Re: PHP logging into htaccess Auth
| From: | daniel at electroteque dot org | Date: | Tue, 09 Mar 2004 02:12:05 +0000 |
| Subject: | Re: PHP logging into htaccess Auth | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-179855@lists.php.net to get a copy of this message | ||
>
> How exactly does your protection scheme work?
The directories with the flash videos are protected using htaccess
>
> If you're using PHP to read files (from a .htaccess protected
> directory) there is no need to use:
>
> username:password@domain.com/directory/to/protect
>
> PHP is not subjected to the restrictions imposed by .htaccess files and
> can read protected files directly.
>
Well i could readfile them in through a script then ?.
> If on the other hand you're sending:
>
> username:password@domain.com/directory/to/protect
>
> to the browser so that it can seamlessly download the protected files
> then no real protection has been achieved because anyone can link to
> those 'protected' files not just your script.
>
The files are being externally loaded into the parent flash container,
sending that as the request to a load movie, so therefore is hidden to the
user unless they decompile the swf or use a sniffer. I guess just readfile
through php should work without a problem ?