gnu-social/actions/attachment_download.php

<?php

if (!defined('GNUSOCIAL')) { exit(1); }

/**
 * Download notice attachment
 *
 * @category Personal
 * @package  GNUsocial
 * @author   Mikael Nordfeldth <mmn@hethane.se>
 * @license  https://www.gnu.org/licenses/agpl-3.0.html GNU Affero General Public License version 3.0
 * @link     https:/gnu.io/social
 */
class Attachment_downloadAction extends AttachmentAction
{
    public function showPage()
    {
        // Checks file exists or throws FileNotFoundException
        $filepath = $this->attachment->getFileOrThumbnailPath();
        $filesize = $this->attachment->size ?: 0;
        $mimetype = $this->attachment->getFileOrThumbnailMimetype();

        if (empty($filepath)) {
            $thiis->clientError(_('No such attachment'), 404);
        }

        $filename = MediaFile::getDisplayName($this->attachment);

        // Disable errors, to not mess with the file contents (suppress errors in case access to this
        // function is blocked, like in some shared hosts). Automatically reset at the end of the
        // script execution, and we don't want to have any more errors until then, so don't reset it
        @ini_set('display_errors', 0);

        header("Content-Description: File Transfer");
        header("Content-Type: {$mimetype}");
        header("Content-Disposition: attachment; filename=\"{$filename}\"");
        header('Expires: 0');
        header('Content-Transfer-Encoding: binary'); // FIXME? Can this be different?

        AttachmentAction::sendFile($filepath, $filesize);
    }
}