RE: [PHP] ******************* Secure product download *******************
| From: | John Holmes | Date: | Thu, 30 May 2002 01:16:32 +0000 |
| Subject: | RE: [PHP] ******************* Secure product download ******************* | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-99822@lists.php.net to get a copy of this message | ||
[snip]
> If you put the file you send somewhere out of the document root, the
> download location can't even be reverse-engineered. This script is
the
> only way to get that file.
That's the key, right there. Combining that with sessions will make it
so that only people with the appropriate session will be able to access
the download script. Keeping it outside of the web root will make it so
no one can just type in the URL to the file.
---John Holmes...