Re: Security on Directory

From: Date: Mon, 04 Dec 2000 16:23:26 +0000
Subject: Re: Security on Directory
References: 1 2  Groups: php.general 
Request: Send a blank email to php-general+get-28595@lists.php.net to get a copy of this message
Thank you for your reply however the problem is I wish image files to be hidden from you, if I place the image path outside of the webroot they cannot be served by the php pages. Can it be done? How do you serve images from a folder outside of the web root. ""Richard Lynch"" <richard@zend.com> wrote in message news:00d101c05e06$a3e3bd80$c7381840@ZEND... > Several options. > > 1. Use .htaccess, and then get rid of the PHP authentication. I think you > still get $PHP_AUTH_USER or whatever that variable is. > > 2. Move all your non-PHP content outside the web-tree, and write a PHP > script, with authentication, to serve those files up. > > I'm guessing mod_auth_mysql is not going to interact with PHP significantly > differently from .htaccess. > > ----- Original Message ----- > From: "Daz" <clark.darren@btinternet.com> > Newsgroups: php.general > Sent: Monday, December 04, 2000 4:56 AM > Subject: [PHP] Security on Directory > > > > Hi all, > > > > I have developed a authentication system using php4 and mysql running on > web > > apache 1.3. This is fine for authorising the php files but not for any > > images or external files which I want secured. I have tried .htaccessing a > > directory and using php to access the folder but to no joy as still asked > > for the password. Has anyone got a solution? > > > > I've heard of mod_auth_mysql but I do not have this option, I am running > the > > module version of apache and have used the php basic authentication with > no > > problems. However can this variable be passed to a .htaccess file. > > > > I would be so greatful if someone could help thank you in advance > > > > > > > > -- > > PHP General Mailing List (http://www.php.net/) > > To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net > > For additional commands, e-mail: php-general-help@lists.php.net > > To contact the list administrators, e-mail: php-list-admin@lists.php.net > > > > > -- > PHP General Mailing List (http://www.php.net/) > To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net > For additional commands, e-mail: php-general-help@lists.php.net > To contact the list administrators, e-mail: php-list-admin@lists.php.net >

« previous php.general (#28595) next »