I’m building a file sharing site, and I’m thinking, I want my users to be able to upload and share anything.
Sounds dangerous, I know. But, is there a method to allow this to be possible? For example, forcing the download when the user requests the link with a mime type? Rather than “running” something on the page.
Any ideas how to allow any file type without the security issue.
Thanks
readfile()function.Set correct headers, including these:
And also use the correct content-type header for each type of file