I’m looking for a way to write an image to the controller response. this seems to be what I need.

Thanks a lot, just what I needed, and it worked on first try!!!!!!!!!!
haha!!

Exactly what I was looking for!

For example, say I visited
http://domain/media/..%2Fconfig%2Fdatabases.yml/download/1

Your script would then push out the content of your database config file – including your DB username, password, and domain! And then they can do all sorts of malicious things.

Essentially, since you’re not filtering your files and just concatenating it with the directory path, it’s possible to use “..” to navigate around the file system, and choose any file you want.

A better option is to provide some sort of restricted key that maps to a file path. That way, you have very tight control over which files will be served.

Happy coding!

$sf_response->clearHttpHeaders();
$sf_response->setContentType(‘application/pdf’);
$sf_response->setHttpHeader(‘Content-Disposition’, ‘attachment; filename=’ . $pdfFileName);

readfile($pdfFilePath);

Exactly what I needed