[FiRe]

PHP Code:

<?php

session_start();

error_reporting(0);



//Get session data

$s = $_SESSION['blah'];



//Apply decryption algorithm

include("class.php");

$rc4 = new rc4crypt;

$ss = $rc4->endecrypt($key, $s, 'de');

$explode = explode("|", $ss);

$tmp = trim($explode[0]);

$actual = trim($explode[1]);



//Get extension

$File_Extension = substr(strrchr($actual, "."), 1);



//Get content type

switch ($File_Extension) {

case 'jpg':

$type = 'image/jpeg';

break;

case 'jpeg':

$type = 'image/jpeg';

break;

case 'gif':

$type = 'image/gif';

break;

case 'png':

$type = 'image/x-png';

break;

case 'bmp':

$type = 'image/x-ms-bmp';

break;

case 'zip':

$type = 'application/zip';

break;

case 'rar':

$type = 'application/unknown';

break;

case 'tar':

$type = 'application/x-tar';

break;

case 'gtar':

$type = 'application/x-gtar';

break;

case 'doc':

$type = 'application/msword';

break;

case 'xls':

$type = 'application/vnd.ms-excel';

break;

case 'txt':

$type = 'text/plain';

break;

case 'pdf':

$type = 'application/pdf';

break;

}



//Set headers

header('Content-type: '.$type.'');

header('Content-Disposition: attachment; filename="files/'.$tmp.'"');

readfile(''.$actual.'');



//Finish off

session_destroy();

error_reporting(2039);

?>

For some reason IE says the file will download as an HTML file when in fact its an image file which is corrupt I think I have get the code in the wrong places, can anyone help me clear this up?

[dennispopel]

Hello,

I suggest you first debug the value of the $tmp variable; I believe it contains only file name without the extension. Also check this script with other browsers. Besides, I don't think it's a good idea to have filename="files/myfile" in the Content-Disposition: header.

[FiRe]

tested it and the session works out fine when decrypted :|
also files/ is the directory it is stored in!

if the session contained this data decrypted:

PHP Code:

abc123.gif|smiley.gif 

then the headers should look like this:

PHP Code:

header('Content-type: image/gif'); 

header('Content-Disposition: attachment; filename="files/abc123.gif"'); 

readfile('smiley.gif'); 

any help?

[dennispopel]

Hmm... still try remove the 'files/' form the filename in header

[FiRe]

but then the file will not be valid as it wont know where to look!

should i try changing it to the file path instead?