Restricted access

[Marek Kilimajer]

Yes, put the files outside of web root or protect them using .htaccess
file. After authorization use readfile90 to serve the file. There are
lots of tutorials on authentization and if you are using some CMS you
might have all you need.

Ciprian Trofin wrote:

> Hi All,
>
> I want to give access to resources (PDFs and some RTFs) only to registered
> users and I also want to deny that kind of access to people that "guess"
> the URL. I guess it is all about putting these files outside the web-tree
> and somehow putting PHP to work.
>
> Could you enlighten me ? )
>
> --
> Thnx,
> Cip
>
>

[Ciprian Trofin]

Hi All,

I want to give access to resources (PDFs and some RTFs) only to registered
users and I also want to deny that kind of access to people that "guess"
the URL. I guess it is all about putting these files outside the web-tree
and somehow putting PHP to work.

Could you enlighten me ? )

--
Thnx,
Cip

[Kae Verens]

Ciprian Trofin wrote:

> Hi All,
>
> I want to give access to resources (PDFs and some RTFs) only to registered
> users and I also want to deny that kind of access to people that "guess"
> the URL. I guess it is all about putting these files outside the web-tree
> and somehow putting PHP to work.
>
> Could you enlighten me ? )
>

[url]http://php.net/fpassthru[/url] is the answer to the web-tree problem.

The authentication is a different matter. I have my own method - I'm
sure others have other/better methods.

Kae

[Ciprian Trofin]

What is readfile90 ? I tried google and nothing.
MK> Yes, put the files outside of web root or protect them using .htaccess
MK> file. After authorization use readfile90 to serve the file. There are
MK> lots of tutorials on authentization and if you are using some CMS you
MK> might have all you need.

>> I want to give access to resources (PDFs and some RTFs) only to registered
>> users and I also want to deny that kind of access to people that "guess"
>> the URL. I guess it is all about putting these files outside the web-tree
>> and somehow putting PHP to work.

[Marek Kilimajer]

I'm sorry, should be readfile(). Switched keyboard.

Ciprian Trofin wrote:

> What is readfile90 ? I tried google and nothing.
> MK> Yes, put the files outside of web root or protect them using .htaccess
> MK> file. After authorization use readfile90 to serve the file. There are
> MK> lots of tutorials on authentization and if you are using some CMS you
> MK> might have all you need.
>
>

>>>I want to give access to resources (PDFs and some RTFs) only to registered
>>>users and I also want to deny that kind of access to people that "guess"
>>>the URL. I guess it is all about putting these files outside the web-tree
>>>and somehow putting PHP to work.

>
>
>

[Scott Fletcher]

There is a easier way, I use this all the time and I don't have a problem
with it. Sometime the header() need some tweaking to make it work right.
You must include an exit() function after the header() due to bugs and bugs
in IE. This script below is what I use for file download. Instead of file
download, you can easily tweak the header to any of other things like
display PDF without knowing where hte real file is...

--snip-- "HTML Link"
echo "<a href='$PHP_SELF?dw_code=0'>\n";
--snip--

--snip-- "PHP Script"
//Script for File Download... (DP, Temp, etc...)
//(1st --> Original File (File on Server)...
//(2nd --> Renamed File & Fake File Path (Browser Download)...
//(3rd --> Hyperlink (Display Comment)...
$DownloadUpdateArray[0] = array('update\setup.exe','setup.exe','Special
Feature Update 1.0');

if (strlen(trim($_REQUEST['dw_code']))!=0) {
//Send Downloadable File(s) To Browsers...

$file=$DownloadUpdateArray[$_REQUEST['dw_code']][0];
header ("Pragma: public");
header ("Expires: 0"); // set expiration time
header ("Cache-Control: must-revalidate, post-check=0, pre-check=0");
header ("Content-Type: application/force-download");
header ("Content-Type: application/octet-stream");
header ("Content-Type: application/download");

header ("Content-Disposition: attachment;
filename=\"".$DownloadUpdateArray[$_REQUEST['dw_code']][1]."\";");
header ("Content-Length: ".filesize($file));
header ("Content-Transfer-Encoding: binary");

//Can't use readfile() due to poor controling of the file download.
//(IE have this problems)...
//readfile($file);

//use fopen() instead of readfile...
$fp = fopen($file, 'rb');
$content = fread ($fp, filesize($file));
fclose ($fp);

print $content;
}

//Required, to keep IE from running into problems
//when opening the file while downloading or downloading...
//(IE been acting strange lately...)
exit();
}
--snip--
"Kae Verens" <kverens@contactjuggling.org> wrote in message
news:20030814123110.72614.qmail@pb1.pair.com...

> Ciprian Trofin wrote:

> > Hi All,
> >
> > I want to give access to resources (PDFs and some RTFs) only to

registered

> > users and I also want to deny that kind of access to people that "guess"
> > the URL. I guess it is all about putting these files outside the

web-tree

> > and somehow putting PHP to work.
> >
> > Could you enlighten me ? )
> >

>
> [url]http://php.net/fpassthru[/url] is the answer to the web-tree problem.
>
> The authentication is a different matter. I have my own method - I'm
> sure others have other/better methods.
>
> Kae
>

[KLOCO]

Two problems the first is the easiest. When I click on home a new page opens
instead of going back to the opened homepage. The second is a bit more
complicated. I want to allow clients to log in and access their own pages and
not others. Site is: [url]www.kloco.net[/url] go to project>Emma or any link. Every thing
is behind the login and that is as far as anyone can go

I have all the files and plug-ins and programs that help suggests. The login
page is ASP Net page I have: ISS, .Net Framework 1.1 and SDK, and SQR Express.
When I press the + and select dataset, it says that no table found (I have an
access .mdb in the root folder) and then asks for ?select statement. I am lost.
I want to allow clients to access there own pages and not others.

[jeremyluby]

First Queston: You probably have target="_blank" in the <a> tag. Remove this.

Second Question: You will need to create a DB connection to your database