About: potsky

Ok, I found the solution. Again a new RFC :-)
http://tools.ietf.org/html/rfc6266#appendix-D

In includes/classes/files-in.inc.php line 361 (for version 121213), replace :

header('Content-Disposition: '.(($inline) ? "inline" : "attachment").'; filename="'.$basename.'"');

with

header('Content-Disposition: '.(($inline) ? "inline" : "attachment").'; filename*=UTF-8\'\''.rawurlencode($basename) );

but not for all user agents (http://greenbytes.de/tech/tc2231/)

It seems there is a trick with a fake file name at the end of the php and with a rewrite rule :
http://stackoverflow.com/questions/93551/how-to-encode-the-filename-parameter-of-content-disposition-header-in-http

Thank you for your answer !

I do not use double quotes in filename, but my clients… certainly ! I really agree with you on this point.

In fact the file is well downloaded, so I presume the file_exists do not crash.
The downloaded file name is just cut at the first double quote.

Moreover, it seems there is a filename computing given that .txt still persist at the end of the filename.

It is not really important…

With pleasure ! And it will be a “first time” for me, I never managed code on Github…

GitHub is of course mandatory !

The link is at the bottom of the plugin official page :
https://www.potsky.com/code/wordpress-plugins/s2member-secure-file-browser/

Version 0.2.1 has just been published !