0) { $row = Database::fetch_array($result); $title = str_replace(' ', '_', $row['filename']); if (Security::check_abs_path($full_file_name, api_get_path(SYS_COURSE_PATH).api_get_course_path().'/upload/announcements/') ) { $result = DocumentManager::file_send_for_download($full_file_name, true, $title); if ($result === false) { api_not_allowed(true); } } } exit;