控制对可下载文件的访问

I have a folder that contains uploaded documents that my ZF application can spit out to logged in users. I want them to be able to use a link like http://server/documents/filename.pdf and download the file, but I want to have a controller DocumentsController that enables the existing user cookies to verify that they are logged in and have permission to download the file. I don't want to have to use URLs like http://server/documents/index/id/1 if I don't have to, though its not a terrible option.

推荐答案

您可以使用 X-SendFile 来获得最佳性能.Apache (mod_xsendfile)、Lighttpd 和 Nginx 都支持它.该请求首先由一个 php 进程处理，该进程放置一个特殊的标头(Nginx 的 X-Sendfile 或 X-Accel-Redirect)，当脚本结束时，Web 服务器接管并像静态文件一样发送文件.它速度更快，占用的内存更少.

protected function _initRouter()
{
    $router = Zend_Controller_Front::getInstance()->getRouter();

    $documentRoute = new Zend_Controller_Router_Route(
        'document/:filename',
        array(
            'action'     => 'xsendfile',
            'controller' => 'documents'
        ),
        array(
            'filename' => '..+$'
        )
    );
    $router->addRoute('document', $documentRoute );

    return $router;
}