The Little Guy Posted May 25, 2008 Share Posted May 25, 2008 When storing files, would it be best to store them in a mysql BLOB, instead of a direct file on the server? I ask, because I want to place files on the server that can only be accessed if purchased. If someone knows the exact URL of the file, they can then download it for free. Link to comment https://forums.phpfreaks.com/topic/107240-storing-files/ Share on other sites More sharing options...
.josh Posted May 25, 2008 Share Posted May 25, 2008 If someone knows the exact URL of the file, they can then download it for free. only if you keep the file in a public directory, or have the permissions set for them to... Link to comment https://forums.phpfreaks.com/topic/107240-storing-files/#findComment-549835 Share on other sites More sharing options...
deadonarrival Posted May 25, 2008 Share Posted May 25, 2008 It would work, alternatively use .htaccess to hide the files from being viewed directly, or place them above the document root. Link to comment https://forums.phpfreaks.com/topic/107240-storing-files/#findComment-549836 Share on other sites More sharing options...
The Little Guy Posted May 25, 2008 Author Share Posted May 25, 2008 If I place them above the root, will they still be download able? Link to comment https://forums.phpfreaks.com/topic/107240-storing-files/#findComment-549854 Share on other sites More sharing options...
deadonarrival Posted May 26, 2008 Share Posted May 26, 2008 No, anything above your /www/ directory (on apache) can't be accessed directly. Link to comment https://forums.phpfreaks.com/topic/107240-storing-files/#findComment-550103 Share on other sites More sharing options...
mushroom Posted May 26, 2008 Share Posted May 26, 2008 No, anything above your /www/ directory (on apache) can't be accessed directly. That will work, as long as the directory is readable by php and you have a directory that is readable and writable by php that can be accessed by apache. I have written such a script for private viewing of screen shots of confidential info. php: validates the user creates a randomly named 25 character directory copy's the file(s) to it. produces the appropriate web page flushes the output waits a preset time then erases the file and directory Link to comment https://forums.phpfreaks.com/topic/107240-storing-files/#findComment-550272 Share on other sites More sharing options...
The Little Guy Posted May 26, 2008 Author Share Posted May 26, 2008 I was thinking that the solution could be done with: Readfile, then use some sort of stream such as octet-stream to download the file to the users computer if they have access to the file according to the PHP, otherwise display an error for them. Sound reasonable? Link to comment https://forums.phpfreaks.com/topic/107240-storing-files/#findComment-550358 Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.