hi

im sure this is possible but cant seem to find any info in the php.net or through google. i have a password protected folder on my server which id like to gain access to via php, hence allowing a user to retrieve a file from this folder if they have passed the required php validation, but not ever giving them a password to it.

the contents of this folder have to be in a password protected place so people cant retrieve the file by simply typing in a url, php validation alone is not secure enough.

anyone know of any suitable tutorials re this?

thanks

mark m

If the authentication is not digest-based (usually not the case), you can use the
http://username:_password@url
to provide the username/password pair at the request time.

Those **** smilies !!!
No way to deactivate them !???
Remove the _ before password


If you use the file_open wrappers, it should work.

thanks for your reply tripy, being new to htaccess functions i have no idea what you mean by 'digest based', and i couldn't get the usernameassword@ working, not because it doesnt work, but because i dont understand it.

i have overcome the problem now by using a php script to copy files from the password protected folder to an unprotected foldr on the server, from there access can be obtained through a url.

thanks again.

What I meant is that, you can bypass the browser authentication dialog by providing the username and password in the url. Take as example that the url http://someserver.com/yadah/boum.txt is password protected. If you must log using user=fred and password=flintstone, then you can access the file with :

 http://fred:flintstone@somewhere.com/yadah/boum.txt

This will give the username/password to the server along the request, and you won't have the authentication window that appears. As long as the username/password pair is correct, that is.

I don't know what,s you mean and what is reson of your posting.