Question

i need your help for my website http://usb-online.fr . It’s a php file host website and here’s a part of the download thing :

header("Content-Type: $mime; name=\"$fichier\"");
header("Content-Transfer-Encoding: binary");
header("Content-Length: $taille");
header('Content-Description: Fichier hebergé par usb-online.fr');
header("Content-Disposition: attachment; filename=\"$fichier\"");
header('Expires: 0');
header('Cache-Control: must-revalidate, post-check=0, pre-check=0');
header('Pragma: public');

ob_clean();
flush();
log_download($file,$infos['auteur'],$taille);
bunzip2($path);

If you try this url :
http://usb-online.fr/file-download-822MjYzMg.html
You will see a download box is open and the image is not displayed, that’s what i want.
But it the user do <img src="http://usb-online.fr/file-download-822MjYzMg.html"/> in a website, he can display the image and my server becomes busy. i don’t want to allow this, how can i do?
http://usb-online.fr/file-download-822MjYzMg.html

Answer 1

I’m not sure you can do what you want. If you allow a browser to access a URL, there’s no way to control what it does with the data at the remote end.