Re: Downloading files outside the webserver

That is a very nice solution, the problem is, the files are stored on disk, not on the DB. I suppose it can be addapted to work with the disk, can't it? Cheers, Daniel "Marek Kilimajer" <kilimajer@webglobe.sk> wrote in message news:3E649CDF.8050707@webglobe.sk... > create a download php file: > > <?php > > $res=mysql_query("select * from user_files where filename='$GET['file']'"); > > if($res && mysql_num_rows($res)) { > $file=mysql_fetch_assoc($res); > if($_GET['downaload']) { > header('Content-Type: application/octet-stream'); > header('Content-disposition: attachment; > filename='.basename($file['filename'])); > } else { > header('Content-Type: '.$file['mimetype']); > header('Content-disposition: attachment; > filename='.basename($file['filename'])); > } > header('Content-Length: '.filesize($file['filename'])); > readfile($file['filename']); > } else { > echo 'no such file'; > } > ?> > > Then create a link: > <a href="file.php?filename=path/file">view</a> > <a href="file.php?filename=path/file&amp;download=1">download</a> > > This example assumes you have a table user_files, where you store > uploaded files with their mime types, this is a security check > > Daniel Silva wrote: > > >Hello, > > > >I'm currently working on a multi-user filemanager, on which each user has > >its space on the server and can do all the basic file operations we've all > >seen. > > > >I've looked all over the net and the manual, but I can't seem to find the > >solution for what I want. > > > >The system I'm creating keeps all user files in a folder outside the > >webserver, this is to say, any folder the admin defines, such as > >/home/john/webusers . > > > >The site shows all files contained in the userdir and lets him manipulate > >them. Of course, I want to let the users download their files, but as they > >aren't inside the webserver's "scope", I just can't simply link to > >them. > > > >Is there any way I can implement this? To download a file located at X > >directory, anywhere in the system? And taking security into consideration, > >of course. > > > >Thanks in advance, > > > >Daniel Silva > > > > > > > > > > > > > > >