Re: How do I hide download link ...
| From: | Fargo Lee | Date: | Tue, 18 Jun 2002 21:03:43 +0000 |
| Subject: | Re: How do I hide download link ... | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-102796@lists.php.net to get a copy of this message | ||
Hi, if using the header command for attaching a file really prevents the
user from seeing the actual download link, is it really all that important
that the file is read from behind the document root if it is in a very hard
to guess directory?
"Martin Towell" <martin.towell@world.net> wrote in message
news:6416776FCC55D511BC4E0090274EFEF508A4B5@EXCHANGE...
> Have a page that checks the user's authentication
>
> if they're "invalid" then display an error msg and exit the script
>
> otherwise, send the header command(s) for attaching a file (can't remember
> the exact syntax right now)
>
> read the file from somewhere that's not accessable from the web and spit
it
> out to the browser
>
> HTH
> Martin
>
>
> -----Original Message-----
> From: Fargo Lee [mailto:fargolee@iname.com]
> Sent: Thursday, June 13, 2002 6:15 AM
> To: php-general@lists.php.net
> Subject: [PHP] How do I hide download link ...
>
>
> Hi, my customers go through a password authentication to access a link on
my
> site to download a file. I want to prevent the distribution of the
location
> of this file on my server by making it hidden. Is there any php
function(s)
> that could assist in doing this?
>
> All I can think of so far is storing the original file in a hard to guess
> directory, when a authenticated customer goes to download it, send them to
a
> script that copys the original file to a temp directory, they download the
> file in the temp directory and then run a cron every so many minutes to
> clear out the files in the temp directory.
>
> If anyone has any ideas, examples or a way to improve on what I came up
with
> please respond. Thanks!
>
>
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php