Unsolvable problem. Need real expert!

[doa24uk]

I cannot get my head around this. A user wishes to download a file (file.txt) from a directory.

 

http://www.mysite.com/files/file.txt

 

However an HTACCESS file in the /files/ directory contains the following info

 

RewriteEngine on
RewriteRule (.*)(txt|txt2)$ /files/dl.php?file=$1$2 [QSA]

 

So it redirects the user to the dl.php script.

 

The script (below) works perfectly HOWEVER, the resulting download is of whatever text is on the page at the time of downloading (ie. whatever echo's are spat out by dl.php)

 

I can only think that when the download is forced via the script, it goes into a loop because the HTACCESS is telling it to go back to the dl.php page.

 

Is there a way to fix it or use sessions or something so that it only goes to the dl.php page once?

 

<?php
$lol = $_GET[file];
$max_downloads = '1000';
// $max_downloads = '10000000';
$ip = addslashes($_SERVER['REMOTE_ADDR']);
$todaysdate = date("Y-m-d");
$filex = filesize($lol);
$path = addslashes($_SERVER['REQUEST_URI']);

// DB connect
mysql_connect("localhost", "USERNAME", "PASSWORD") or die(mysql_error());

mysql_select_db("DB") or die(mysql_error());

// Retrieve all data
$query1 = mysql_query("SELECT * FROM table WHERE IP='$ip' AND DATE='$todaysdate'")
or die(mysql_error());  

$data=mysql_fetch_array($query1);

if($data[iP]==''){
// store the record into $row

// If no results, input new IP & DATE
mysql_query("INSERT INTO table (IP, DATE, DOWNLOADED, EXEMPT) VALUES('$ip','$todaysdate','','0') ") 
or die(mysql_error());
echo 'no previous data - data now inputted';
}elseif ( $data[EXEMPT]=='1' ) {
header('Content-type: application/octet-stream');
header('Content-Disposition: filename="'.$lol.'"');
header('Content-length: '.$lol);
header('Cache-control: private');
exit();
}else{
// Do Nothing & carry on
}

// Calculate total downloads
$total = $data[DOWNLOADED] + $filex;

if ( $total >= $max_downloads ) {

// This file will take them over their limit
echo 'Run out of downloads & not EXEMPT - no download for you!';
// REDIRECT TO INFO PAGE

} else {
header('Content-type: application/octet-stream');
header('Content-Disposition: filename="'.$lol.'"');
header('Content-length: '.$lol);
header('Cache-control: private');
// REDIRECT TO DOWNLOAD
}
?>

 

I'm so close to getting this working!!!

 

Many thanks for all the help in advance!

 

DoA

[delirious1230]

Possible to add sql code for this script??? Please

[apulmca2k4]

Hi,

 

In http://www.mysite.com/files/file.txt, Have u access to files subdirectory. I meant if u have acces to that subdirectory, I can do it for u in just 2 mins.

 

 

[delirious1230]

Apul i added you on MSN can u accept me and we can solve problem?!

[The Little Guy]

I use this:

 

http://phpsnips.com/snippet.php?id=55

[delirious1230]

Well this script doesnt limit downloads...

[The Little Guy]

No, you would have to add that part, It just downloads the whole file, which is what I believe you were having troubles with right?

[delirious1230]

Yeah that needed apulmca2k4, i wanted to get his sql code than i would need that part too i gues

[The Little Guy]

Give this a try:

$lol = $_GET[file];
$max_downloads = '1000';
$ip = addslashes($_SERVER['REMOTE_ADDR']);
$todaysdate = date("Y-m-d");
$filex = filesize($lol);
$path = addslashes($_SERVER['REQUEST_URI']);

// DB connect
mysql_connect("localhost", "USERNAME", "PASSWORD") or die(mysql_error());

mysql_select_db("DB") or die(mysql_error());

// Retrieve all data
$query1 = mysql_query("SELECT * FROM table WHERE `IP`='$ip' AND `DATE`='$todaysdate'")
or die(mysql_error());  

$data=mysql_fetch_array($query1);

if(mysql_num_rows($query1) < $max_downloads){
mysql_query("INSERT INTO table (`IP`, `DATE`, `DOWNLOADED`, `EXEMPT`) VALUES('$ip','$todaysdate','','0') ") or die(mysql_error());
echo 'no previous data - data now inputted';
    	header("Pragma: public");
    	header("Expires: 0");
    	header("Cache-Control: must-revalidate, post-check=0, pre-check=0");
    	header("Content-Type: application/force-download");
    	header("Content-Type: application/octet-stream");
    	header("Content-Type: application/download");
    	header("Content-Disposition: attachment; filename=".basename($lol).";");
    	header("Content-Transfer-Encoding: binary");
    	header("Content-Length: ".filesize($lol));
    	@readfile($row['FileName']);
exit(0); 
}

[delirious1230]

I get this: Duplicate entry '127.0.0.1' for key 1 what is wrong

 

And second in previous post i meant sql code for phpmyadmin ... that is needed for script

[The Little Guy]

my guess is that you have ip set to "Unique". is that correct?

