i used following code for downloading file.whenever the members cicked the file for downloading ,the download request (with the variable containing file id) was send to download.php .The download.php on recieving the file id fetches the url of the fileand redirects to the file url using Header("location:$url"); where $url is the full url of file such as http://www.abc.com/downloads/file1.zip. so finally the url is exposed to the members who circulates the url in mails and everybody downloads the files.I want that only members can download the file.is <http://file.is> there any solution. On 7/29/05, André Medeiros <andre.caum@xxxxxxxxx> wrote: > > When deppending on authentication, never link the files directly. > > You can create a download.php file that gets an ID through the URL, > checks if the user is authenticated and then read the file. > > You will need these functions: > > http://pt.php.net/file_get_contents > http://pt.php.net/header > > Header() is to send the mime type, and file_get_contents is to read the > file's contents (DOH). > > If you run into trouble, you can (in the order given ;): > > 1) Read the user's comments on both functions. They're pretty helpful > sometimes > 2) Mail the ML :) > > -- > PHP General Mailing List (http://www.php.net/) > To unsubscribe, visit: http://www.php.net/unsub.php > >