how to hide the actual download folder location

by

This is how I do it in PHP:

<?php
$fakeFileName= "fakeFileName.zip";
$realFileName = "realFileName.zip";

$file = "downloadFolder/".$realFileName;
$fp = fopen($file, 'rb');

header("Content-Type: application/octet-stream");
header("Content-Disposition: attachment; filename=$fakeFileName");
header("Content-Length: " . filesize($file));
fpassthru($fp);
?>

Additionally, if you don’t want anyone to have access to the file location, put a file named .htaccess into your download folder with only the contents:

deny from all

I changed the code a little. First when I say fake file name and real file name, the fake filename is the name that the downloader will download the file as, where the real filename is the name of the actual file in the download folder on your server.

Also, I check to make sure the user is logged in and is able to download the file. If he chooses to download the file, a PHP file is called in a new tab (with the download code from above), then at the end of the file I have the line:

exit;

So when he clicks on the download link, a blank page pops up in a new tab quickly, then quickly exits and the download begins.

EDIT: The download link looks something like this:

<a href="https://stackoverflow.com/questions/10997516/simpleDown.php?id=<?php echo $_GET["id']; ?>" target="_blank">Download!</a>

Where id is the id of the download in the database, and in the download script from above I find the entry with that id, then get its real file name and the fake file name. You can do this without the database though.

More Related Contents:

  1. Htaccess blog slug Rewrite does not work
  2. Using .htaccess to make all .html pages to run as .php files?
  3. How can I create friendly URLs with .htaccess?
  4. How to load classes based on pretty URLs in MVC-like page?
  5. Server not parsing .html as PHP
  6. How Can I Remove “public/index.php” in the URL Generated Laravel?
  7. Seo Friendly URL results in CSS IMG and JS not working
  8. Disable PHP in directory (including all sub-directories) with .htaccess
  9. No input file specified
  10. enable cors in .htaccess
  11. Yii2 htaccess – How to hide frontend/web and backend/web COMPLETELY
  12. Is it possible to redirect post data?
  13. CodeIgniter htaccess and URL rewrite issues
  14. Deny direct access to all .php files except index.php
  15. Remove .php extension (explicitly written) for friendly URL [closed]
  16. Getting a 500 Internal Server Error (require() failed opening required path) on Laravel 5+ Ubuntu 14.04
  17. Leverage browser caching for 3rd party JS
  18. PHP built in server and .htaccess mod rewrites
  19. Rerouting all php requests through index.php
  20. Change WordPress Admin URL
  21. prevent direct url access to php file
  22. .htaccess 301 redirect of single page
  23. Process HTML files like PHP
  24. mod_rewrite, php and the .htaccess file
  25. Using PHP/Apache to restrict access to static files (html, css, img, etc)
  26. Deny ajax file access using htaccess
  27. How to create clean url using .htaccess
  28. .htaccess mod_rewrite > 500 Internal Server Error
  29. Avoid public folder of laravel and open directly the root in web server
  30. .htaccess – Redirect subdomain to folder

Leave a Comment