View difference between Paste ID: RScy5tv6 and JMSKhKi4

 <?php
 // Tentukan folder id_file yang boleh di download
 $folder = "../doc/";
-
+if(!isset($_GET['id_file'])){
 	die('tidak ada id_file yg dibuka');
 }
 // Lalu cek menggunakan fungsi id_file_exist
 if (!file_exists($folder.$_GET['id_file'])) {
-<p> Anda tidak diperbolehkan mendownload id_file ini.</p>";
+
 <p>&nbsp;</p>
 <p> File yang anda cari tidak ada.</p>";
-
+
-// Apabila mendownload id_file di folder id_files
+
-else {
+else { // Apabila mendownload id_file di folder id_files
   header("Content-Type: octet/stream");
-  header("Content-Disposition: attachment;
+//===============
-  filename=\"".$_GET['id_file']."\"");
+	$name=trim(strtolower($_GET['id_file']) );
   header("Content-Disposition: attachment; filename=\"".$name."\"");
 /*
-  fclose($fp);
+
   $data = fread($fp, id_filesize($folder.$_GET['id_file']));
 */
 	$data=file_get_contents($folder.$_GET['id_file']);
   //fclose($fp);
   print $data;
 }
 ?>