Bloquer les téléchargements directs

- downloads/
- - fichier1.rar
- - fichier2.pdf
- - fichier3.zip
- - .htaccess
- download.php
- telechargements.html

Deny from all

<?php
/* Configuration */
define('FILES_PATH', 'downloads/');
define('ALLOWED_HOST', 'example.com');


/* Script */
if(isset($_SERVER['HTTP_REFERER']) && isset($_GET['file']) && file_exists(FILES_PATH.$_GET['file'])) {
	if(preg_match('#^http://'.ALLOWED_HOST.'#i',$_SERVER['HTTP_REFERER'])) {
		$file = FILES_PATH.$_GET['file'];
		header('Content-Description: File Transfer');
		header('Content-Type: application/octet-stream');
		header('Content-Disposition: attachment; filename='.basename($file));
		header('Content-Transfer-Encoding: binary');
		header('Expires: 0');
		header('Cache-Control: must-revalidate, post-check=0, pre-check=0');
		header('Pragma: public');
		header('Content-Length: ' . filesize($file));
		ob_clean();
		flush();
		readfile($file);
		exit;
	} else {
		header('HTTP/1.1 403 Forbidden');
		include 'views/errors/unauthorized_download.php';
	}
} else {
	header('HTTP/1.1 403 Forbidden');
	include 'views/errors/unauthorized_download.php';
}
?>