Download software once

[flyzoid]

I'm trying to make a script to download a file without them knowing the filename so that they can't give the filename to someone else.

I've got all the filenames in a database and I send the customer to download.php?id=3 (for example) and I change the headers so that it downloads the file. This works fine and they never see the filename. BUT, I need to make sure they can only download the file if they have my permission (otherwise they can just choose a number and download the file).

Thanks for any help!

[Anon]

Make download.php check the HTTP_REFERER variable and only send files if that matches some page on your site.

This way they have to go through your site to get to the download.php script and all of the security that you've already set up on previous pages.

[flyzoid]

Thanks