php: force download script + convert url to localpath

For a "force download script" to which i send as variable a full URL, i needed to convert this url into the local path, so that the system can check whether the file exists or not, and then read it to output with the correct mimetype.

Here is what i came up with. It seems simple but i couldn't find such an easy way anywhere on the web so here is my modest contribution to a better (documented) world :-) .

PHP: convertion of a full url to the file's corresponding local system path

PLAIN TEXT
PHP:
  1. // EXAMPLELINK http://www.domain.com/files/downloads.php?file=http://localhost/lab-au.com/dev/medias/03-05-2008_bright-archite/pdf/xxx___Labau.pdf
  2. $filename = urldecode($_GET['filename']);
  3. $parsed_url= parse_url($filename);
  4. $fileinfo = pathinfo($filename);
  5. $parsed_url['extension'] = $fileinfo['extension'];
  6. $parsed_url['filename'] = $fileinfo['basename'];
  7. $parsed_url['localpath'] = $_SERVER['DOCUMENT_ROOT'].$parsed_url['path'];
  8. // just in case there is a double slash created when joining document_root and path
  9. $parsed_url['localpath'] = preg_replace('/\/\//', '/', $parsed_url['localpath']);

Force Download Php Script

The full "force download" script is to be used like this :

http://path/to/force/downloadscript.php?file=http://path/to/your/file.pdf

PLAIN TEXT
PHP:
  1. /*
  2. // PHP FORCE DOWNLOAD SCRIPT
  3.    author: pixeline
  4.    website: http://www.pixeline.be
  5.    last updated: 14 January 2009
  6. */
  7. $filename = urldecode($_GET['filename']);
  8. // converting url to local path so Apache can find the file.
  9. // force download:
  10. // required for IE, otherwise Content-disposition is ignored
  11. if (ini_get('zlib.output_compression'))
  12.     ini_set('zlib.output_compression', 'Off');
  13.  
  14. $parsed_url = parse_url($filename);
  15. $fileinfo = pathinfo($filename);
  16. $parsed_url['extension'] = $fileinfo['extension'];
  17. $parsed_url['filename'] = $fileinfo['basename'];
  18. $parsed_url['localpath'] = $_SERVER['DOCUMENT_ROOT'] . $parsed_url['path'];
  19. // just in case there is a double slash created when joining document_root and path
  20. $parsed_url['localpath'] = preg_replace('/\/\//', '/', $parsed_url['localpath']);
  21.  
  22. if (!file_exists($parsed_url['localpath'])) {
  23.     die('File not found: ' . $parsed_url['localpath']);
  24. }
  25. $allowed_ext = array('pdf', 'png', 'jpg', 'jpeg', 'zip', 'doc', 'xls', 'gif', 'exe', 'ppt');
  26. if (!in_array($parsed_url['extension'], $allowed_ext)) {
  27.     die('This file type is forbidden.');
  28. }
  29.  
  30. switch ($parsed_url['extension']) {
  31.     case "pdf": $ctype = "application/pdf";
  32.         break;
  33.     case "exe": $ctype = "application/octet-stream";
  34.         break;
  35.     case "zip": $ctype = "application/zip";
  36.         break;
  37.     case "doc": $ctype = "application/msword";
  38.         break;
  39.     case "xls": $ctype = "application/vnd.ms-excel";
  40.         break;
  41.     case "ppt": $ctype = "application/vnd.ms-powerpoint";
  42.         break;
  43.     case "gif": $ctype = "image/gif";
  44.         break;
  45.     case "png": $ctype = "image/png";
  46.         break;
  47.     case "jpeg":
  48.     case "jpg": $ctype = "image/jpg";
  49.         break;
  50.     default: $ctype = "application/force-download";
  51. }
  52. header("Pragma: public"); // required
  53. header("Expires: 0");
  54. header("Cache-Control: must-revalidate, post-check=0, pre-check=0");
  55. header("Cache-Control: private", false); // required for certain browsers
  56. header("Content-Type: $ctype");
  57. header("Content-Disposition: attachment; filename=\"" . $parsed_url['filename'] . "\";");
  58. header("Content-Transfer-Encoding: binary");
  59. header("Content-Length: " . filesize($parsed_url['localpath']));
  60. readfile($parsed_url['localpath']);
  61. exit();