Comments on: How I PHP: X-SendFile http://www.jasny.net/articles/how-i-php-x-sendfile/ Helping you out with PHP & MySQL Wed, 25 Jan 2012 21:57:47 +0000 hourly 1 http://wordpress.org/?v=3.2.1 By: Arnold Daniels http://www.jasny.net/articles/how-i-php-x-sendfile/comment-page-1/#comment-336943 Arnold Daniels Wed, 02 Mar 2011 12:01:17 +0000 http://blog.adaniels.nl/articles/how-i-php-x-sendfile/#comment-336943 That could work. You don't need to do database pairing, just create a random filename, symlink and redirect to that. However I don't see why you would prefer that 'poor-man' solution above x-senfile. That could work. You don’t need to do database pairing, just create a random filename, symlink and redirect to that.

However I don’t see why you would prefer that ‘poor-man’ solution above x-senfile.

]]> By: Sima Kosmos http://www.jasny.net/articles/how-i-php-x-sendfile/comment-page-1/#comment-336942 Sima Kosmos Wed, 02 Mar 2011 00:39:57 +0000 http://blog.adaniels.nl/articles/how-i-php-x-sendfile/#comment-336942 Has anyone tried something like this? More of apache conf/tweaking approach but, feel free to criticize 1.Create symlink to physical file including some hash of session id in symlink name or do database pairing of symlink-physical_file-session 2.Redirect to that symlink (was that Options FollowSymLinks? in conf) 3.Cron does removal of symbolic links that are not named like present sessions/database keys from time to time or the ones older than max_download_availability. Maybe do calc of clients average download speed to estimate max download time, and schedule deletion. The only question is what will apache send as file name? Symlink name or the physical file name? The second being preferable :) It is security by obscurity! But would it work? Has anyone tried something like this? More of apache conf/tweaking approach but, feel free to criticize

1.Create symlink to physical file including some hash of session id in symlink name or do database pairing of symlink-physical_file-session
2.Redirect to that symlink (was that Options FollowSymLinks? in conf)
3.Cron does removal of symbolic links that are not named like present sessions/database keys from time to time or the ones older than max_download_availability.

Maybe do calc of clients average download speed to estimate max download time, and schedule deletion.

The only question is what will apache send as file name? Symlink name or the physical file name? The second being preferable :)

It is security by obscurity! But would it work?

]]> By: Arnold Daniels http://www.jasny.net/articles/how-i-php-x-sendfile/comment-page-1/#comment-336920 Arnold Daniels Sun, 09 Jan 2011 14:36:56 +0000 http://blog.adaniels.nl/articles/how-i-php-x-sendfile/#comment-336920 You're PHP framework is probably adding that. On top of you file add <b>ob_start();</b>. Than before $fd=.. add <b>ob_end_clean();</b>. I also advise to use x-sendfile instead of readfile(), if your webhost supports it. You’re PHP framework is probably adding that. On top of you file add ob_start();. Than before $fd=.. add ob_end_clean();.

I also advise to use x-sendfile instead of readfile(), if your webhost supports it.

]]> By: Moe http://www.jasny.net/articles/how-i-php-x-sendfile/comment-page-1/#comment-336914 Moe Sat, 08 Jan 2011 21:21:25 +0000 http://blog.adaniels.nl/articles/how-i-php-x-sendfile/#comment-336914 Hello, The code below works on my localhost to download a file. However, on top of my downloaded file there are 160 lines of HTML tags. How can I eliminate these tags and just get the plain file? I appreciate your advice. $fd = basename($csv); header("Content-type: application/octet-stream"); header("Content-Disposition: attachment; filename=\"".$fd."\""); header("Content-Description: Download"); readfile($csv); Hello,

The code below works on my localhost to download a file. However, on top of my downloaded file there are 160 lines of HTML tags. How can I eliminate these tags and just get the plain file?
I appreciate your advice.

$fd = basename($csv);
header(“Content-type: application/octet-stream”);
header(“Content-Disposition: attachment; filename=\”".$fd.”\”");
header(“Content-Description: Download”);
readfile($csv);

