Your script is highly vulnerable, ref:local file inclusion

Try selinux, this could block your script  run sestatus on the prompt

Ashford K.,

George Bernard Shaw  - "A government that robs Peter to pay Paul can always depend on the support of Paul."

2009/6/2 James Gutu <jmgutu@gmail.com>
Hi guys and gals.

Having a problem with access kenya hosting services (again).

I have this script that automatically downloads a PDF file when a link is clicked.

It works on all my testing servers but not on Access Kenya's.

Please find the script below:

<?php

$filetodownload = $_GET['filedownload'];

header('Content-type: application/pdf');

header('Content-Disposition: attachment; filename='.$filetodownload);

readfile($filetodownload);
?>

Script is simple enough. Any work around apart from pointing the script to another server that can handle? 

Or anyone from Access Kenya who can explain this?


Regards,
.jmg

_______________________________________________
Skunkworks mailing list
Skunkworks@lists.my.co.ke
http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks
Other services @ http://my.co.ke
Other lists
-------------
Skunkworks announce: http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks-announce
Science - http://lists.my.co.ke/cgi-bin/mailman/listinfo/science
kazi - http://lists.my.co.ke/cgi-bin/mailman/admin/kazi/general