Added option to download files indirect via php script

README.md

@@ -30,6 +30,10 @@ It supports simultaneous downloads in background.
 2. Set security to true
 3. Find a password, hash it with md5 and replace the value of password.
 
+## Troubleshooting
+1. If you don't want a password set `security` to false
+2. If you have problems downloading files, check the permissions and try setting `indirect_download` to true
+
 Example (chosen password is root):
 
 ```

class/Session.php

@@ -2,7 +2,7 @@
 
 class Session
 {
-	private $config = [];
+	public $config = [];
 
 	private static $_instance;
 
@@ -61,4 +61,4 @@ public function logout()
 	}
 }
 
-?>
+?>

config/config.php

@@ -8,6 +8,7 @@
 	"password" => "63a9f0ea7bb98050796b649e85481845",
 	"outputFolder" => "downloads",
 	"extracter" => "avconv",
+	"indirect_download" => false,
 	"max_dl" => 3);
 
 ?>

getfile.php

@@ -0,0 +1,31 @@
+<?php
+	require_once 'class/Session.php';
+	require_once 'class/FileHandler.php';
+
+	$session = Session::getInstance();
+	$file = new FileHandler;
+
+	if(!$session->is_logged_in())
+	{
+		header("Location: login.php");
+	}
+
+	$filename = $_GET['file'];
+
+	if (strpos($filename, DIRECTORY_SEPARATOR) !== false || empty($filename)) 
+	{
+		die("Invalid parameter 'file'");
+	}
+
+	$path = $file->get_downloads_folder() . DIRECTORY_SEPARATOR . $filename;
+
+	$fp = fopen($path, 'rb');
+
+	header("Content-Type: application/octet-stream");
+	header('Content-Disposition: attachment; filename="' . $filename . '"');
+	header("Content-Length: " . filesize($path));
+
+
+	fpassthru($fp);
+
+	exit;

list.php

@@ -56,7 +56,14 @@
 				foreach($files as $f)
 				{
 					echo "<tr>";
-					echo "<td><a href=\"".$file->get_downloads_folder().'/'.$f["name"]."\" download>".$f["name"]."</a></td>";
+					if ($session->config["indirect_download"])
+					{
+						echo "<td><a href=\"getfile.php?file=".urlencode($f["name"])."\" download>".$f["name"]."</a></td>";
+					} 
+					else 
+					{
+						echo "<td><a href=\"".$file->get_downloads_folder().'/'.$f["name"]."\" download>".$f["name"]."</a></td>";
+					}
 					echo "<td>".$f["size"]."</td>";
 					echo "<td><a href=\"./list.php?delete=$i&type=$t\" class=\"btn btn-danger btn-sm\">Delete</a></td>";
 					echo "</tr>";