Problems generating word documents on server side for security reasons

Posted on 16th Feb 2014 07:03 pm by admin

I have a problem with word documentation generation when generating a word document (docx) with PHP. I am doing this for security reasons, as I do not want people to be able to directly access a file with urls, so I store the files above the web root and they are generated on the server side on demand. Here is my code for manually testing file generation of a .docx file ( a Word 2007 file ):

$path = "../../uploads_productionization/file_for_category_1_tab_2/adsfdafds.docx

// We'll be outputting a docx
header( 'Content-type: application/vnd.openxmlformats & -officedocument.wordprocessingml.document.main+xml');

// It will be called downloaded.docx
header('Content-Disposition: attachment; filename="downloaded.docx"');

// The word source is in adsfdafds.docx
readfile($path);


When I execute this code, ie when I manually generate a docx file, I get two error messages:

"The Open Office XML document cannot be opened because there are problems with the contents"
Details: "File is corrupt and cannot be opened"

Next message:
"Word found unreadable content in downloaded.docx. Do you want to recover the contents of this document? If so, please click Yes"

When I click Yes on the second message, the document opens. Sometimes the file is okay, sometimes it isn't when there are pictures and formatting and so on and so forth.

Anyone have a solution for this problem? Been trying to get around this for at least a week...

P.S. All other files, PDFs, text files, work fine.. I think it's just office documents.

Your Answer:

Login to answer

Other forums

question about stripslashes and real_escape_string
im cleaning up an old app that I wrote fixing some of the vulernabilities from attacks.

I hav

Stopped working!
So I had to change some stuff, none of it major. Stuff like the extension_dir and such. BEFORE I did

How to change www in url with a specified name
Hi
I'm trying to change the url http://www.sitename.com/apparels to something like below
http:

2 decima places & How to reload my page
Hello There,

How do i put full-stop (.) after second figure from behind? ie if i have 123456

Mail form doesn't send Russian/Cyrillic characters correctly?
When someone enters foreign characters (like Cyrillic text, and Japanese/Chinese probably gives the

Adding to an Int row in db
Hi, i have a database which houses all of the users of my site. One of the columns is for points whi

Transport data between itab and textfield on ALV event
Hallo,

I have a ALV Grid ( cl_gui_alv_grid ) and I also have hotspot click event with a h

undefined offset help
Hi All,

I kept getting undefined offset PHP notice for a simple for loop. For eg
$va = arr

upload control not working with update panel
Hi,

I am working with Asp.Net FileUpload control with ajax update panel,

if i use the

Edit MySQL Row Using PHP and HTML Form
Hello,

Here's what I'm trying to do. Build a page where a user enters a MySQL row number in.