<?php

include "config.php";  config.php contains the session information
   header('Cache-Control: public');

if ( $_SESSION["logged_in"] == 1){

$dir="downloadfolder/";
$file=$dir.$_GET["dl"];

if (isset($_REQUEST['dl']) && file_exists($file) ) {
   header('Pragma: anytextexeptno-cache', true);
   header('Content-type: application/force-download');
   header('Content-Transfer-Encoding: Binary');
   header('Content-length: '.filesize($file));
   header('Content-disposition: attachment;
   filename='.basename($file));
   readfile($file);
} else {
   echo 'No file with this name for download.';
}

}else{
   echo "You are not logged in<br>";
}

?>