PHP - Question On Google Checkout And How To Sell Downloads

I wrote this basic script yesterday to process and generate a Google Site Map. And it works! BUT I want to advance this script to accommodate for something else and I don't know the correct path to take from here, but I will tell you what I've found out so far..

Current Situation:

1 - Currently my below script generates urls in the site map like:
http://abcdefg.com/index.php?dispatch=products.view&product_id=29826

2 - I have .htaccess configured to rewrite the urls to the products name data like:
http://abcdefg.com/pennies/wheat-pennies/lincoln-wheat-penny-cent.html (just an example) and these urls are ONLY active if clicking on the site links themselves - meaning if I enter: http://abcdefg.com/index.php?dispatch=products.view&product_id=29826 directly into the url, the url does not resolve to this natural friendly url name.

What Id like to achieve (which I don't know what direction I should be looking!):

- I'd like my xml output urls (as current) to be written in the natural format (as in #2 above).

FYI here is a current example output item in my sitemap:

Code: [Select]
<url>
  <loc>http://abcdefg.com/index.php?dispatch=products.view&amp;product_id=29803</loc>
  <changefreq>weekly</changefreq>
  <lastmod>2010-09-24T08:00:00+04:00</lastmod>
 </url>
Can anyone give me some guidance on what method might work for this? Do you think it's more a mod_rewrite issue? Or can this be handled easier with straight up modifications to my below? I'm just a bit confused on what direction I should be looking.. Thanks for any input.

<?php
header("Content-Type: text/xml;charset=iso-8859-1");
  echo '<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">';
 //include('config.local.php');
  $cxn = mysqli_connect($config['db_host'], $config['db_user'], $config['db_password'], $config['db_name']);
  $query = "SELECT cscart_product_descriptions.product_id, cscart_products.product_id, cscart_products.timestamp
FROM cscart_product_descriptions JOIN cscart_products ON cscart_product_descriptions.product_id = cscart_products.product_id
WHERE cscart_products.status='A' LIMIT 10000";
  $result = mysqli_query($cxn, $query);
  $row = mysqli_fetch_array($result);
  while ($row = mysqli_fetch_array($result)) {
  $formatedTime = $row['timestamp'];
      echo '<url>
  <loc>http://abcdefg.com/index.php?dispatch=products.view&amp;product_id=' . $row['product_id'] . '</loc>
  <changefreq>weekly</changefreq>
  <lastmod>'. date('c',$formatedTime) .'</lastmod>
  </url>';
  } //while ($row = mysqli_fetch_array($result))
  echo '</urlset>';
?>

I'm creating a CSV file on the fly for download in the backend - a stock management function.

The script works fine extracting from the database fine and creates the CSV. But the next step of the script is to download the file using:

header('Content-type: application/octet-stream');
header('Content-Disposition: attachment; filename="' . $filename . '"');

This works, in as much as it downloads the file specified by $filename but when I open the file it's empty and the File Size in properties is 0.

But if I go into my FTP and download the file it contains all the data as expected?


Anyone have any ideas whats wrong? Thoughts I've had:
File size too large would using ob_start('ob_gzhandler'); help? Or is there an INI setting?
File encoding needs to be set? UTF8?
Content Type should be text/csv?

Thanks

Hi all,

I've tried many, many variations of php download script using readfile() fread() fpassthru() etc... but none seem reliable. I can download small files perfectly fine, but say I have a 30 or 90mb zip file the download ocassionally bombs out and says the download is complete even though the full file hasn't been transferred.
I have tired it on several browsers with pretty much the same issue. The interesting bit for me is that if I download the same file across different browsers (whether or not they start at the same time or not) on my computer the download stops at the same time (not same point into download) for each browser.  Its as if the connection is being reset on my website on a global basis...

The important part of my script as it is at the moment:

Code: [Select]
// resumable download?
$is_resume = TRUE;

//Gather relevant info about file
$size = filesize($path);
$fileinfo = pathinfo($path);

@ini_set('magic_quotes_runtime', 0);
set_time_limit(0);
apache_setenv('no-gzip', '1');
mb_http_output("pass");

// required for IE, otherwise Content-disposition is ignored
if(ini_get('zlib.output_compression')) { ini_set('zlib.output_compression', 'Off'); }
 
//workaround for IE filename bug with multiple periods / multiple dots in filename
//that adds square brackets to filename - eg. setup.abc.exe becomes setup[1].abc.exe
$filename = (strstr($_SERVER['HTTP_USER_AGENT'], 'MSIE')) ?
preg_replace('/\./', '%2e', $fileinfo['basename'], substr_count($fileinfo['basename'], '.') - 1) :
$fileinfo['basename'];

