Re: [PHP] Protecting individual files/dirs from access

2007-04-17 Thread Richard Lynch
On Tue, April 17, 2007 9:12 am, tedd wrote: > I start building from inside httpdocs folder where I place an > index.php file and then branch out from there. Now, where is "OUTSIDE > the web-tree"? Not inside httpdocs folder is OUTSIDE. If you put a file there, nobody can surf to it. But PHP can

Re: [PHP] Protecting individual files/dirs from access

2007-04-17 Thread tedd
At 6:24 PM -0500 4/16/07, Richard Lynch wrote: index.php is also accessible, if I can guess the login, which I did on my first try... Well, I did provide the log on and password on a subsequent post. BUT, I didn't try to make it hard to guess, that wasn't the point of the post. I was trying t

Re: [PHP] Protecting individual files/dirs from access

2007-04-16 Thread Richard Lynch
On Sat, April 14, 2007 10:47 am, tedd wrote: > At 4:56 PM -0500 4/13/07, Richard Lynch wrote: >>Put the files outside the webtree, and have a PHP script that >> controls >>access and is your gate-keeper. > > Richard: > > How secure is this: I can't answer that question definitely just looking from

Re: [PHP] Protecting individual files/dirs from access

2007-04-14 Thread tedd
At 4:56 PM -0500 4/13/07, Richard Lynch wrote: Put the files outside the webtree, and have a PHP script that controls access and is your gate-keeper. Richard: How secure is this: http://sperling.com/a/pw There are seven files there, namely: http://sperling.com/a/pw/.htaccess http://sperling

Re: [PHP] Protecting individual files/dirs from access

2007-04-13 Thread Richard Lynch
On Fri, April 13, 2007 11:43 am, Skip Evans wrote: > So the directory for the artist, which will be one > level below the docroot, like Don't do that. You have to work WAY too hard to make sure you have a gate-keeper to force people to pay. Put the files outside the webtree, and have a PHP scrip