RE: [PHP] choosing the name to save a file as in a script

Just to keep everybody posted, I tried it on my personal server and it worked fine :) I used this for a simple test (test.php): <? header("Content-type: application/x-zip-compressed") ; header("Content-Disposition: attachment; filename=file.zip"); ?> The browser prompted me to save the file "file.zip" (which was 0 byte because I'm not echoing anything) Now I only have to add my user authentification and the actual reading of the file and I'll be done :) Just a small question, in the headers of your example, you put a "filename=" parameter both for content-type and content-disposition. I don't really see why I would need to put it in the content-type one... Is it for compatibility with other browsers or something? Thanks again for your help, it works :) -----Original Message----- From: Michael Kimsal [mailto:michael@tapinternet.com] Sent: Tuesday, December 26, 2000 19:23 To: Blaster Cc: php-general@lists.php.net Subject: Re: [PHP] choosing the name to save a file as in a script Don't bother with the 'filename.ext' part - just get the ID parameter. Look up the filename in a database of what the filename.ext should be for file ID xxxxxx. Then send header("Content-type: ".$db->Record["filemime"]." ; filename=".$db->Record["filename"]); header("Content-Disposition: attachment; filename=".$db->Record["fullfilename"] ); $f = fopen($db->Record["localfilename"],"r"); $x = fread($f,filesize($db->Record["localfilename"])); fclose($f); echo $x; exit(); well - don't use $db->Record, etc. This is code we use to send a file down to someone who sends in a particular string ID. We control the filename, the MIME type, and who gets access to what file. Haven't tried it under IIS using PHP, but I'd think the underpinnings are pretty much the same across the board. Blaster wrote: > Hi everyone, > > I've seen something very interesting on some site that would allow me to use > PHP-authentification to allow download of certain files.... Here's what the > link on the site looks like: > > http://www.whatever.com/view.php3/filename.ext?id=17982 > > Now, the script that sends the file is view.php3. What this does is get a > file with id 17982, either by reading it from a database or something (not > important) and sends it back to the browser and the browser thinks it is > actually file "filename.ext"... > > What I don't get is how can you pass "/filename.ext?id=17982" as an > argument? I tried it and the web server will of course look for file > "filename.ext", but it doesn't exist since view.php3 is obviously not a > directory... > > Any ideas how this can be achieved? I thought it could be some kind of 404 > error redirection to a php script, but then all bad links on the whole site > would be sent to that script and they don't appear to be (at least I get a > normal 404 error everywhere else) > > Thanks for your time