Forum Moderators: coopster
<?php
$id = $_GET['id'];
if(!is_numeric($id)) {
header('Location: '.$_SERVER['HTTP_REFERER']);
die();
}
$sql = 'SELECT * FROM files WHERE id_file='.q($id);
$rs = &$cnn->Execute($sql);
if (!$rs->EOF && file_exists(DIR_UPLOAD.basename($rs->fields['filename']))) {
# File exists
header('Location: '.URL_UPLOAD.basename($rs->fields['filename']));
die();
} else {
# File doesn't exist
header('Location: '.$_SERVER['HTTP_REFERER']);
die();
}
?>
My question is, is it OK to just implement a header redirection to the file like this:
header('Location: '.URL_UPLOAD.basename($rs->fields['filename']));
Or should i use some kind of MIME header first?