<?php
session_start();
...
if (isset($_GET['id'])) {
	$link = @mysqli_connect(MYHOST, $_SESSION['name'], $_SESSION['pswd'], BAS);
	$req = 'select * from fmsg where id = '.$_GET['id'];
	$res = mysqli_query($link, $req);
	$row = mysqli_fetch_array($res);
	$realnam = $row['rnam'];
	$hshnam = 'files/'.$row['hnam'];
	header("HTTP/1.1 200 OK");
	header("Expires: Thu, 19 Nov 1981 08:52:00 GMT");
	header("Cache-Control: None");
	header("Pragma: no-cache");
	header("Accept-Ranges: bytes");
	header('Content-Disposition: attachment; filename="'.$realnam.'"');
	header("Content-Transfer-Encoding: binary");  
	header("Content-Length: " . filesize($hshnam));
	header("Proxy-Connection: close");
	readfile($hshnam);
exit;
}
?>