anolan13 Posted January 4, 2008 Share Posted January 4, 2008 Hello, I recently made this user login system and it works really well but its not protecting pages, it's files. And I just came to the realization, what would stop people from directly typing the file name path into the browser and downloading the file? Nothing! So I'm asking is there a way to make it so that files can only be accessed by certain pages on a website, because some pages will need to access these files. Or if there is any other way to protect these files? Thanks! Link to comment https://forums.phpfreaks.com/topic/84391-solved-how-to-protect-files-from-direct-access/ Share on other sites More sharing options...
revraz Posted January 4, 2008 Share Posted January 4, 2008 PHP is parsed to the browser as HTML, so they can't see your code. If some pages are only designed for admins, then you need to set variables as such and check them. Link to comment https://forums.phpfreaks.com/topic/84391-solved-how-to-protect-files-from-direct-access/#findComment-429848 Share on other sites More sharing options...
anolan13 Posted January 4, 2008 Author Share Posted January 4, 2008 Hi, thanks, but I realize that. That's why I made the login system. I can protect pages, but how do I protect files? Like word documents or other non-browser formats. Link to comment https://forums.phpfreaks.com/topic/84391-solved-how-to-protect-files-from-direct-access/#findComment-429852 Share on other sites More sharing options...
phpSensei Posted January 4, 2008 Share Posted January 4, 2008 CHMOD a directory, or edit your .htaccess file. Link to comment https://forums.phpfreaks.com/topic/84391-solved-how-to-protect-files-from-direct-access/#findComment-429857 Share on other sites More sharing options...
redarrow Posted January 4, 2008 Share Posted January 4, 2008 <FilesMatch "\.(txt|doc)$"> Order Allow,Deny Deny from all </FilesMatch> bit easer for you SetEnvIfNoCase Referer "^$" local_ref=1 SetEnvIfNoCase Referer "^http://(www\.)?whatever\.com" local_ref=1 <FilesMatch "\.(txt|doc)"> Order Allow,Deny Allow from env=local_ref </FilesMatch> Link to comment https://forums.phpfreaks.com/topic/84391-solved-how-to-protect-files-from-direct-access/#findComment-429867 Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.