header() for file download?

Kudose

I read that headers can force file downloads somewhere. Would this in theory work?

<?
$file = $HTTP_GET_VARS['file'];

$filename = mysql_query("SELECT filename FROM table WHERE file='$file'") or die(mysql_error());

header("Content-Disposition: attachment; filename='$filename'");
?>

The reason I am not just downloading by URL is becuase I dont want the user to know where the file is being stored so he cant just directly enter the URL to get the file.

THANKS!

Weedpacket

You'll want
Content-Type: application/octet-stream
as well.

Kudose

Well, it kinda worked. It asks me if I want to DL a file, but it isnt the file I want it too, it isnt even on my server, then when it DLs it says windows has now clue how to open the file.

Grr.

It says the filename is download, and when it tries to open it it says Cant open download[1] choose program to open file. Or something to that affect.

Thanks again Weedpacket.

Kudose

Here is my link script:

include('dbinfo.inc.php');
include('css.php');
$query = mysql_query("SELECT * FROM scripts WHERE type='gnu'") or die(mysql_error());
$num = mysql_num_rows($query) or die(mysql_error());
for($i=0; $i<$num; $i++){
$fetch = mysql_fetch_array($query) or die(mysql_error());
$name = $fetch['name'];
$descrip = $fetch['descrip'];
$downloads = $fetch['downloads'];
$mysql = $fetch['mysql'];
$type = $fetch['type'];
$filename = $fetch['filename'];
$cat = $fetch['cat'];
$id = $fetch['id'];
echo "<br> <b><a href='download.php?file=$id' target='_blank'>$name </a></b>.::. <b>Category:</b> $cat .::. <b>MySQL Needed:</b> $mysql .::. <b>Downloads:</b> $downloads <br> <b>Description:</b> $descrip <br><br>";
}

Here is my download.php page

<? 
include('dbinfo.inc.php');
$id = $HTTP_GET_VARS['file']; 
$filename = mysql_query("SELECT filename FROM scripts WHERE id='$id'") or die(mysql_error()); 
mysql_query("UPDATE scripts SET downloads=downloads+1 WHERE id='$id'") or die(mysql_error()); 
header("Content-Disposition: attachment; Content-Type: application/octet-stream; filename='scripts/$filename'"); 
?>

Hope that sheds some light. Thanks!