[delirious1230]

Hmmm this is my current database...

 

CREATE TABLE `downloaded` (

  `filepath` varchar(255) NOT NULL,

  `IP` varchar(15) NOT NULL,

  `DATE` datetime NOT NULL,

  `DOWNLOADED` varchar(120) NOT NULL,

  `EXEMPT` varchar(120) NOT NULL,

  UNIQUE KEY `filepath` (`filepath`,`IP`),

  KEY `ipadres` (`IP`)

) ENGINE=MyISAM DEFAULT CHARSET=latin1;

 

 

i have it under unique yes.... but i thought that is correct....

[thebadbad]

Sorry to run off topic, but what's up with you guys asking for his MySQL password? :-\

[delirious1230]

none asked for his SQL password -.- i asked for code  like that (CREATE TABLE `downloaded` (

  `filepath` varchar(255) NOT NULL,

  `IP` varchar(15) NOT NULL,.............)

    he has different one... original one. I just modified it but it might be incorrect :S

[The Little Guy]

DROP INDEX filepath ON downloaded

[thebadbad]

Oh man, I'm sorry. Guess I was confused by

 

Have u access to files subdirectory. I meant if u have acces to that subdirectory, I can do it for u in just 2 mins.

[delirious1230]

where to put this ???

[The Little Guy]

run it the same way you created that table.

[delirious1230]

I deleted filepath but its still same :S  Duplicate entry '127.0.0.1' for key 1

[The Little Guy]

DROP INDEX IP ON downloaded

[delirious1230]

now i get Unknown column 'IP' in 'where clause'  ......  i knew that ip must be in sql....

Maybe you got MSN or something that we can talk a lil bit faster ?

[The Little Guy]

ALTER TABLE `downloaded` ADD `filepath` VARCHAR(255) NOT NULL ;

ALTER TABLE `downloaded` ADD `IP` VARCHAR(15) NOT NULL ;

[delirious1230]

Ok now its okay, is it possible to contact over MSN, there is still something to fix ???

[delirious1230]

Currently what i have in dl.php

 

<?php

// change this value below
$cs_conn = mysql_connect('localhost', '****', '****');
mysql_select_db('*****', $cs_conn);


$lol = $_GET[file];
$max_downloads = '10';
$ip = addslashes($_SERVER['REMOTE_ADDR']);
$todaysdate = date("d-m-Y");
$filex = filesize($lol);
$path = addslashes($_SERVER['REQUEST_URI']);


// Retrieve all data
$query1 = mysql_query("SELECT * FROM downloaded WHERE `IP`='$ip' AND `DATE`='$todaysdate' AND `EXEMPT`='$exempt AND `downloaded`='$downloaded''")
or die(mysql_error());  

$data=mysql_fetch_array($query1);

if(mysql_num_rows($query1) < $max_downloads){



mysql_query("INSERT INTO downloaded (`IP`, `DATE`, `DOWNLOADED`, `EXEMPT`) VALUES('$ip','$todaysdate','','0') ") or die(mysql_error());



echo 'no previous data - data now inputted';
header("Pragma: public");
header("Expires: 0");
header("Cache-Control: must-revalidate, post-check=0, pre-check=0");
header("Content-Type: application/force-download");
header("Content-Type: application/octet-stream");
header("Content-Type: application/download");
header("Content-Disposition: attachment; filename=".basename($lol).";");
header("Content-Transfer-Encoding: binary");
header("Content-Length: ".filesize($lol));
@readfile($row['FileName']);
exit(0); 
}else{
// Do Nothing & carry on
}

// Calculate total downloads
$total = $data[DOWNLOADED] + $filex;

if ( $total >= $max_downloads ) {

// This file will take them over their limit
echo 'Run out of downloads & not EXEMPT - no download for you!';
// REDIRECT TO INFO PAGE

} else {
header('Content-type: application/octet-stream');
header('Content-Disposition: filename="'.$lol.'"');
header('Content-length: '.$lol);
header('Cache-control: private');
// REDIRECT TO DOWNLOAD
}
?>

 

and htacces

RewriteEngine on
RewriteRule (.*)(ace|avi|bin|bmp|doc|exe|gif|iso|jpg|mid|mp3|mpg|pdf|png|ppt|rar|txt|ttf|wav|xls|zip)$ /downloads/dl.php [QSA]

 

and sqlbase code

CREATE TABLE `downloaded` (
  `DATE` datetime NOT NULL,
  `DOWNLOADED` varchar(120) NOT NULL,
  `EXEMPT` varchar(120) NOT NULL,
  `ip` varchar(15) NOT NULL
) ENGINE=MyISAM DEFAULT CHARSET=latin1;

 

script is working in half way

 

every time i download file it write this in database...

 

I would like that every time that something is downloaded that update field downloaded or exempt... and that date would be correct...