Help with FTP functions!

[dmeyers]

I'm a Intern for a IT company and I'm creating a software upgrade download panel for them and I everything was going great till I hit this one glitch. I couldn't have a user a define where they want to download. At first I tried to look for a solution that will let the user browse for the file within their page such as <input type="file" name="test"> but edited some how with javascript, active x, but there really was no good solution except use asp which I'm trying to stay away from. So I was wondering if anybody knows a way to have the user define the folder they want to download to by invoking some sort of SaveAs prompt or any way that is clear and easy that will return the string location such as "C:/windows/temp".

I'm using this pretty cleancut code for the get.

if (ftp_get($conn_id, "$LocalHarddrive", $filename, FTP_BINARY)) {
echo "Successfully downloaded CLICK HERE TO CLOSE";
} else {
echo "There was a problem please contact the server administrator\n";
}

Also would I be able to use the ftp wrapper and invoke it manually instead of that once I connect with the ftp functions? I'm trying to keep all the locations of the files and passwords protected.

I'm new to this site, and I'm hoping to become a active member. Thank you everybody for your time!

[AstroTeg]

You setting up just a typical download page? I'm not exactly sure how FTP is going to fit. It looks like you're trying to FTP a file down to the user. Are you sure each user will have an FTP server actively listening for an FTP session?

Why not just do an HTTP download?

[dmeyers]

yah i have a decidated ftp site for the folders and I'm designing a download site but specialized in these features:

• User does not know the location of the file.
• User does not know the user name or pass to logon ftp.
• User will only have access to specific files and the ftp will disconnect after the file they are allowed is downloaded.
• The ftp site will be used as a ftp site as well, so the data only needs to be updated in one place.

I was able to program everything out in a safe and secure way where the user downloads only what they are provided with no knowledge of where the file's from the software is 10,000 - 20,000 so I'm trying to keep everything very secure.

The only problem i have is I want the user to define where they want the file downloaded and I've found

-possible asp, but i did everything is php
- active x works but too much security and barly works
- javascript, dunno?
- php i know you can invoke it somehow but not sure

Thats why I was thinking if i could connect to it and use the ftp wrappers some how then close the connection it woudl be good enough.

Cany anybody help 😕 😕

[AstroTeg]

Ahhh... I see.

Ok. FTP adds a level of complexity on your side, but I think you can still do it.

I think the following thought process might work:

• Web server establishes FTP connection to file server (I'll call it that - your name may be different) using PHP
• PHP retrieves file - ideally you want the file contents to be in memory if the web server can do it. Otherwise, you'll need to store this file as a temp file in a secure location on the web server.
• Open temp file as binary
• issue download content type to client browser (octet/binary I think is the content type you may want - your mileage may vary depending on what the file is and you may want to look up the different flavors)
• Have PHP read the binary data and echo/print it out to the client (fread() may help get the job done)
• When you issue the content type header, the browser should freak out and prompt the user for where they want to download the file
• User selects file location and hits ok
• Browser resumes transfer
• After PHP is done reading the file, have PHP delete the temp file (make sure temp file name is unique)

This is complex, but divide and conquer and you'll get it. Work on getting the FTP file over to the web server in a secure spot. Then work on getting PHP to feed a file to a browser. Then combine these two processes together.

Directly FTPing to the user will not work. They probably will not have an FTP server running on their machine. You also noticed prompting the user for a directory is not the easiest thing to do (and is a security risk which is why its so painful to try doing). So if you just feed a content type to the browser that the browser knows is an automatic download, then the browser will do all the work for you.

[dmeyers]

wow thanks, i guess i should read up i have no idea how to do all of that. Thanks!