> Hi. > > I have a /download directory for my website. I dont want the files to > get downloaded just by typing > http://www.foo.com/download/some_file.doc because its sensitive > information. > > I was wondering if there's a way to DISABLE the file download through > the .htaccess, and then i could get the file with something like: > http://www.foo.com/get.php?id=$ID_OF_FILE&hash=MD5($filename) > a very easy way is put that dir, out of rootdir for website... if you are in /some_path/web for website files, you can create: /some_path/download for your sensitive files... And then, read those files with readfile("/some_path/download/$filename"); -- José Miguel Santibáñez jms@xxxxxxxxx ------------------------ Yahoo! Groups Sponsor --------------------~--> Protect your PC from spy ware with award winning anti spy technology. It's free. http://us.click.yahoo.com/97bhrC/LGxNAA/yQLSAA/saFolB/TM --------------------------------------------------------------------~-> PHP Data object relational mapping generator http://www.metastorage.net/ Yahoo! Groups Links <*> To visit your group on the web, go to: http://groups.yahoo.com/group/php-objects/ <*> To unsubscribe from this group, send an email to: php-objects-unsubscribe@xxxxxxxxxxxxxxx <*> Your use of Yahoo! Groups is subject to: http://docs.yahoo.com/info/terms/