Re: FW: [PHP] Accessing Files Outside the Web Root

From: Date: Fri, 15 Mar 2013 21:04:42 +0000
Subject: Re: FW: [PHP] Accessing Files Outside the Web Root
References: 1  Groups: php.general 
Request: Send a blank email to php-general+get-320588@lists.php.net to get a copy of this message
On Fri, 2013-03-15 at 09:11 -0400, Dale H. Cook wrote: > At 09:44 PM 3/14/2013, tamouse mailing lists wrote: > > >If you are delivering files to a (human) user via their browser, by whatever mechanism, > >that means someone can write a script to scrape them. > > That script, however, would have to be running on my host system in order to access the script > which actually delivers the file, as the latter script is located outside of the web root. > > Dale H. Cook, Market Chief Engineer, Centennial Broadcasting, Roanoke/Lynchburg, VA > http://plymouthcolony.net/starcityeng/index.html > > Not really. You script is web accessible right? It just opens a file and delivers it to the browser of your visitor. It's easy to make a script that pretends to be a browser and make the same request of your script to grab the file. Thanks, Ash http://www.ashleysheridan.co.uk

« previous php.general (#320588) next »