menu/down

<?php
mysql_connect('localhost','root','');
mysql_select_db('db_arsip');
$querya = mysql_query("SELECT * FROM scanview WHERE id='14'")or die(mysql_error());
$qa = mysql_fetch_array($querya);

$direktori = "http://localhost/arsip/images/"; // folder tempat penyimpanan file yang boleh didownload (berlokasi di folder "gambar")
    $filename = $qa['namafile'];

    $file_extension = strtolower(substr(strrchr($filename,"."),1));

    //extension yang diperbolehkan
    switch($file_extension){
      case "pdf": $ctype="application/pdf"; break;
      case "exe": $ctype="application/octet-stream"; break;
      case "zip": $ctype="application/zip"; break;
      case "rar": $ctype="application/rar"; break;
      case "doc": $ctype="application/msword"; break;
      case "xls": $ctype="application/vnd.ms-excel"; break;
      case "ppt": $ctype="application/vnd.ms-powerpoint"; break;
      case "gif": $ctype="image/gif"; break;
      case "png": $ctype="image/png"; break;
      case "jpeg":
      case "jpg": $ctype="image/jpg"; break;
      default: $ctype="application/proses";
    }

    if ($file_extension=='php'){
      echo "<h1>Access forbidden!</h1>
            <p>Maaf, file yang Anda download sudah tidak tersedia atau filenya (direktorinya) telah diproteksi. <br />
            Silahkan hubungi <a href='mailto:[email protected]'>Programmer</a>.</p>";
      exit;

    }else{

      header("Content-Type: octet/stream");
      header("Pragma: private");
      header("Expires: 0");
      header("Cache-Control: must-revalidate, post-check=0, pre-check=0");
      header("Cache-Control: private",false);
      header("Content-Type: $ctype");
      header("Content-Disposition: attachment; filename=".$filename);
      header("Content-Transfer-Encoding: binary");
      header("Content-Length: ".$qa['filesize']);
      readfile("$direktori$filename");
      exit();
    }
?>