PHP - Php Readfile

I'm trying to use the readfile() function to read a html page which has a video embedded (.swf file).

When I call the function, it seems like it just loads the html file but without the dependent files (css,js, etc)
When I call it directly it loads just fine.

Created a hyperlink 'openvideo.php?id=video' that calls this function below:

if($_REQUEST['id'] == 'video') {
   
   readfile('/usr/home/site.com/htdocs/content/videofolder/video.html');

} else {
   
   echo 'nada';
}

Any help is appreciated.

I have an FLV player and I am using a php file to read an FLV that is above webroot. It reads the FLV just fine, however, during its cache process or while it is still downloading, if I click on the home button (home button of the current site), the server does not respond until the FLV has been fully cached.

Now this is only occuring in firefox, chrome and IE. In safari it works fine. Who know, maybe it is a header issue. Here is my script that I pass to my FLV player

<?php
include("connect.php");
if ($_SESSION['loggedIn'] == true)
{
    $id        = $_GET['id'];

    $query    = mysql_query("SELECT video FROM reviews WHERE id = '$id'");
    $row    = mysql_fetch_array($query);

    $filename    = "../../../armsmedia/videos/".$row['video'];

    header( 'Content-Description: File Transfer' );
    header( 'Content-Type: application/octet-stream' );
    header( 'Content-Disposition: attachment; filename='.basename( $filename ) );
    header( 'Content-Transfer-Encoding: binary' );
    header( 'Expires: 0' );
    header( 'Cache-Control: must-revalidate, post-check=0, pre-check=0' );
    header( 'Pragma: public' );
    header( 'Content-Length: ' . filesize( $filename ) );
    ob_clean();
    flush();
    readfile( $filename );
    exit;
}
?>

I wrote a small application to force downloads of various large video files using readfile. This worked fine. However, the users have changed hosts and now it doesn't work. Small files are fine, but large files will cut off before finishing. Test file is 114MB, but it is always cut off at exactly 67.2MB or 51.4MB depending on a couple criteria.

I've stripped the application down to the key part that's not working and run it on a test page the just immediately goes the file - no logins or any of that shenanigans and htaccess blocking either:

$file = some/file/on/the/server.wmv; //114MB
hea der('Content-Description: File Transfer');
hea der("Content-Type: application/octet-stream");
hea der("Content-Disposition: attachment; filename=" .basename($file));
hea der("Content-Transfer-Encoding: binary");
hea der('Expires: 0');
hea der('Cache-Control: must-revalidate, post-check=0, pre-check=0');
hea der('Pragma: public');
hea der('Accept-Ranges: bytes');
hea der("Content-Length: ".filesize($file));
ob_clean();
flush();
@readfile($file);

(gaps in the header words are to prevent forum breakage)

I've tried the following variations:
transfer encoding - chunked (this results in getting a 51.4 MB download rather than 67.2) content-type application/force-download tried the default force-download code from the php.net manual tried the chunking function variations on php.net readfile page tried without accept ranges originally (only spotted that on this site) set_time_limt to one hour set max memory to 300MB (phpinfo has shown these changes did get accepted) used htacess to disable gzip and deflate (this results in getting a 51.4 MB download rather than 67.2)
(SetEnv no-gzip dont-vary
or
RewriteEngine On
RewriteRule . - [E=no-gzip:1]
or
RemoveOutputFilter DEFLATE html txt xml css js php wmv)
None of these have solved the issue. The code worked fine on the old site, works fine on my site, and works fine on my test server. Direct downloads from the broken site also work fine, just not readfile downloads. The filesize is reading correctly if I echo just that, and it reads properly on the progress bar when downloading through readfile.

The hosting company are blaming my coding. The htaccess is the bit I'm least sure of and I find it hard to get solid info on this part on the web.

Is there anything wrong with my code that could be causing this? Am I missing something? What could be causing the problem?

Many Thanks

In a PHP file [php_one.php], I wrote some PHP code that contained a form.  I used ECHO to write the HTML inside of the PHP tags.

On another PHP page [php_two.php], I wanted to show the code that was used to create the first page [php_one.php].

My first effort provided an interesting result, since the PHP code was readable.  However, all HTML code was visible in its executed form.

There was an actual input field and a submit button (not the code used to produce them) in the context of my coding.

I have tried using:

file_get_contents("FILE")
$array = file("FILE")
readfile("FILE")

All results were similar and carried the same problem.

How can I view code so that even the HTML is visible as code?

Which is better? Why and why not?

An image is secured in the root directory, to be displayed to customer in html document.

This image can be displayed as a link to a php readfile page
The readfile page uses getimagesize("../rootdir/abc.png"), headers, and readfile()
echo "<img src='READFILE.php?image_name=abcd.png'>";
-or-
The image can be displayed directly to browser using
file_get_contents("../rootdir/abc.png"), base64_encode(), and data:image;base64.
echo '<img src="data:image;base64, ' .$img. ' " style="width:5in;height:5in;">';

Thank you.

An image is secured in the root directory, to be displayed to customer in html document.

This image can be displayed as a link to a php readfile page
The readfile page uses getimagesize("../rootdir/abc.png"), headers, and readfile()
echo "<img src='READFILE.php?image_name=abcd.png'>";
-or-
The image can be displayed directly to browser using
file_get_contents("../rootdir/abc.png"), base64_encode(), and data:image;base64.
echo '<img src="data:image;base64, ' .$img. ' " style="width:5in;height:5in;">';

Which is better? Why and why not?

Thank you.

Edited yesterday at 01:15 PM by ChenXiu

I am wanting HTML to render within a table and sourcing the data from another file. In an attempt to do this, I tried:
Code: [Select]
<TABLE class="main">
                <TR>
                        <TD>
                                <?php
                                        readfile('./1/index.html');
                                ?>
                        </TD>
                </TR>
        </TABLE>
This does not work and I am wondering if anyone knows how it can be done - or even if it can be done?

Circumstance:
"label.php" is actually PHP "readfile" page that fetches images from a private root directory.
"customer.html" is the public page where visitors view their images like this:
Dear Customer, Here Is Your Image: <img src="label.php?image=id_number_1001.png">

Question:
Is it okay to use a hidden $_SESSION["filename"] and change what I have now:
Dear Customer, Here Is Your Image: <img src="label.php?image=id_number_1001.png">
To this:
Dear Customer, Here Is Your Image: <img src="label.php">

This works by having the actual image name stored in a hidden session variable, using the following lines of code on my readfile page "label.php" like this:
$imgName = $_SESSION[ "filename" ] . ".png";
$imgPath = "../root_directory/" . $imgName;

Since I do not want customers to be allowed to ever see the image again after logging out, is it okay to rely on a hidden session variable for the filename as I described above?

(Potential hackers will be less tempted to "try different image names and numbers" like "id1.png, id2.png, id3.png" because they will have no idea if the image will be a gif, jpeg, or png, nor have any idea of a numbering sequence.)

Thank you!!