Mime.php file download

The updated version below corrects this problem. Thanks to Mike for pointing this out. If you are using shared hosting, download the file with the Apache distro and then upload it to a directory on your web server that php has access to. Second parameter is path to mime. Recognizes extensions associated with MIME types. Does not examine the actual file; the file does not even have to exist. On Windows, PHP 7. A Web search shows that this function is deprecated.

Yet, at least half of them share common errors; in many cases programmers simply copy the code from something that works, without even attempting to understand what it really does.

What follows is not a complete working download script, but rather a set of issues you should be aware about and that will allow you to write better code. Guessing is not too difficult and in a few tries, an attacker could obtain configuration or password files. What you must do — always — is sanitize the input. Accept only file names, like this:.

Anything is better than blindly accept requests. If you need to restrict access to a file, you should generate encrypted, one-time IDs, so you can be sure a generated path can be used only once. This is a very widespread problem and unfortunately even the PHP manual is plagued with errors.

There is no such thing in HTTP. You may add those headers if you want, but they do absolutely nothing. Sadly, this wrong example is present even in the PHP manual. The author must have been really frustrated and added three Content-Type headers. What would it be like to not having to worry about old versions of Internet Explorer?

To protect several files in this manner, it makes sense to name the protected file and the PHP file with the same name, differing only in the extension, to keep everything straight.

Actively scan device characteristics for identification. Use precise geolocation data. Select personalised content. Create a personalised content profile. Measure ad performance. Select basic ads. Create a personalised ads profile. Replace the information as specified above, and point the "download" link to this page with a GET parameter named "filepath" containing the file path.

For example, if you name this php file "download. Stack Overflow for Teams — Collaborate and share knowledge with a private group.

Create a free Team What is Teams? Collectives on Stack Overflow. Learn more. Mime-type of downloading file Ask Question. Asked 12 years, 4 months ago. Active 12 years, 4 months ago. Viewed 17k times. Improve this question. Max Frai Max Frai Add a comment.