download outside web root

swordsinfo

Hi guys quick q - Im looking to download files that are located outside the web root. During the upload process the users upload to a folder that was outside the root of the site (for security reasons). I now want to do the reverse for the admin users to download the files I have tried the following but to no avail

I think maybe I need to add something to the conf file or the htaccess maybe - according to host permissions are ok!

Is absolute apths an option also??

$file=$_SERVER["DOCUMENT_ROOT"]. "/../uploads/".$filename;

maccored

Wouldnt downloading thru ftp just be handier? or put the files in the web root, but password protect the directory?

daymobrew

Presumably the admins have to log in, if so, they could open a page/script that lists the files in upload directory and provides links to the files. The links would be to another script within document root. This will work because, while both scripts I describe will be under document root, they can reference files outside of it.

I can write up some pseudo code if you want (too lazy atm)

CreepingDeath

If you were in a J2EE environment you could write a servlet to do it.

You might also run into issues with MIME types.
If you don't set the MIME type on the file they're downloading, they may only be able to open/save it, but without the MIME type hint the browser may not let you automatically open it with eg. Ms Office if it's a doc/xls.