that is exactly what i am doing.Originally Posted by visualAd
My script uploaded file 'mendhak.txt' and generates a new random name and stores it in /uploads/ directory which has forbidden access. The user never sees the generated name so they can never see the actual file.
when they go to download the file, i read from file, but i read it as 'downloadfile.txt' and not as the random name.




Reply With Quote