Random URL That Expires

[transfield]

Hello,
I want to hide a file somewhere on my server. I then want to create a random url that will eventually expire(after a few days) which links to this file. Then I want to give this url to my customers in order for them to download the file.

I tried this tutorial at http://forums.devshed.com/php-develo...url-38357.html This code works fine & is exactly what I'm looking for. The only problem with this code is the location of the secret file is eventually revealed in this line:-

PHP Code:

// Take the user to the file: 
header("Location: http://mydomain.com/filedir/" . addslashes($n)); 


So how do I hide the actual location of the file?

Thanks.

[sde]

you may want to re-think your delivery method. how large are the files?

you could store the files below the web root and use PHP to stream the file dynamically. this would allow you to authenticate your user agains a database (or however you want to authenticate them)

when the user successfully authenticates, you can have php stream the file from below the web root directly to the user.

below is example code i found of php streaming a file.

PHP Code:

$filename = // your parameter

$filename = realpath($filename); //server specific

$file_extension = strtolower(substr(strrchr($filename,"."),1));

if (! file_exists( $filename ) )
{
die("NO FILE HERE";
};
switch( $file_extension )
{
case "pdf": $ctype="application/pdf"; break;
case "exe": $ctype="application/octet-stream"; break;
case "zip": $ctype="application/zip"; break;
case "doc": $ctype="application/msword"; break;
case "xls": $ctype="application/vnd.ms-excel"; break;
case "ppt": $ctype="application/vnd.ms-powerpoint"; break;
case "gif": $ctype="image/gif"; break;
case "png": $ctype="image/png"; break;
case "jpe": case "jpeg":
case "jpg": $ctype="image/jpg"; break;
default: $ctype="application/force-download";
}
header("Pragma: public"); // required
header("Expires: 0");
header("Cache-Control: must-revalidate, post-check=0, pre-check=0");
header("Cache-Control: private",false); // required for certain browsers
header("Content-Type: $ctype");
header("Content-Disposition: attachment; filename=".basename($filename).";" );
header("Content-Transfer-Encoding: binary");
header("Content-Length: ".@filesize($filename));
@readfile("$filename") or die("File not found.");
exit();

?> 


[transfield]

Thanks for your reply, sde. It's actually a small php file. I'm providing a paid service where the user pays me for temporary usage of the features on that php file.

I appreciate your advice. I'll study it further.

[sde]

here we go, .. i knew it was covered here before. this is a little easier to digest...

Download portal