Downloading Uploaded files under a different name than the one on the server

[suryadithya]

Hi,
I am very new to php. And I have got to submit a project very soon (By tomorrow evening). So please help.
The problem is this. I have created a file upload mechanism where the uploaded files are stored under a different id for security something like 0001.pdf, 0002.jpg etc.. The original names are stored in a mysql database. Now I have a file download page. The links are the original names of the files like user1.pdf, user2.pdf... When the link is clicked the file that comes up has the name 0001,0002 etc ie the one on server.
I want it to open as user1.pdf, user2.pdf etc that is under the original name in which they were uploaded.. How to do this?

[pbmods]

Heya, suryadithya. Welcome to TSDN!

You'd need to create a PHP script that outputs the images directly and then make the PHP script the src of the image tag.

For an example, check out this article. Some of the reading is a bit heavy, but you should find the concepts and syntax that you're looking for about halfway down the page.

[suryadithya]

Heya, suryadithya. Welcome to TSDN!

You'd need to create a PHP script that outputs the images directly and then make the PHP script the src of the image tag.

For an example, check out this article. Some of the reading is a bit heavy, but you should find the concepts and syntax that you're looking for about halfway down the page.

Thank you for that reply pbmods. But the article was very heavy for me. And I don't think that solved my problem. I have allowed upload of several file types not just images. They are not stored under their original names anywhere on the server. The only source of the names is the mysql db.
What I want is when the user clicks on "save as" the file should be saved under it's original name on the db. Not the one on the server.

[pbmods]

Heya, Suryadithya.

Hm. So you need to be able to load any file by using an alias.

<a href="getFile.php?file=0001.pdf" />
 

getFile.php would then connect to the database and load the file:

$_file = mysql_real_escape_string($_GET['file']);
$_sql = "
SELECT
        *
    FROM
        `Ext_Uploads`
    WHERE
        `file` = '{$_file}'
    LIMIT 1";
.
.
.
 

That's the easy stuff; I'm sure I'm just repeating what you've already got working so far

The tricky part is to output the file, you need to know the Mime-type of the file. By default, the Content-type header will be set to 'text/html', so the browser won't display the file properly.

You could add a switch that matches off the file extension:

$_fileName = $mysql_row['realFileName'];
switch( strtolower(substr($_fileName, 0, strrpos($_fileName, '.'))) )
{
    case 'jpg':
    case 'jpeg':
        $type = 'image/jpeg';
    break;
 
    case 'pdf':
        $type = 'application/pdf';
    break;
 
    .
    .
    .
}
 
header('Content-type: ' . $type);
 

After all that, actually outputting the file is quite easy:

readfile($_fileName);
 

The readfile() function opens a file and sends its content to the output buffer (outputs it to the browser).

[Atli]

Hi.

Additionally, if you want to change the name (most) browsers will download the file as, you can set this header aswell:

header("Content-Disposition: attachment; filename=\"newFileName.pdf\";" );
 

Noe, that this apparently does not work with Safari. Works on pretty much everything else tho.

[suryadithya]

Thank you both..That shows me a direction..
Actually I had given only a html link to the files on server. I didn't get files using php.
But I have a doubt. I think your solution will work only if I have stored the file in the db. I have only stored the user given file names. The files are on the server. How do I load those files and connect them to the output buffer.
What is the command in php to read files from an external source? This I can then rename using your script.

[pbmods]

Heya, Suryadithya.

readfile() will output a file on the server; to output a file stored in the database, you would simply echo the data that you fetched from the database.

[Atli]

Check out this thread.. They are discussing pretty much the same thing and they have posted a couple of examples.

[suryadithya]

I think I can do it now. The switch case and content disposition should do fine.
Can you people just explain me the syntax of

<a href = "getfile.php?file=0001.ext">

Here my file name is itself a variable say $id.Will

$link="getfile.php?file=".$id;
<a href ="$link">;

do fine?
And why does this go to $_GET array?
PBMODS shouldn't the last line of the code be readfile($file) because that is the name of the file on the server? ($file=0001.ext ,00002.ext etc)
I assume that you meant by realfilename the user given name on db which is $_filename as per your code. How can I read it when there is no such file on server?
And thanks in advance.

[pbmods]

Heya, Suryadithya.

Please use CODE tags when posting source code:

[CODE=php]
PHP code goes here.
[/CODE]

Unless I read your post incorrectly, you are storing the *real* file names in the database, while the value of $_GET['file'] is actually the 'alias' that you would use to look up the *real* file name in the database.

The goal is to readfile() using the file name stored in the database.

In terms of $_GET, some PHP setups have register_global s turned on, which means that any variables passed in the URL will be automagically turned into global variables. This behavior has been widely deplored for security reasons, and is in fact being discontinued in PHP 6. Using $_GET is a safer way to do it because it encourages you to validate your input before using it, for example by passing it through mysql_real_esca pe_string().