]]> By: tom http://www.jasny.net/articles/how-i-php-x-sendfile/comment-page-1/#comment-209625 tom Fri, 30 Oct 2009 17:47:30 +0000 http://blog.adaniels.nl/articles/how-i-php-x-sendfile/#comment-209625 so one of the downfalls i've found with this method is that, unlike with the stock PHP header methods, when you have more code after the xsend file code, it doesn't wait until the filesend is done before executing the code... with the first example it waits until the filesend is done, but not with xsend. this is particularly useful if you need to log the fact that the user had a successful download. if the download failed then the code below the download would just not execute, so the user could download again. what i'm getting at-- is there a way around this with xsendfile? i'm looking for a way to mark that a user has successfully downloaded a complete file in the database, so they can't download again. as of now using the same code with the xsendfile modifications, it just always marks the file download as successful because of this. so one of the downfalls i’ve found with this method is that, unlike with the stock PHP header methods, when you have more code after the xsend file code, it doesn’t wait until the filesend is done before executing the code… with the first example it waits until the filesend is done, but not with xsend. this is particularly useful if you need to log the fact that the user had a successful download. if the download failed then the code below the download would just not execute, so the user could download again.

what i’m getting at– is there a way around this with xsendfile? i’m looking for a way to mark that a user has successfully downloaded a complete file in the database, so they can’t download again. as of now using the same code with the xsendfile modifications, it just always marks the file download as successful because of this.

]]> By: Fran http://www.jasny.net/articles/how-i-php-x-sendfile/comment-page-1/#comment-199519 Fran Tue, 16 Jun 2009 16:15:53 +0000 http://blog.adaniels.nl/articles/how-i-php-x-sendfile/#comment-199519 downloads got stalled at getting file information at least with IE6.0 (not tested with other IE releases) suggested hack : Cache-Control: must-revalidate doesn't work, any help? thanks downloads got stalled at getting file information at least with IE6.0 (not tested with other IE releases)

suggested hack : Cache-Control: must-revalidate doesn’t work,

any help?

thanks

]]> By: Arnold Daniels http://www.jasny.net/articles/how-i-php-x-sendfile/comment-page-1/#comment-195783 Arnold Daniels Sat, 30 May 2009 14:20:36 +0000 http://blog.adaniels.nl/articles/how-i-php-x-sendfile/#comment-195783 On http://packages.ubuntu.com you can find which package to install for a specific executable or other file. http://packages.ubuntu.com/search?searchon=contents&keywords=apxs2&mode=exactfilename&suite=jaunty&arch=any If you're running PHP as module, install 'apache2-prefork-dev'. On http://packages.ubuntu.com you can find which package to install for a specific executable or other file.

http://packages.ubuntu.com/search?searchon=contents&keywords=apxs2&mode=exactfilename&suite=jaunty&arch=any

If you’re running PHP as module, install ‘apache2-prefork-dev’.

]]> By: TopFX http://www.jasny.net/articles/how-i-php-x-sendfile/comment-page-1/#comment-195338 TopFX Fri, 29 May 2009 13:42:53 +0000 http://blog.adaniels.nl/articles/how-i-php-x-sendfile/#comment-195338 I'm also trying to get this to work but cannot get it to install on an Ubuntu Plesk server, it fails to compile. The server is running Apache2, but if you do a locate search it only finds apxs and not apxs2 as pharrington suggests it should. I really need to get this working so any ideas would really be appreciated I’m also trying to get this to work but cannot get it to install on an Ubuntu Plesk server, it fails to compile.

The server is running Apache2, but if you do a locate search it only finds apxs and not apxs2 as pharrington suggests it should.

I really need to get this working so any ideas would really be appreciated

]]> By: pharrington http://www.jasny.net/articles/how-i-php-x-sendfile/comment-page-1/#comment-174661 pharrington Fri, 01 May 2009 22:49:36 +0000 http://blog.adaniels.nl/articles/how-i-php-x-sendfile/#comment-174661 Xorax: what errors did you get when trying to install? remember that with apache2, the program to compile modules is apxs2 instead of apxs also, if for whatever reason you need to manually create the config file (eg Ubuntu), the LoadModule line is: LoadModule xsendfile_module /usr/lib/apache2/modules/mod_xsendfile.so (substitute for the correct path if necessary) Xorax:

what errors did you get when trying to install? remember that with apache2, the program to compile modules is

apxs2

instead of

apxs

also, if for whatever reason you need to manually create the config file (eg Ubuntu), the LoadModule line is:

LoadModule xsendfile_module /usr/lib/apache2/modules/mod_xsendfile.so (substitute for the correct path if necessary)

]]> By: Xorax http://www.jasny.net/articles/how-i-php-x-sendfile/comment-page-1/#comment-156418 Xorax Thu, 16 Apr 2009 14:55:48 +0000 http://blog.adaniels.nl/articles/how-i-php-x-sendfile/#comment-156418 does someone has compiled this mod for apache 2.2 ? I tried but I have bad errors.... does someone has compiled this mod for apache 2.2 ?

I tried but I have bad errors….

]]>