Merge pull request #26 from dxw/feature/readfile

Use readfile() for serving protected uploads
dxw · Jun 28, 2024 · b3160e3 · b3160e3
2 parents 6a42874 + f52d008
commit b3160e3
Show file tree

Hide file tree

Showing 3 changed files with 11 additions and 36 deletions.
diff --git a/dxw-members-only.php b/dxw-members-only.php
@@ -3,7 +3,7 @@
  * Plugin Name: dxw Members Only
  * Plugin URI: http://dxw.com
  * Description: Make your WordPress site visible to signed-in users only with the added ability to whitelist specific content for access by all users.
- * Version: 4.2.1
+ * Version: 4.3.0
  * Author: dxw
  * Author URI: http://dxw.com
  * Text Domain: dxwmembersonly

diff --git a/readme.txt b/readme.txt
diff --git a/redirect.php b/redirect.php
@@ -25,9 +25,16 @@ function dxw_members_only_serve_uploads()
                 $type = $mime['type'];
             }
 
-            header('Content-type: ' . $type);
-            echo file_get_contents($file);
-            die();
+            header('Content-Type: ' . $type);
+            header('Content-Length: ' . filesize($file));
+            header('Last-Modified: ' . gmdate('D, d M Y H:i:s T', filemtime($file)));
+            header('Accept-Ranges: none');
+
+            header('X-Accel-Buffering: no');
+
+            ob_get_flush();
+            readfile($file);
+            exit;
         }
     }
 }