Posted by Micko on 11/23/06 12:59

I want to write a script that doesn't let anybody download file but only
the logged in users. I wrote a script for downloading the files but it
still lets someone to enter a URL and download it.
Example:
My file is www.server.com/uploads/bla.txt
The logged user gets it throught www.server.com/download.php?file=bla.txt
But someone can still download it by typing in the URL

Can this be forbidden, maybe with chmod for reading and only allowe
reading and not users it for server or maybe during the download?

How to solve this?

[Back to original message]