Как при нажатии на ссылку открыть из каталога doc файл именно тот, который указан в строке?

<INPUT TYPE='text' name='actfile'  value='<? echo '$file';?>'  size=35 maxlength=75</p>
<a href='read_act_file1.html'>  Просмотр</a>

insert_notes.php
<?
$db_name = 'arm_vir';
$table_name_nod = 'nod';
$connection = @mysql_connect('localhost', 'sadmin', '123') or die('Соединение невозможно.');
$db = @mysql_select_db($db_name, $connection) or die('Невозможно выбрать базу.');
 
$sql_nod = 'SELECT nod_id, nod
        FROM $table_name_nod
        ORDER BY nod
        ';
$sql_virusname = 'SELECT virusname_id, virusname
        FROM virusname
        ORDER BY virusname
        ';
$sql_antivirusname = 'SELECT antivirusname_id, antivirusname
        FROM antivirusname
        ORDER BY antivirusname
        ';
$sql_prichina = 'SELECT prichina_id, prichina
        FROM prichina
        ORDER BY prichina
        ';
$sql_predpr = 'SELECT id, predpr
        FROM predpr
        ORDER BY predpr
        ';
 
$result_nod = @mysql_query($sql_nod,$connection) or die('Невозможно выполнить запрос.');
$result_virusname = @mysql_query($sql_virusname,$connection) or die('Невозможно выполнить запрос.');
$result_antivirusname = @mysql_query($sql_antivirusname,$connection) or die('Невозможно выполнить запрос.');
$result_prichina = @mysql_query($sql_prichina,$connection) or die('Невозможно выполнить запрос.');
$result_predpr = @mysql_query($sql_predpr,$connection) or die('Невозможно выполнить запрос.');
 
 
$query = 'select nod_id, nod from nod  ORDER BY nod ';
$query_virusname = 'select virusname_id, virusname from virusname ORDER BY virusname';
$query_antivirusname = 'select antivirusname_id, antivirusname from antivirusname ORDER BY antivirusname';
$query_prichina = 'select prichina_id, prichina from prichina ORDER BY prichina';
$query_predpr = 'select id, predpr from predpr ORDER BY predpr';
 
 
$nod_res =@mysql_query($query, $connection) or die (' работать:');
$virusname_res =@mysql_query($query_virusname, $connection) or die (' работать:');
$antivirusname_res =@mysql_query($query_antivirusname, $connection) or die (' работать:');
$prichina_res =@mysql_query($query_prichina, $connection) or die (' работать:');
$predpr_res =@mysql_query($query_predpr, $connection) or die (' работать:');
 
 
 
$option_block_nod='';
while ($row_nod = mysql_fetch_array($result_nod)) {
        $nod_id = $row_nod['nod_id'];
        $nod = $row_nod['nod'];
 
        $nod_names = mysql_fetch_row($nod_res);
 
        $option_block_nod .= '<option value= '$nod '>$nod</option>';
         }
$display_block_nod = '
 
<strong>НОД:</strong>
<select name= 'nod_id '>
$option_block_nod;
</select>';
?>
<?
$option_block_virusname='';
while ($row_virusname = mysql_fetch_array($result_virusname)) {
        $virusname_id = $row_virusname['virusname_id'];
        $virusname = $row_virusname['virusname'];
 
        $virusname_names = mysql_fetch_row($virusname_res);
 
        $option_block_virusname .= '<option value= '$virusname '>$virusname</option>';
         }
$display_block_virusname = '
 
<strong>Вирус:</strong>
<select name= 'virusname_id '>
$option_block_virusname;
</select>';
?>
<?
$option_block_antivirusname=''  PE='text' name='bdate' value='<? echo date('Y-m-d');?>' size=35 maxlength=75</p>
 
 
 
<strong>Время:</strong>
<INPUT TYPE='text' name='btime' value='<? echo date('H:i:s');?>'  size=35 maxlength=75</p>
 
<? echo '$display_block_nod'; ?>
 
<? echo $display_block_predpr;?>
 
 
<strong>IP:</strong>
<INPUT TYPE='text' name='ip'  value='10.83.' size=35 maxlength=75 </p>
 
 
<strong>Пользователь:</strong>
<INPUT TYPE='text' name='user' size=35 maxlength=75</p>
 
 
<strong>Кому заявлено:</strong>
<INPUT TYPE='text' name='komuzayav' size=35 maxlength=75</p>
 
<td valign=top>
 
<strong>Дата исполнения:</strong>
<INPUT TYPE='text' name='ispolndate' value='<? echo date('Y-m-d');?>' size=35 maxlength=75</p>
 
 
 
<strong>Время исполнения:</strong>
<INPUT TYPE='text' name='ispolntime' value='<? echo date('H:i:s');?>'  size=35 maxlength=75</p>
 
<? echo '$display_block_virusname'; ?>
 
<? echo '$display_block_antivirusname'; ?>
 
<? echo '$display_block_prichina'; ?>
 
 
<strong>Примечание:</strong>
<INPUT TYPE='text' name='primichanie' size=35 maxlength=75</p>
 
 
<strong>Акт-файл:</strong>
<INPUT TYPE='text' name='actfile'  value='<? echo '$file';?>'  size=35 maxlength=75</p>
<a href='read_act_file.php'> Просмотр</a> 
 
<tr>
<td align=center colspan=2>
 
 
<INPUT TYPE='SUBMIT' NAME='submit' VALUE='Добавить'></P>
 
 
<p><a href='main.html'>Возврат в меню</a></p>
 
</TD>
</TR>
</TABLE>
</FORM>
</BODY>
</HTML> 
 
read_act_file.php
<?
$fn = '10.83.6.4.doc';//здесь то ,что в<INPUT TYPE='text' name='actfile' в insert_notes.php
 
header('Content-Disposition: inline; filename=$fn');
header('Content-Type: application/ms-word');
header('Content-Length: '.filesize($fn));
$fp = fopen($fn, 'r');
print fread($fp, filesize($fn));
fclose($fp);
?>

 fl=document.forms[0].actfile.value;

<INPUT TYPE='text' name='actfile' value='<? echo '$file';?>'

popupWin = window.open('http://.....'+'1.doc');

if (($virusname_id != '') or ($antivirusname_id != '') or ($prichina_id != '') or ($nod_id != ''))
{
$sql='SELECT bdate,btime,nod,predpr,ip,user,komuzayav,ispolndate,ispolntime,virus,antivirus,reason,primichanie,actfile FROM $table_name where (bdate >='$val1' and ispolndate <='$val2')
and (ip='$val3' and virus='$virusname_id'
and antivirus='$antivirusname_id' and reason='$prichina_id' and nod='$nod_id')
order by bdate desc,btime desc';
$result=@mysql_query($sql,$link) or die('невозможно выбрать базу данных'); }
}

$sql='SELECT * FROM vir_stat where bdate >='$val1' and ispolndate <='$val2'';
if ($nod_id =''){$sql=$sql.'nod='$nod_id' and';  }
if ($ip = ''){$sql=$sql.'ip='$val3' and';  }
if ($virusname_id =''){$sql=$sql.'virus='$virusname_id' and'; }
if ($antivirusname_id =''){$sql=$sql.'antivirus='$antivirusname_id'';}