How to serve documents from outside the web root using PHP?

by

I think something like this would work:

<?php
$path = realpath(dirname(__FILE__) . '/../my_files/' . $_GET['file']);

$parts = explode("https://stackoverflow.com/", pathinfo($path, PATHINFO_DIRNAME));
if (end($parts) !== 'my_files') {
    // LFI attempt
    exit();
}

if (!is_file($path)) {
    // file does not exist
    exit();
}

header('Content-Type: ' . mime_content_type($path));
header('Content-Length: ' . filesize($path));

readfile($path);

More Related Contents:

  1. How to Update one column (point) in php sql [duplicate]
  2. Date format using dd/mm/yyyy using HTML
  3. How verify if input is numeric
  4. PHP Subtracting two number gives wrong values [closed]
  5. How Can I add HTML And CSS Into PDF [closed]
  6. How to Truncate a string in PHP to the word closest to a certain number of characters?
  7. Getting checkbox values on submit
  8. Does $_SERVER[‘HTTP_X_REQUESTED_WITH’] exist in PHP or not?
  9. Best way to parse bbcode
  10. Laravel blank white screen
  11. Is there any way to detect strings like putjbtghguhjjjanika?
  12. PHP UPDATE prepared statement
  13. netbeans shows “Waiting For Connection (netbeans-xdebug)”
  14. Converting HTML to PDF using PHP? [duplicate]
  15. mysql_fetch_array() expects parameter 1 to be resource problem [duplicate]
  16. PHP – split String in Key/Value pairs
  17. Turn database result into array
  18. What does this mean in PHP: -> or => [duplicate]
  19. How to get file URL using Storage facade in laravel 5?
  20. Update query with PDO and MySQL
  21. PHP to clean-up pasted Microsoft input
  22. Composer require local package
  23. Calculate an IPv6 range from a CIDR prefix?
  24. return one value from database with mysql php pdo
  25. php send email with attachment
  26. In PHP what does it mean by a function being binary-safe?
  27. In PHP, how do I generate a big pseudo-random number?
  28. Optional parameter in the middle of a route
  29. Access object property with disallowed character in property name
  30. Sort a multidimensional array descending by subarray count and preserve first level keys

Leave a Comment