Re: stop a file called foo.bar

http://apache.org Also, look in your httpd.conf for the "htaccess" section where they specifically block out downloading of .htaccess files. Finally, see if you can't survive by *MOVING* the file out of the web-tree entirely, and using include_path to let PHP get it, or http://php.net/fopen and friends. Then the script kiddies can't download it. Other users on your server can still get at it, though :-( -- WARNING richard@zend.com address is an endangered species -- Use ceo@l-i-e.com Wanna help me out? Like Music? Buy a CD: http://l-i-e.com/artists.htm Volunteer a little time: http://chatmusic.com/volunteer.htm ----- Original Message ----- From: Void <ben@hvc.co.za> Newsgroups: php.general To: <php-general@lists.php.net> Sent: Friday, August 03, 2001 4:22 AM Subject: stop a file called foo.bar > stop a file called foo.bar from being downloaded with a web server ? > > Say you'r web site's name is foobar.net. > > .and... > > Script-kiddy Johny knows that, > but also knows that you'r secret file is called foo.bar > and it is saved in the root dir. of you'r web site. > > in a http browser little Johny > can simply type in http://www.foobar.net/foo.bar" > to download it, since the web server (i am on) > will trigger the clients download box to open, > because its not a wrapped extension, or php, or htm, or so . > > I have looked into the .htaccess file and added the directive > IndexIgnore *.* > there'r millions of directives and i am looking at them now, > > But please tell me if there IS NOT a directive I can add to the htacces file > to keep "little Johny" from downloading the file. > Because then i might just look the whole day long for nothing ! > > Thanx a lot for your time > > Ben > > enjoy the day :-) > > > > > > >