Help - Search - Members - Calendar
Full Version: Secure pdf files on a web server
HTMLHelp Forums > Programming > Client-side Scripting
joehesse
Is there a way to store secure pdf documents on a web server, outside the server's root directory, so they can only be viewed by authorized users from their browser?
Since these files are outside the server's root directory, they can only be accessed by code running on the server. Is there some PHP magic that will do what I want?
Thank you,
Joe
pandy
Not sure, Christian probably knows this better, but I *think* you can make PHP copy the file to a web accessible directory.

But why do the files need to be above the root? Can't you just use a password protected directory? Passwords must come into it anyway.
joehesse
QUOTE(pandy @ Sep 4 2018, 09:41 AM) *

Not sure, Christian probably know this better, but I *think* you can make PHP copy the file to a web accessible directory.

But why do the files need to be above the root? Can't you just use a password protected directory? Passwords must come into it anyway.


I want the files to be above the root so they can only be read by logged in users. If the files were in a directory in root or below, wget will get them. I think that any file permissions that make the web browser access the files will also allow wget to work.
Christian J
QUOTE(pandy @ Sep 4 2018, 09:41 AM) *

Not sure, Christian probably know this better, but I *think* you can make PHP copy the file to a web accessible directory.

Yes that should work (though I don't think I've ever tried it).

QUOTE(joehesse @ Sep 4 2018, 05:10 PM) *

If the files were in a directory in root or below, wget will get them.

Not if they're password protected. And even if they're above the web root, wget might be able to get them through the PHP script (unless it's password protected).

That said it's still slightly safer to put them above the web root, in case something goes bad with the password protection. But again, the same might be said for the PHP script's password protection...
pandy
What Christian said. smile.gif
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2018 Invision Power Services, Inc.