$file_extension = strtolower($fileinfo['extension']);

    //This will set the Content-Type to the appropriate setting for the file
    switch($file_extension) {
        case 'zip': $ctype='application/zip'; break;
        case 'pdf': $ctype='application/pdf'; break;
        default:    $ctype='application/force-download';
    }

    //check if http_range is sent by browser (or download manager)
    if($is_resume && isset($_SERVER['HTTP_RANGE'])) {
        list($size_unit, $range_orig) = explode('=', $_SERVER['HTTP_RANGE'], 2);
        if ($size_unit == 'bytes') {
            //multiple ranges could be specified at the same time, but for simplicity only serve the first range
            //http://tools.ietf.org/id/draft-ietf-http-range-retrieval-00.txt
            list($range, $extra_ranges) = explode(',', $range_orig, 2);
        } else {
            $range = '';
        }
    } else {
        $range = '';
    }

    //figure out download piece from range (if set)
    list($seek_start, $seek_end) = explode('-', $range, 2);

    //set start and end based on range (if set), else set defaults
    //also check for invalid ranges.
    $seek_end = (empty($seek_end)) ? ($size - 1) : min(abs(intval($seek_end)),($size - 1));
    $seek_start = (empty($seek_start) || $seek_end < abs(intval($seek_start))) ? 0 : max(abs(intval($seek_start)),0);

    //add headers if resumable
    if ($is_resume) {
        //Only send partial content header if downloading a piece of the file (IE workaround)
        if ($seek_start > 0 || $seek_end < ($size - 1)) {
            header('HTTP/1.1 206 Partial Content');
        }
header('Accept-Ranges: bytes');
        header('Content-Range: bytes '.$seek_start.'-'.$seek_end.'/'.$size);
    }

    header("Cache-Control: cache, must-revalidate"); 
    header("Pragma: public");
    header('Content-Type: ' . $ctype);
    header("Content-Disposition: attachment; filename=\"".$filename."\"");
    header('Content-Length: '.($seek_end - $seek_start + 1));

    //open the file
    $fp = fopen($path, 'rb');
    //seek to start of missing part
    fseek($fp, $seek_start);

    //start buffered download
    while(!feof($fp)) {
        //reset time limit for big files
        set_time_limit(0);
        print(fread($fp, 1024*8));
        flush();
        ob_flush();
    }
    fclose($fp);
exit();

I did have the following section in replace of the above fread section up until this morning (but same issue):

Code: [Select]
// http headers for zip downloads
header("Pragma: public");
header("Expires: 0");
header("Cache-Control: must-revalidate, post-check=0, pre-check=0");
header("Cache-Control: public");
header("Content-Description: File Transfer");
header("Content-type: application/octet-stream");
header("Content-Disposition: attachment; filename=\"".$filename."\"");
header("Content-Transfer-Encoding: binary");
header('Content-Length: '.$size);
ob_end_flush();
@readfile($path);

I have tried different headers and so forth, but all generally seem to bomb out occassionally before the download completes. But they don't bomb out at a particular point in the file size (ie at 25mb). Just seems to work and then die at the same time across different browsers, even when they are started at different times.

Very strange and I've spent days modifying the script and still no answers. Sometimes the files download fine, but bomb out too many times for it to be satifactory to leave.

Any help or pointers would be much appreciated.

Not sure if I'm putting this in the correct spot, but,
Can anyone give me a link or an idea of how to fix Drive-By downloads I have on a site I have created? Everything I search for online brings up how to repair an issue someone may have gotten on their computer from a drive-by download, but nothing talks about repairing it on the actual site itself. I don't have any injections or anything, but doing a check on my site from the norton site shows that I have 1 Threat and it's on a contact form page due to Drive-By Downloads, is this from the php tags on the form not being stripped or from the javascript possibly?

Some old lady submitted my site to http://safeweb.norton.com/report/show?url=gotmine.com, now I have to fix it I guess.

 

Any help would be great, Thanks.

Hi !

I am currently trying to develop a PHP application in which my server downloads a file and the user can do the same almost simultaneously. I already think about the problem "If the user downloads fastly than the server...", but it's not a problem at this moment.
To do so, I used the header and readfile functions of php. Here is my code :

Code: [Select]
header('Content-Type: application/octet-stream');
header('Content-Disposition: attachment; filename="'.$data['name'].'";');
header('Content-Transfer-Encoding: binary');
header('Content-Length: '.$data['size']);
readfile($remoteFile);

I must to use the Content-length header to set the proper size of the file and not the size that is downloaded when the user clicks on the link. However, after some seconds or minutes, download is stopped and I need to restart...
If you think about a solution, even if it didn't use the header(); function, please tell me.

