Hi Adrian, I had the same dilemma on a project I was working on, and came across this: http://www.vibralogix.com/linklokurl/index.php It basically adds an authentication code, which can lock the download to an IP address and also you can limit the life of the URL to a length of time. You can also store all the documents below the web root. It's not free, but for $30 dollars it was well worth the investment and saved me plenty of time! HTH, Kev -----Original Message----- From: Adrian Bruce [mailto:abruce@xxxxxxxxxxxxxxx] Sent: 10 March 2006 11:02 To: php-general@xxxxxxxxxxxxx Subject: displaying documents stored under web root Hi After some advice (surprise!) I currently store restricted documents beneath the web root so they are not accessible via the URL, when a valid user wishes to view a document i copy it to a temporary folder above the root and load it in a new page. the only way i can then manage to delete the copy is automatically deleting all temp files when any user goes to the log out page. This is obviously not a very good way of doing this but unless i can establish when a user is no longer viewing the doc then i dont know when to delete it. I was wandering how others deal with these problems like this any advice appreciated greatly Ade -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php