handle_forced_downloads.php

<?php

/**
 * Will handle downloads for $_REQUEST['file']
 * @author Julius Beckmann
 */
function handleForcedDownloads($parameterName='file', $exit=true)
{
	if(isset($_REQUEST[$parameterName])) {
		
		$file = $_REQUEST[$parameterName];
		
		if(false !== stripos($file, '../')) {
			die("ERROR: Fehlerhafter Download Link.");
		}
		
		// Working on purpose with cwd.
		if(!file_exists($file)) {
			die("ERROR: Datei konnte nicht gefunden werden.");
		}
		
		header('Content-Type: application/octet-stream');
		header('Content-Transfer-Encoding: binary');
		header('Content-disposition: attachment; filename="'.basename($file).'"');
		
		readfile($file);
		
		if($exit) {
			die();
		}
	}
}