Re: Files redirect - using PHP and .htaccess
| From: | Martin Zvarík | Date: | Tue, 17 Feb 2009 02:08:42 +0000 |
| Subject: | Re: Files redirect - using PHP and .htaccess | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-288400@lists.php.net to get a copy of this message | ||
Martin Zvarík napsal(a):
Hi, there are two choices (example): 1) file_redirect.php?src=file/root.jpg --- shows an image 2) .htaccess --- if is requested file/root.jpg than redirect to "xyzfile/root.jpg" In both cases I can restrict the access to some files only. If we talk about PHP, the file/image.jpg can be directed to xyzfile/image.jpg - and the client won't know. BUT if we talk about .htaccess - can the client find out where it really points out? For example file/image.jpg will be directed to xyzfile/image.jpg --- I suppose it sends a response to the browser and tells him the new path which it should request, am I right? If so, than it's not really secure, since the user will be able to test and try all other filenames and get somewhere I don't want him to go - I know I might be too careful, BUT I am interested how PROs do this. Your comments will be appreciated, MartinAHA, from what I've just read, the .htaccess is server-side, so the client won't know the real directory. Can somebody confirm?