php文件下载头

这让我困了很长时间，经过大量研究，我尝试了几种方法。

这是我下载文件的当前代码：

<?php
  require_once ('./newpub_profile.php');
  $thetitle = $row['title'];
  $thesize = $row['size'];
 function filedownload() { 
    GLOBAL $thesize, $thetitle;
    header("Content-Type: application/msword");
    header("Content-Disposition: attachment; filename=".$thetitle);
    header("Content-Length: ".$thesize);
    header("Content-Transfer-Encoding: binary");
    readfile($realfile);
 }
?>

在另一个php页面上，我正在填充一个查询结果表，每个结果都得到一个相应的下载链接。如果我把鼠标放在链接上，我可以验证它的下载id是否正确（在mysqldb中）。下载链接当前指向download.php，其中包含上述代码。这段代码允许我下载一个名为"download.php"的文件，该文件不包含任何内容。我从用户配置文件页面调用函数"filedownload（）"。

这就是我显示下载链接的方式：

while ($row = mysqli_fetch_array($r,MYSQLI_ASSOC))
        {
            echo '<tr><td align="left">' .
            $row['title'] . '</td><td align="left">'
            . $row['genre'] . '</td><td align="left">'
            . $row['length'] . '</td><td align="left">'
            . $row['created'] . '</td><td align="left">'
            //. $row['views'] . '</td><td align="left">'
            . "<a href='download.php?id={$row['upload_id']}'>Download</a></td>" . '</td></tr>';
        }

下面是调用页眉函数的页面中的代码。

    <?php if (isset($_POST['query']))
   {
   require_once (connectionToDB); //Connect to the db
    // Make the query
   $genre = $_POST['select_genre'];
   $length = $_POST['select_length'];
    $upviews = "UPDATE upload
                SET views = views + 1
                WHERE genre = '$genre' AND length = '$length'";
    $runviewupdate = mysqli_query ($dbc, $upviews);

    $q = "SELECT upload_id, title, genre, length, created
        FROM upload
        WHERE genre = '$genre' AND length = '$length'
        ORDER BY created DESC, title DESC";

    $r = mysqli_query ($dbc, $q); // Run the query
    if($r)
    {
        // If it ran okay, display the records
        echo '<table align="center"
            cellspacing="3" cellpadding="3"
            width="75%">
           <tr><td align="left"><b>Title</b></td>
           <td align="left"><b>Genre</b></td>
           <td align="left"><b>Pages</b></td>
           <td align="left"><b>Submitted</b></td>
           <td align="left"><b>Download</b></td>';
        // Fetch and print all the records:
        while ($row = mysqli_fetch_array($r,MYSQLI_ASSOC))
        {
            echo '<tr><td align="left">' .
            $row['title'] . '</td><td align="left">'
            . $row['genre'] . '</td><td align="left">'
            . $row['length'] . '</td><td align="left">'
            . $row['created'] . '</td><td align="left">'
            //. $row['views'] . '</td><td align="left">'
            . "<a href='newpub_profile.php?id={$row['upload_id']}'>Download</a></td>" . '</td></tr>';
        }
        echo '</table>'; // Close the table
        mysqli_free_result ($r); // Free up the resources
    }
    else // If it did not run okay
    {
        // Public Message:
        echo '<p class="error">Your submissions could not be retrieved.  We
            apologize for any inconvenience.</p>';
        // Debugging message:
        echo '<p>' . mysqli_error($dbc) . '<br /><br />Query: ' . $q . '</p>';
    } // End of if ($r) IF.

}
//END DOWNLOAD HANDLER ******************************************************

    mysqli_close($dbc); // Close the database connection

if(isset($_GET['id'])) {
// Get the ID
    $id = intval($_GET['id']); //var_dump($id);
    require_once ('../mysqli_connect.php'); //Connect to the db
// Fetch the file information
    if($stmt = $mysqli -> prepare("SELECT `file_type`, `size`, `title`, 'content', 'upload_id'
            FROM `upload`
            WHERE `upload_id` =?")) {
      /* Bind parameters
         s - string, b - boolean, i - int, etc */
      $stmt -> bind_param("sissi", $file_type, $size, $title, $content, $upload_id);
      /* Execute it */
      $stmt -> execute();   /*FINISH PREPARED STATEMENTS*/
      /* Bind results */
      $stmt -> bind_result($result);
      /* Fetch the value */
      $stmt -> fetch();
      //echo $user . "'s level of priviledges is " . $result;
      /* Close statement */
      //$stmt -> close();

        if($result) {
            // Make sure the result is valid
            if (mysqli_num_rows($result) > 0) {
            // Get the row
                $row = mysqli_fetch_assoc($result);
                //var_dump($row);
                //$data = $row;
                $place = './uploads/'.$_SESSION_['email'].'/';
                $thefile = $place.$row['title'];
                $realfile = $thefile;
                $thetitle = $row['title'];
                $thesize = $row['size'];
               require_once('./download.php');
               filedownload();



            }
            else {
                echo 'Error! No such ID.';
            }
            // Free the mysqli resources
            mysqli_free_result($result);
        }
        else {
            echo "Error! Query failed: <pre>{$dbc->error}</pre>";
        }
        mysqli_close($dbc);
        $stmt -> close();
            }


    }

                    ?>