Posted by Zoe Brown on 05/11/07 19:02

"Jeff North" <jnorthau@yahoo.com.au> wrote in message
news:lv69435eo8sh1a92tsg5o1rkkn8t5holld@4ax.com...
> On Fri, 11 May 2007 15:16:32 GMT, in alt.php "Zoe Brown"
> <zoenaomibrown@N-O-S-P-A-A-Mtesco.net>
> <kN%0i.1430$7l6.542@newsfe7-win.ntli.net> wrote:
>
>>| Hello all.
>>|
>>| I have a client who wants to be able to restrict access to a PDF file to
>>a
>>| specific user. They want a control panel where they can create a user
>>with
>>| username/password and upload the PDF. So far so good.
>>|
>>| But what is the best way to restrict access to the PDF ? I was thinking
>>of
>>| storing it above the root so that it was not in the public domain, when
>>the
>>| user requests it, prompt for username/password and then copy the file
>>with a
>>| random filename to a public place. Then delete is straight afterwards.
>>|
>>| There has to be a better way though ?
>>|
>>| thanks
>>|
>>| Zoe
>
>
> Thinking outside the square - why not password protect the PDF file
> itself? The average user will not be able to open the file without the
> correct password and there fore will not be able to view it. Then it
> doesn't matter where the file is stored.

because the PDF file is not owned by the client, they want to upload a file
(that they source from elsewhere) and just press a few buttons, they dont
want to open and edit the file. So everyting needs to be done in php.

[Back to original message]