WooYun.org

case 'download':
	$filename = base64_decode($filename);
	$ftpfile = $ftpfolder;
	if (substr($ftpfile, -1) != '/')
		$ftpfile .= '/';
	$ftpfile .= $filename;
	header('Content-type: application/force-download');
	header('Content-Disposition: attachment; filename="'.$filename.'"');
	$localfile = $ftphandle->ftp_home_directory.$ftpfile;
	//if(file_exists($localfile))
		//die($localfile);
  	if (file_exists($localfile)) {
		$length = filesize($localfile);
		
		header('Accept-Ranges: bytes');
		header('Content-Length: '.$length);
		$fp = fopen($localfile, "rb");
		if ($fp){
			while(!feof($fp))
				echo fread($fp, 655360);
				
			fclose($fp);
		}
    }