<?



require "functions.php";



login();



$id=$_GET["id"];

$tabelle=$_GET["tabelle"];



//Daten absichern

$id=mysql_escape_string($id);

$tabelle=mysql_escape_string($tabelle);



$result=mysql_query("select * from $tabelle where id='$id'");

if (mysql_num_rows($result)>0)

{



$data=mysql_result($result,0,"data");

$type=mysql_result($result,0,"type");

$name=mysql_result($result,0,"name");





header("Content-type: $type");

header("Content-Disposition: attachment; filename=$name");

echo($data);

}



logout();

?>