Re: PHP logging into htaccess Auth

From: Date: Tue, 09 Mar 2004 02:12:05 +0000
Subject: Re: PHP logging into htaccess Auth
References: 1  Groups: php.general 
Request: Send a blank email to php-general+get-179855@lists.php.net to get a copy of this message
> > How exactly does your protection scheme work? The directories with the flash videos are protected using htaccess > > If you're using PHP to read files (from a .htaccess protected > directory) there is no need to use: > > username:password@domain.com/directory/to/protect > > PHP is not subjected to the restrictions imposed by .htaccess files and > can read protected files directly. > Well i could readfile them in through a script then ?. > If on the other hand you're sending: > > username:password@domain.com/directory/to/protect > > to the browser so that it can seamlessly download the protected files > then no real protection has been achieved because anyone can link to > those 'protected' files not just your script. > The files are being externally loaded into the parent flash container, sending that as the request to a load movie, so therefore is hidden to the user unless they decompile the swf or use a sniffer. I guess just readfile through php should work without a problem ?

« previous php.general (#179855) next »