Posted by Toby A Inkster on 12/20/07 12:28

jw88574@hooya.com wrote:

> To put it another way, is there a method to allow an HTML script in the
> document root to see and image (or file or whatever) and still prevent
> access to that resource?

Firstly, HTML is not a script.

Secondly you're answer is no. Any image that can be seen using <img> can
be seen by accessing the image's URL directly. Using the HTTP "Referer"
header, you might be able to kludge together a solution, but it will be
unreliable and can be easily worked around.

--
Toby A Inkster BSc (Hons) ARCS
[Geek of HTML/SQL/Perl/PHP/Python/Apache/Linux]
[OS: Linux 2.6.17.14-mm-desktop-9mdvsmp, up 12 days, 23:01.]

Sharing Music with Apple iTunes
http://tobyinkster.co.uk/blog/2007/11/28/itunes-sharing/

[Back to original message]