<?php

chdir('..');
require_once('_includes/top.php');

if (isset($_SESSION['userINFO']['userName'])) {
	$file = pathinfo($_GET['filename']);

	header('Content-type: application/' . $file['extension']);
	header('Content-Disposition: attachment; filename="' . $_GET['filename'] . '"');
    header('Expires: 0');
    header('Cache-Control: must-revalidate, post-check=0, pre-check=0');
    header('Pragma: public');
    header('Content-Length: ' . filesize('documents/' . $_GET['filename']));
	
	readfile('documents/' . $_GET['filename']);
} else {
	mcms_redirect('/403.html');
}

?>