PHP Download Script

ningham

Okay, so download scripts are all the rage and there are lots of posts about them. I'm trying to get a download script perfected as well and am having some trouble.
But not with getting the file downloaded - that works just fine. How do you get it to work without losing the page that has the link?
For instance, right now, mysq download script has:

header("Content-type: application/octet-stream");
header("Content-Disposition: attachment; filename=$filename");
header("Content-Description: Laika Attachment");
header("Pragma: no-cache");
header("Expires: 0");

And the file gets there no proble.  But the page that has the HREF get's blanked and shows a server error.  I've tried setting a TARGET=NEW in the HREF.  Which keeps the page with teh HREF there, but pops up a new window, then shows a save dialog.
Now, I've seen these download pages on many sites.  And it's most likely a mix of META tags, JavaScript, and PHP or something like that.  Does anyone have an elegenat example of how to do this?

Anon

Leave the HREF target as new and add to the body of the new page

Anon

hallo there, sorry i need a php script for simple web ecommerce, thank for your help

Anon

Well I looked all over the web for an hour and found nothing, so I built my own. Here it is in case original poster didn't find a solution or another individual in the future needs an answer to the same problem.

<?php

Cheap "invalid referer rejection" script for downloads.

by Flatnoise.com ; inspired from oreilly tutorial.

howto?

call this script as a url, like http://foo/script.php?file=somename.ext

if referer or filename is bad, then download is rejected.

put the following .htaccess in a well configured apache FILEDIR

as defined with /path/to/files/directory/ below

AuthUserFile /dev/null

AuthGroupFile /dev/null

AuthName DenyViaWeb

AuthType Basic

<Limit GET>

order allow,deny

deny from all

</Limit>

Last modified April 26, 2002

// modify next two values.
$referers = array ('domain.com','www.domain.com','192.168.1.1');
define('FILEDIR', '/path/to/files/directory/');

// don't touch beyond here...
$path = FILEDIR . $file;

//check that the user has permission to download file
if ($referers) {
   if (!(check_referer($referers))) {
      exit;
   }
}

//check that this file exists and that it doesn't include
//any special characters
if(!is_file($path) OR !eregi('^[A-Z_0-9][A-Z_0-9.]*$', $file))
{
    print "An error occured with the filename or path.";
    exit();
}

$p = explode('.', $file);
$pc = count($p);

//force download dialog
header("Content-type: application/octet-stream\n");
header("Content-disposition: attachment; filename=\"$file\"\n");
header("Content-transfer-encoding: binary\n");
header("Content-length: " . filesize($path) . "\n");

//send file contents
$fp=fopen($path, "r");
fpassthru($fp);