PHP File Access Query

[subxero]

Hey guys, I currently have a Windows box with PHP, and was just wondering how I could create a link to access a file below the wwwroot directory so that things are kept a little more secure?

I'm probably being thick on this one, but any help would be greatly appreciated!

Cheers

 

[philjohn]

Call download.php?file=xyz.ext

<?php
	$file = basename($_GET['file']);
	if(file_exists('../' . $file))
	{
		$fp = fopen('../' . $file, 'r');
		while($buffer = fread($fp, 1024))
		{
			echo $buffer;
		}	
	}
	else
		header("HTTP/1.1 404 Not Found");

note: closeing ?> left out as it's not required (and not recommended for purely PHP files)

 

[subxero]

Ahh thanking you very much, I tried something similar yesterday but gave up all hope of getting it working!

Shall give this a go later

 

[Lethal`]

note: closeing ?> left out as it's not required (and not recommended for purely PHP files)

Out of interest, why is it not recommended?