It's also straight forward to hide the location o the original file by
using fopen, fread.
// authentication logic, then...
$fileName = 'whatever.ppt';
$filePath = 'folder/' $fileName;
header('Content-Disposition: atachment; filename="' . $fileName . '"');
header("Content-Type: application/ppt"); // <-- not sure this is right
header("Content-Length: " . filesize($filePath));
header("Pragma: no-cache");
header("Expires: 0");
$fp=fopen("$filePath","r");
print fread($fp, filesize("$filePath"));
fclose($fp);
On Tue, 28 Oct 2008 22:40:26 -0400, "David Mintz" <[EMAIL PROTECTED]>
said:
> You folks have done this a thousand times so it's cake to you. This is
> the
> first time I have had to make a Powerpoint download available only to
> authenticated users. Tell me if it's this simple:
>
> <?php
> /* download.php pr something like that */
>
> // authentication logic. Then, if they're logged in...
>
> header('Content-disposition: attachment; filename=whatever.ppt');
> header('Content-type: application/vnd.ms-powerpoint');
> readfile('whatever.ppt');
>
> And yes, I think I will put an apache directive in there to deny direct
> browser access so they can't defeat it by accessing
> http://example.org/password-protected-area/whatever.ppt. Or maybe put it
> somewhere outside the public html.
>
> Is that it, or am I missing anything?
>
> --
> David Mintz
> http://davidmintz.org/
>
> The subtle source is clear and bright
> The tributary streams flow through the darkness
//
Corey H Maass
Gelform Design
Brooklyn, NY
Print and web design for art and business
em [EMAIL PROTECTED]
ww http://www.gelform.com
ph 646/228.5048
fx 866/502.4861
IM gelform
_______________________________________________
New York PHP Community Talk Mailing List
http://lists.nyphp.org/mailman/listinfo/talk
NYPHPCon 2006 Presentations Online
http://www.nyphpcon.com
Show Your Participation in New York PHP
http://www.nyphp.org/show_participation.php
