serving purchased files

[eluser]infinivert[/eluser]
Nevermind, I think I figured it out:

Create a downloads (or whatever you want to call it) folder outside the web-root, and put your files in there. Then create a CI controller function that checks for whatever verification you want, then, if everything is good to go:

Code:

$this->load->helper('download');

$data = file_get_contents("../downloads/myfile.ext"); // Read the file's contents
$name = 'myfile.ext';
force_download($name, $data);

The verification process can check for a username / password or a verification code, whether or not the download is expired, etc., and keeping the actual file outside the web-root keeps the outside world from being able to get directly to the file.

There's probably more security that could / should be done, and I'm all ears if you guys have any suggestions.

Thanks again!

--Josh