protecting downloads with php
| From: | Nick Wilson | Date: | Sat, 11 May 2002 08:58:37 +0000 |
| Subject: | protecting downloads with php | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-97072@lists.php.net to get a copy of this message | ||
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Hi all
I've been asked to protect an area containing 'course material' (pdf's
etc) and have just thought of a gaping hole in what I've done.
I use an class to handle all the auth stuff and each page checks the
value of $obj->logged_in :: No problem.
but what if someone links to www.thesite/theProtectedArea/file.tar.gz
that file cannot check if the downloader is logged in can it.
So, any suggestions or words of wisdom would be much appreciated :-)
- --
Nick Wilson // www.explodingnet.com
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
iD8DBQE83N09HpvrrTa6L5oRAlSZAJwNVHXfeP3w8aaJTtRUmPH2v/nvNwCfaqp4
HpXVvWLn87rkhCQxnBtszAc=
=St/c
-----END PGP SIGNATURE-----