Question

I’m serving some records from a MySQL database using PHP’s fputcsv() by creating a file on the server, filling it, then linking to it on the next page.

This works and is great but as this could be sensitive data, I don’t want a buch of files hanging about on the server when they were created for (probably) a one-time download.

So what I want to know is this: is there a way to create this file & serve it for download without actually writing a permanent file on the server?

For instance could I create a comma separated string instead of using fputcsv() and serve that with the right headers in an output buffer?

The obvious move is to delete the file but I need to wait until the client downloads it first so that makes it a little difficult to decide when to do it.

Any suggestions welcome

The code:

$fp = fopen($filename, 'w');
fputcsv($fp, array("Last Name", "First Name"));
foreach ($result as $fields) 
{
    fputcsv($fp, $fields);
}
fclose($fp);

http://php.net/manual/en/function.fputcsv.php

Answer 1

Rather than that, why not just have your page echo out a csv mime type and then echo out the file to the user?

It works a charm, the file is never created and passed as a one off to the client.

Something like this:

header("Content-type: application/csv");
header("Content-Disposition: attachment; filename=file.csv");
header("Pragma: no-cache");
header("Expires: 0");

echo "col1,col2";
for($i=0; $i<25;$i++)
{
    echo "key :".$i.", ".($i*$i)."\r\n";
}

You should be able to test that out as is and see how it works.

The added beauty is that most users will be directed to download the file rather than opening it, so the user doesn’t even leave the page (most of the time).