this downloading code is giving an error "warning filesize() expects string"

[Ruhani]

<?php
    if(isset($_GET["notesid"]))
    {
        $notesid = $_GET["notesid"];
        include("dbcon.php");
        $con = mysql_connect(SERVERNAME,USERNAME,PASSWORD);
        mysql_select_db(DBNAME,$con);
        $query = "select notesid,filename,filesize,filetype,fileextname from notesinfo where notesid=$notesid";
        $result = mysql_query($query,$con);
        if($result && mysql_num_rows($result)>0)
        {
            $row = mysql_fetch_array($result);
            $path ="upload/" . $row[0] . "." . $row[4];
            $file = fopen($path,"r");
            clearstatcache();
            $content = fread($file, filesize($file));
            header("Content-Type:" . $row[3]);
            header("Content-length:". $row[2]);
            header("Content-Disposition: attachment; filename=" . $row[1]);
            echo $content;
            fclose($file);
        }
        mysql_close($con);
    }
?>

[Rabbit]

The filesize function expects a string that represents the path to the file, not a file object.