Re: FW: [PHP] Accessing Files Outside the Web Root
| From: | Ashley Sheridan | Date: | Fri, 15 Mar 2013 21:04:42 +0000 |
| Subject: | Re: FW: [PHP] Accessing Files Outside the Web Root | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-320588@lists.php.net to get a copy of this message | ||
On Fri, 2013-03-15 at 09:11 -0400, Dale H. Cook wrote:
> At 09:44 PM 3/14/2013, tamouse mailing lists wrote:
>
> >If you are delivering files to a (human) user via their browser, by whatever mechanism,
> >that means someone can write a script to scrape them.
>
> That script, however, would have to be running on my host system in order to access the script
> which actually delivers the file, as the latter script is located outside of the web root.
>
> Dale H. Cook, Market Chief Engineer, Centennial Broadcasting, Roanoke/Lynchburg, VA
> http://plymouthcolony.net/starcityeng/index.html
>
>
Not really.
You script is web accessible right? It just opens a file and delivers it
to the browser of your visitor. It's easy to make a script that pretends
to be a browser and make the same request of your script to grab the
file.
Thanks,
Ash
http://www.ashleysheridan.co.uk