How to restrict files only for login users.

[rahuul]

hi...

 

I have a site that allows user to download some files.

 

at present if i type http://www.abc.com/files/xyz.zip it allows all the users to access and download files.

 

I want only the login users can access these files....... pls help how to do this.

 

thanks in advance

[aabid]

<? 
$dir="/path/to/file/";
if (isset($_REQUEST["file"]) && _SESSION["loggedin"] = TRUE) {
    $file=$dir.$_REQUEST["file"];
    header("Content-type: application/force-download");
    header("Content-Transfer-Encoding: Binary");
    header("Content-length: ".filesize($file));
    header("Content-disposition: attachment; filename="".basename($file).""");
    while(!feof($file)) {
		$buffer = fread($file, 2048);
		echo $buffer;

} else {
    echo "No file selected";
}
?>

 

May be this can work for you although i haven't tested it, so am not sure. I bet there might be some other ways better than that to do the stuff

[rahuul]

hi... thanks for your reply.....

 

but if a user directly access http://www.abc.com/files/xyz.zip without opening any page of my site who will i use this type of php script.

[aabid]

Using session variable like _SESSION[loggedin] ensures that the user is logged in and in turn is on your site.