Thank you in advance...

Is there a way (in PHP) to prompt to download file regardless of it's type?  I have taken someone's suggestions and put files in a folder with HTAccess protection. ALL I want
to do is just grab the files and prompt download (regardless of what the type of file is), is there an easy way to do this in PHP.

This upload form code works successfully, where a file is chosen, renamed and stored in the 'upload' folder,

So, I have a script that works downloading a file - excerpt below:

Code: [Select]
header("Pragma: public");
header("Expires: 0");
header('Content-type: "application/octet-stream"');
header("Cache-Control: private",false);
header("Cache-Control: must-revalidate, post-check=0, pre-check=0");
$f = "Content-Disposition: attachment; filename=\"".$myfile['downloadname'].".".$myfile['ext']."\"";
header($f);
header("Content-Transfer-Encoding: binary");
header("Content-Length: ".filesize($file));
    ob_clean();
    flush();
readfile("$file");
exit();
I record elsewhere in a mysql database when the script is started.

In addition, I'd like to be able to record whether the download completes (successfully or otherwise). 

As it is, the script can run and the user press cancel and it looks like a download but isn't.

Is this possible?  If so, how?

Your help, as ever, gratefully received.

I would like to be able to add a yes/no to a field in a 'user' database when a logged in user clicks on a link to download a file.
The site I have built stores docs and applications. and my client would like to know which user has downloaded a certain application (clicked on a button to 'download' and installer file.
Is this possible?

This is part PHP, part MySQL question, but since I'm more interested in the process-flow, I'll ask here.

I am ready to start coding the e-commerce module of my website, which features mostly paid subscriptions.

 

Do the below steps sound like the correct sequence to do things in...

	- Anonymous shopper adds subscription to Shopping Cart
	- Shopper goes to check out
	- Shopper completes checkout form which includes setting up the account and entering payment details
	 
	Now for the important stuff...
	- System takes Shopping Cart details - which include the PHPSessionID
	- System creates Member record
	- System takes Shopping Cart details associated with PHPSessionID and links them to the new Member record 
	- System creates Order and Order Details records
	- System runs the payment
	- System hopefully gets back a "success" message from Payment Processor
	- System activates the Member's account
	

 

How does that sound at a high-level?

 

Really what I'm trying to validate is if I should create the Member record 1st, then create the Order records 2nd, and worry about the payment last.

(Originally I was going to run the payment first, but I'm thinking it's better to capture the anonymous shopper's details in a Member record and Order records first, because even if the paymnt fails, you want something to work off of - like reaching out to the person and getting another valid payment.)

 

Thoughts?

 

I could use some suggestion on how to model the Checkout Process for my e-commerce site.

As I see it, when a person "checks out" there are 5 steps...

1.) Create an Account/Log-In
2.) Enter Addresses
3.) Choose Shipping Options
4.) Enter Payment Details
5.) Review & Place Order

I'm trying to avoid having gigantic "God classes" and struggling to figure out how to abstract things in good OOP terms.

My Head First: Design Patterns book talked about the "State Pattern" and I'm wondering if that might be a good approach?   

Maybe each of the 5 steps above could be a "state" in the Checkout Process?

What do you think?


TomTees

Hi,

I have downloads that are available for users. They can click the links to download the file. Once they do this, I have a query that updates the number of downloads that file has received. I need to create a query that adds up all the rows Total Downloads.

So for example: i have 3 rows:
Name       -       Total Downloads
First       -          2
Second       -        23
Third       -          7

Using the query for these rows would give me an amount of 32.

Any idea how to do this?

I don't want to have to create a new column to find the total number of downloads. Any other ways?

Hi all,

I am looking to integrate Paypal Express checkout on my site and have been working with the API today.

I have got the code working in a static state with predefined payment amounts but I am having trouble making this dynamic.

When you first submit a request to set up an express checkout you send the payment amount along with it. The paypal server then makes the checkout and the user is redirected to the paypal site to login and authenticate. From here they click to be redirected back to my site where I have a pay button which when clicked submits the final request to confirm the payment.

I am sure there must be a simple solution to this because so many people use paypal already but when you submit the final confirmation request, you have to send the payment amount again, but because the page redirects onto the paypal page inbetween, I can't use a session variable to store the amount. How have other people overcome this?

Thanks