. I thought I had to use readfile() so that the user can not see where the file is actually coming from, but when I do this:

readfile("http://www.stardefenders.f2s.com/myhiddenfolder/somefile.exe");

It displays the binary data, cant I just have is so that the file gets downloaded and not displayed??? Thanx!

-Jason Rottman

[Anon]

you probably have to specify the content type in the header. this tells the browswer whether it should download or display the file.

header("Content-type: application/force-download;name=/$file_name");
header("Content-Disposition: filename=$file_name");
header("Content-Transfer-Encoding: binary");

try that...

-paul
http://xhawk.net