Re: Security on Directory

Another option is to store your images as BLOB's into a DBMS like MySQL or PostgreSQL. Paulo ----- Original Message ----- From: Daz <clark.darren@btinternet.com> To: <php-general@lists.php.net> Sent: Monday, December 04, 2000 2:23 PM Subject: Re: [PHP] Security on Directory > Thank you for your reply however the problem is I wish image files to be > hidden from you, > if I place the image path outside of the webroot they cannot be served by > the php pages. > > Can it be done? How do you serve images from a folder outside of the web > root. > > ""Richard Lynch"" <richard@zend.com> wrote in message > news:00d101c05e06$a3e3bd80$c7381840@ZEND... > > Several options. > > > > 1. Use .htaccess, and then get rid of the PHP authentication. I think > you > > still get $PHP_AUTH_USER or whatever that variable is. > > > > 2. Move all your non-PHP content outside the web-tree, and write a PHP > > script, with authentication, to serve those files up. > > > > I'm guessing mod_auth_mysql is not going to interact with PHP > significantly > > differently from .htaccess. > > > > ----- Original Message ----- > > From: "Daz" <clark.darren@btinternet.com> > > Newsgroups: php.general > > Sent: Monday, December 04, 2000 4:56 AM > > Subject: [PHP] Security on Directory > > > > > > > Hi all, > > > > > > I have developed a authentication system using php4 and mysql running on > > web > > > apache 1.3. This is fine for authorising the php files but not for any > > > images or external files which I want secured. I have tried .htaccessing > a > > > directory and using php to access the folder but to no joy as still > asked > > > for the password. Has anyone got a solution? > > > > > > I've heard of mod_auth_mysql but I do not have this option, I am running > > the > > > module version of apache and have used the php basic authentication with > > no > > > problems. However can this variable be passed to a .htaccess file. > > > > > > I would be so greatful if someone could help thank you in advance > > > > > > > > > > > > -- > > > PHP General Mailing List (http://www.php.net/) > > > To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net > > > For additional commands, e-mail: php-general-help@lists.php.net > > > To contact the list administrators, e-mail: php-list-admin@lists.php.net > > > > > > > > > -- > > PHP General Mailing List (http://www.php.net/) > > To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net > > For additional commands, e-mail: php-general-help@lists.php.net > > To contact the list administrators, e-mail: php-list-admin@lists.php.net > > > > > > -- > PHP General Mailing List (http://www.php.net/) > To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net > For additional commands, e-mail: php-general-help@lists.php.net > To contact the list administrators, e-mail: php-list-admin@lists.php.net > >