Re: restricting acces to files
| From: | Goetz Lohmann | Date: | Tue, 04 Feb 2003 10:45:59 +0000 |
| Subject: | Re: restricting acces to files | ||
| References: | 1 2 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-134240@lists.php.net to get a copy of this message | ||
Goetz Lohmann schrieb:
> Shams schrieb:
>
>>Hi,
>>
>>i've written a secure PHP login script which will allow users to login to a
>>directory such as this:
>>
>>smezone.com/members/index.php
>>
>>however, how do I restrict people from accessing HTML files in that
>>directory (which they can easily do so by typing the URL into their
>>browser), such as:
>>
>>smezone.com/members/document1.html
>>
>>?
>>
>>Since its a regular HTML files (and we have lots), I can't check whether the
>>user has a valid session as I would do in a PHP file.
>>
>
maybe take a look at:
http://hotwired.lycos.com/webmonkey/00/05/index2a_page3.html?tw=programming
but note that normaly $PHP_AUTH_PW is the password in clear text, but the
.htaccess file stores it as a md5 key!
--
@ Goetz Lohmann, Germany | Web-Developer & Sys-Admin
\/ ------------------------------------------------------
() He's the fellow that people wonder what he does and
|| why the company needs him, until he goes on vacation.