Posted by Jeff North on 05/11/07 16:39

On Fri, 11 May 2007 15:16:32 GMT, in alt.php "Zoe Brown"
<zoenaomibrown@N-O-S-P-A-A-Mtesco.net>
<kN%0i.1430$7l6.542@newsfe7-win.ntli.net> wrote:

>| Hello all.
>|
>| I have a client who wants to be able to restrict access to a PDF file to a
>| specific user. They want a control panel where they can create a user with
>| username/password and upload the PDF. So far so good.
>|
>| But what is the best way to restrict access to the PDF ? I was thinking of
>| storing it above the root so that it was not in the public domain, when the
>| user requests it, prompt for username/password and then copy the file with a
>| random filename to a public place. Then delete is straight afterwards.
>|
>| There has to be a better way though ?
>|
>| thanks
>|
>| Zoe


Thinking outside the square - why not password protect the PDF file
itself? The average user will not be able to open the file without the
correct password and there fore will not be able to view it. Then it
doesn't matter where the file is stored.
---------------------------------------------------------------
jnorthau@yourpantsyahoo.com.au : Remove your pants to reply
---------------------------------------------------------------

[Back to original message]