Put the path of the file you want in the URL? And make *SURE* you do not let that turn into things like: /etc/passwd More info here: http://phpsec.org On Fri, February 3, 2006 1:54 am, Shu Hung (Koala) wrote: > Hello, > > I have a little strange question. > > Let say if I have a file "/home/user/somefile.jpg" > I wanted to output this file from script, I wrote a little script: > > ------------------------------------------------ > <?php > > // open and pass the file out > $handle = fopen($this->filedata['filepath'], "rb"); > > > while (!feof($handle)) { > $buffer = fread($handle, 4096); > echo $buffer; > } > > fclose($handle); > ?> > ------------------------------------------------ > > It works !!! > > But if I use a download accerlator to download this path, I can only > open 1 download session. Is there any way to pass a file out so one > can download the file with a multi-session download manager? > > > Thanks > Koala Yeung > -- Like Music? http://l-i-e.com/artists.htm -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php