The last question first. I lifted the download code from:
http://www.dynamicdrive.com/forums/showthread.php?t=63292
post #5 in that thread. It would probably be best to ask about other extensions there. However, in limited testing I've found that the default section works with .pdf, .gif, and .htm. I have my own questions about the code. Like can the a page be loaded on completion? And it looks like the fclose() is outside the conditional where the fopen() is executed, could that be fixed or would that break it? I have others, I should post to that thread.
Anyways, the delay for closing the colorbox is to make sure the download dialogue (activated by a display none iframe) has time to appear. We can put it on the top page, then we can close the colorbox immediately.
Here's the new index_3.php:
<?php
$passwords['joesentme'] = '/wamp/pdf/pdf_1.pdf';
$passwords['bobsyeruncle'] = '/wamp/pdf/pdf_2.pdf';
$thePass = isset($_POST['txtPassword'])? $_POST['txtPassword'] : '';
$approved = false;
if (array_key_exists($thePass, $passwords) and !isset($_POST['scripted'])){
$fullPath = $passwords[$thePass];
if ($fd = fopen ($fullPath, "r")) {
$fsize = filesize($fullPath);
$path_parts = pathinfo($fullPath);
$ext = strtolower($path_parts["extension"]);
switch ($ext) {
case "pdf":
header("Content-type: application/pdf"); // add here more headers for diff. extensions
header("Content-Disposition: attachment; filename=\"".$path_parts["basename"]."\""); // use 'attachment' to force a download
break;
default;
header("Content-type: application/octet-stream");
header("Content-Disposition: filename=\"".$path_parts["basename"]."\"");
}
header("Content-length: $fsize");
header("Cache-control: private"); //use this to open files directly
while(!feof($fd)) {
$buffer = fread($fd, 2048);
echo $buffer;
}
}
fclose ($fd);
die();
}
?>
<!DOCTYPE html>
<html>
<head>
<title>Login for Files</title>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<?php
if (array_key_exists($thePass, $passwords)){
$approved = true;
?>
<script type="text/javascript">
if(parent.jQuery('iframe[name=filetransferiframe]').size() === 0)
parent.jQuery('<iframe name="filetransferiframe" style="display: none;" src="about:blank" width="0" height="0" scrolling="auto"></iframe>').appendTo('body');
onload = function(){
document.forms.form.setAttribute('target', 'filetransferiframe');
document.forms.form.setAttribute('action', 'download.php');
document.forms.form.txtPassword.setAttribute('value', '<?php echo $thePass; ?>');
document.forms.form.submit();
parent.jQuery.colorbox.close();
}
</script>
<?php
}
?>
<style type="text/css">
#required, #wrong {
color: red;
font: bold 90% sans-serif;
}
</style>
</head>
<body>
<h1>Login for Files</h1>
<form name="form" method="post" action="<?php echo $_SERVER['PHP_SELF']; ?>">
<p>Password:
<br><input type="password" title="Enter your password" name="txtPassword"></p>
<script type="text/javascript">
document.write('<input type="hidden" name="scripted" value="scripted">');
</script>
<p><input type="submit" name="Submit" value="Login"> <input type="reset" value="Reset"><br><?php
if(!$approved and isset($_POST['scripted'])){
if( $thePass == ''){
echo ' <span id="required">Password Required!</span>';
} else {
echo ' <span id="wrong">Incorrect Password!</span>';
}
} ?><span> </span><noscript><a href="index.html">Return to Previous Page</a>
</noscript>
</p>
<script type="text/javascript">
document.forms.form.txtPassword.focus();
</script>
</form>
</body>
</html>
<?php
die();
?>
I've also added non-javascript code so that a non-javascript user, if they get to the page and have the password can get the file. In that regard, notice the noscript link:
<noscript><a href="index.html">Return to Previous Page</a>
</noscript>
near the end. that should be to the page that (when javascript is enabled) launches the colorbox, or to the page you want non-javascript users to go to after downloading, or attempting to download.
One other addition - focus automatically goes to the password field when the login page is opened. (javascript only)
About the various browsers, I had no problem in any of them, except that with Chrome and IE the dialogue was at the bottom in a different form than I'm used to. But that appears to be the standard way in those browsers. I didn't have to try twice in any of them.