Re: Security on Directory
| From: | Daz | Date: | Mon, 04 Dec 2000 16:23:26 +0000 |
| Subject: | Re: Security on Directory | ||
| References: | 1 2 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-28595@lists.php.net to get a copy of this message | ||
Thank you for your reply however the problem is I wish image files to be
hidden from you,
if I place the image path outside of the webroot they cannot be served by
the php pages.
Can it be done? How do you serve images from a folder outside of the web
root.
""Richard Lynch"" <richard@zend.com> wrote in message
news:00d101c05e06$a3e3bd80$c7381840@ZEND...
> Several options.
>
> 1. Use .htaccess, and then get rid of the PHP authentication. I think
you
> still get $PHP_AUTH_USER or whatever that variable is.
>
> 2. Move all your non-PHP content outside the web-tree, and write a PHP
> script, with authentication, to serve those files up.
>
> I'm guessing mod_auth_mysql is not going to interact with PHP
significantly
> differently from .htaccess.
>
> ----- Original Message -----
> From: "Daz" <clark.darren@btinternet.com>
> Newsgroups: php.general
> Sent: Monday, December 04, 2000 4:56 AM
> Subject: [PHP] Security on Directory
>
>
> > Hi all,
> >
> > I have developed a authentication system using php4 and mysql running on
> web
> > apache 1.3. This is fine for authorising the php files but not for any
> > images or external files which I want secured. I have tried .htaccessing
a
> > directory and using php to access the folder but to no joy as still
asked
> > for the password. Has anyone got a solution?
> >
> > I've heard of mod_auth_mysql but I do not have this option, I am running
> the
> > module version of apache and have used the php basic authentication with
> no
> > problems. However can this variable be passed to a .htaccess file.
> >
> > I would be so greatful if someone could help thank you in advance
> >
> >
> >
> > --
> > PHP General Mailing List (http://www.php.net/)
> > To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net
> > For additional commands, e-mail: php-general-help@lists.php.net
> > To contact the list administrators, e-mail: php-list-admin@lists.php.net
> >
>
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net
> For additional commands, e-mail: php-general-help@lists.php.net
> To contact the list administrators, e-mail: php-list-admin@lists.php.net
>