CODEWITHSUNDEEP
phpfilesslinternet-explorer-8download
SmileyHere
SmileyHere

Reputation: 1

Broken IE8 file download over SSL

I wrote and maintain a site, and two weeks ago Monday March 11th... right after two IE updates and daylight savings time went into effect. This code broke, but only for Windows XP machines running IE8, AND only with SSL encryption. The problem is that I need this file to be transmitted securely. Again this code works with firefox on an XP machine, or IE 9 on Windows 7

The file is created on request and deleted immediately

The problem is not intermittent... it fails consistently.. and quickly ( immediately basically... so there is no timeout issue or something )

here is the error: https://i.sstatic.net/fmPnA.png

Here is the current PHP file:

//////////////////
// Download script
//////////////////

$path = $_SERVER['DOCUMENT_ROOT']."/mysite/"; // change the path to fit your websites document structure
$fullPath = $path.$B->LastName.$P->Property_ID.".fnm"; 
if ($fd = fopen ($fullPath, "r")) {
    $fsize = filesize($fullPath);
    $path_parts = pathinfo($fullPath);
    $ext = strtolower($path_parts["extension"]);
    switch ($ext) {
       case "fnm":
        header("Content-type: application/fnm"); // add here more headers for diff. extensions
       header("Content-Disposition: attachment; filename=\"".$path_parts["basename"]."\""); // use 'attachment' to force a download
        break;
        default;
        header("Content-type: application/octet-stream");
        header("Content-Disposition: filename=\"".$path_parts["basename"]."\"");
    }
    header("Content-length: $fsize");
    header("Cache-control: private"); //use this to open files directly
    while(!feof($fd)) {
        $buffer = fread($fd, 2048);
        echo $buffer;
    }
}
fclose ($fd);

////////////////////////
//Delete the file from the server
/////////////////////////
$myFile = $path.$B->LastName.$P->Property_ID.".fnm"; 
unlink($myFile);

exit;

Upvotes: 0

Views: 1885

Answers (1)

Olivier
Olivier

Reputation: 329

When I ran my tests, It seems all that is needed is to have the cache-control to Private, and add the Pragma: private header
Sample Code:

header('Content-Disposition: attachment; filename='.urlencode($zipFileName));
header('Content-Type: application/zip');
header('Content-Length: '.filesize($zipFileName) );
header("Cache-Control: private");
header("Pragma: private");
readfile($zipFileName);


Works like a charm with IE8, over https.

Upvotes: 4

Related Questions