PHP Controller view file or download file. Use to check permission before return file like attach file in topic forum, private message,etc. Avoid user public file url. Ex: To view image: localhost/image.php?mode=view. To download image: localhost/image.php?mode=download.

image.php

// Check permission,...

// View image or download
$filePath = '/data/.../demo-image.jpg';
$name = basename($filePath);
if($params['mode'] == 'view'){
	header("Content-Type: " . mime_content_type($filePath));
	header('Content-disposition: inline; filename="' . $name . '"');
} else {
	header("Content-Type: application/octet-stream");
	header('Content-Length: ' . filesize($filePath));
	header('Content-disposition: attachment; filename="' . $name . '"');
}
readfile($filePath);