I was actually going through your blogspot on the subject and figured quite a few flaws in my code and am re-writing it as we speak.
But believe it or not Richard, at the time I was researching this, and this is about 2 years back, I was provided the code that I have in this very mailing list amidst a long & elaborate discussion & post replies by various members - and quite honestly - once I took the suggested code & saw it worked as my solution, I really didn't dig any further or try to find flaws with it! On 3/26/07 4:06 PM, "Richard Lynch" <[EMAIL PROTECTED]> wrote: > On Mon, March 26, 2007 2:49 pm, Rahul Sitaram Johari wrote: >> header("Content-Type: application/force-download"); > > header("Content-type: asfdsgfhrsiu/luhgireughinfibvn"); > > would work equally well as application/force-download > >> header("Content-Disposition: attachment; filename=".basename($F)); >> @readfile($F); >> ?> >> >> $F was the filename passed as a variable. > > And if $F is set to /etc/passwd what does your script hand out? -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php