How to write a download page using php?

Anon

$filename="1.avi";

if( $fp=fopen( $filename, "r" ) )
{
Header("Content-type: file/unknown");
Header("Content-Disposition: attachment; filename=1.avi");
Header("Content-Description: PHP3 Generated Data");
while( $data=fread( $fp,filesize($filename) ) )
{
echo $data;
}
}
else
ErrorMsg("File does not exist.");

why does not work?

Anon

filename: example.php

the code:

<?
if(isset($id)){
header("Location: $id");
} else {
echo "Nothing to do!";
}
?>

pass filenames to it like this:

example.php?id=filenamehere

MUCH EASIER!

Anon

But I'd like to have control on the downloading. For example, only from some ips can download the file, etc. without using the authentication of apache.

pyroxpro.com wrote:

filename: example.php

the code:

<?
if(isset($id)){
header("Location: $id");
} else {
echo "Nothing to do!";
}
?>

pass filenames to it like this:

example.php?id=filenamehere

MUCH EASIER!

[deleted]

Do you get any errors? what 'does not work'?

[deleted]

you really ought to get that 'brainstorm' thing under control there :-)

downloading a file is much different from sending a browser to a url that happens to be a file :-)

Anon

as long as you dont output any text before sending that header, you can check their ip and everything. This works for downloads as well.

Its no different than clicking on a link to a file for download. I use code like that on my download page and have not had a single problem with it.

This was not a brainstorm, it works just fine

[deleted]

"Its no different than clicking on a link to a file for download"

and that is exactly the point.

a) If you redirect a user to an AVI, and the browser knows how to handle AVI, it will start playing it instead of downloading it to disk.

b) by redirecting the user to the file, he can bookmark it, send it to his friends, and bypass all security you tried to build in through the script. Using the headers he must always load the script to get to the file.