Problems generating word documents on server side for security reasons

Posted on 16th Feb 2014 07:03 pm by admin

I have a problem with word documentation generation when generating a word document (docx) with PHP. I am doing this for security reasons, as I do not want people to be able to directly access a file with urls, so I store the files above the web root and they are generated on the server side on demand. Here is my code for manually testing file generation of a .docx file ( a Word 2007 file ):

$path = "../../uploads_productionization/file_for_category_1_tab_2/adsfdafds.docx

// We'll be outputting a docx
header( 'Content-type: application/vnd.openxmlformats & -officedocument.wordprocessingml.document.main+xml');

// It will be called downloaded.docx
header('Content-Disposition: attachment; filename="downloaded.docx"');

// The word source is in adsfdafds.docx
readfile($path);


When I execute this code, ie when I manually generate a docx file, I get two error messages:

"The Open Office XML document cannot be opened because there are problems with the contents"
Details: "File is corrupt and cannot be opened"

Next message:
"Word found unreadable content in downloaded.docx. Do you want to recover the contents of this document? If so, please click Yes"

When I click Yes on the second message, the document opens. Sometimes the file is okay, sometimes it isn't when there are pictures and formatting and so on and so forth.

Anyone have a solution for this problem? Been trying to get around this for at least a week...

P.S. All other files, PDFs, text files, work fine.. I think it's just office documents.

Your Answer:

Login to answer

Other forums

Share admin accross websites
I'm using .net memberships and roles in one of my sites, but I need to be able to share logins and p

SAP FICO learning materials
Hi all,
I am new to this world of SAP FICO. I have taken training on SAP FICO, but was wonderin

How do I get the row number from from an sql table query
Hi all

I have a table that I query and it returns a number of rows.
mysql_num_rows($query)

natcasesort works on one server but not on another
Hi

I have a problem that I was hoping that someone can help me with.

I'm trying to use

use an array from 1 class in a second class
I have a class that adds data to an array

Then I have a second class and I need to check if t

keeps going back to index.html ???????
ok so i started making my site using mostly.html files now i have added a fair chunk of php. My inde

help finding hacking loopholes
i was attacked by a redirect php injection

my pc is clean of viruses

so i figure that

Php mysql - select?
Hi i have this code:
Code: $iteminfo = mysql_query("SELECT desc FROM wc_items WHERE itemid =

Why does this file not return file names that start with numbers?
This file returns a list of filenames to help populate a drop down in my form. For some reason it ig

question about stripslashes and real_escape_string
im cleaning up an old app that I wrote fixing some of the vulernabilities from attacks.

I hav