使用PHP和MySQL数据库构建可跟踪链接

Question

I have an email list and a personalized PDF associated with each email (a one-to-one relationship). I also have a server that hosts the PDFs. I want to send each person their personalized PDF using a link to the file on my server. When I send a person that link, I want to to track whether they have downloaded the file.

This download.php script (full code below) was recommended to as I can include my links as http://yourdomain.com/download.php?email={!email} so that when they are clicked, the script will write to a MySQL database to track which email address clicked the link and then serve the file.

The download.php script

<?php

mysql_connect('localhost', 'username', 'password');
mysql_select_db('dbname');

$sql = "INSERT INTO downloads (email) VALUES ('" . mysql_real_escape_string($_GET['email']) . "')";
mysql_query($sql);

header("Content-type: application/pdf");
readfile("/path/to/thefile.pdf");

?>

My issue is that the last line of the code readfile("/path/to/thefile.pdf"); looks as if it needs to be written such that it contains the path to a single file, which will not work for my purposes. Am I reading the code correctly and if so, is there a way to modify it for my purposes?

Answer 1

I hope I understood your question correctly. You have to paste the path to your PDF on the server. eg http://www.youdomain.com/pdfs/october.pdf

Avoid mysql functions and use PDO always.

This is how you do it in PDO

$hostname = 'localhost';
$username = 'username';
$password = 'password';

$con = new PDO("mysql:host=$hostname;dbname=dbname", $username, $password);

$user_mail = $_GET['email'];

$sql = "INSERT INTO downloads (email) VALUES (:emailVal)";
$statement = $con_db->prepare($sql);
$statement->execute(array(':emailVal'=> $user_mail));

header("Content-type: application/pdf");
readfile("/path/to/thefile.pdf"); //paste to your PDF on your server