On Tue, Feb 14, 2006 at 09:02:50PM +0000, J_K9 wrote:
> Hi,
>
> I'm currently learning PHP, and I'd like to put it into practice to help
> me learn. I want to make a download script so that if the value of a
> certain variable is '1', the first download is selected, if it's '2',
> the second is selected, and so on... But, all the time, the download
> source's URI is not revealed.
>
> As I was saying, I have a vague idea of how to do it - but I know it's
> wrong. With the help of some others, I've managed to come up with this:
>
> |-----------------------
> ||<?php
>
> if(!empty($_GET['file_id'])) {
>
> switch ($_GET['file_id']) {
> case 0:
> echo "Please specify a file ID";
> case 1:
> header("Location: ./hidden--files/downloadme.zip");
> break;
> ...
This is a method is rather known as 'security by obscurity'. If you
want to use this method instead of doing some sort of
authentication system, you need to make your file_id's more obscure
by using a more randomized value instead of 1,2,3...
Curt.
--
cat .signature: No such file or directory
--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php
