sen5241b Posted October 12, 2007 Share Posted October 12, 2007 Based on everything I've read and tried you can't do it. You can deny a directory listing, you can completely deny access to the files in a directory based on many things like IP, user etc. and you can allow access too. ... but you cannot both allow a web visitor to access an image or data file through html and php and simultaneously deny them direct access to that same file through a browser. For individual files, .htaccess allows access or it doesn't. Web visitors can do a "view source" to see the image or data file and then just type the URL to it. Quote Link to comment https://forums.phpfreaks.com/topic/73014-when-htaccess-cant-protect-a-file/ Share on other sites More sharing options...
trq Posted October 13, 2007 Share Posted October 13, 2007 And you have a question? You can quite easily write a php script which acts as an image. Serving up whatever images are passed to it via $_GET[]. Quote Link to comment https://forums.phpfreaks.com/topic/73014-when-htaccess-cant-protect-a-file/#findComment-368327 Share on other sites More sharing options...
sen5241b Posted October 13, 2007 Author Share Posted October 13, 2007 And you have a question? You can quite easily write a php script which acts as an image. Serving up whatever images are passed to it via $_GET[]. I was hoping someone would prove me wrong but your workaround might do the job. Do you have an example? I'm actually trying to protect a data file from direct access. This is similar to but not exactly the same as the bandwidth-image stealing issue. Quote Link to comment https://forums.phpfreaks.com/topic/73014-when-htaccess-cant-protect-a-file/#findComment-368365 Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.