|
|
Posted by J.O. Aho on 10/13/52 11:32
Freebird wrote:
> Any suggestions ?
You can limit access to a directory based on the ip that tries to access.
<Location /download-specialfiles>
Order deny,allow
Deny from all
Allow from 192.168.0.1 10.0.20
</Location>
If users has to access the file via different sites, you can fpassthru(), that
way it will be the servers IP that is checked against the the rules and not
the users IP.
http://www.php.net/manual/en/function.fpassthru.php
By the way, HTTP_REFERER can be spoofed too, so it hadn't been a safe way anyhow.
//Aho
PS. Your Microsoft agent is a bit screwed up, marking what you type as the
text you are replying to.
Navigation:
[Reply to this message]
|