View file down/down.php

<?
include"../tools.php";
include"../head.php";
include"config.php";

if (!isset($_GET['file']))
{
header ("Location: index.php?".SID."");
}

header ("Location: $folder_level$set[loaddir]$_GET[file]");
$file=mysql_escape_string($_GET['file']);
mysql_query("INSERT INTO `downloads` (file) values('$file')");

?>