Select Code to Download

# Read (malicious) filename from user, over the web:
$filename = "/etc/passwd\0.jpg";
...

# Output the file to the user:
send_file( $filename );