It's a shame that 4D's web server does not directly support something similar 
to Apache's .htaccess file in the web root. Securing direct access to html 
files/folders would then be trivial.

Regards,
 
Narinder Chandi,
ToolBox Systems Ltd.
 
I am available for new consulting opportunities…
http://4d.1045681.n5.nabble.com/ANN-4D-Developer-Available-td5765443.html
-- 

-----Original Message-----
From: 4D_Tech <[email protected]> on behalf of 4D Tech Mailing List 
<[email protected]>
Reply-To: 4D Tech Mailing List <[email protected]>
Date: Tuesday, 1 October 2019 at 16:49
To: 4D Tech Mailing List <[email protected]>
Cc: "Epperlein, Lutz (agendo)" <[email protected]>
Subject: AW: Web aficionados - Not allow user to access file directly

    Use the so-called "Web decoy" technique. Basically you put your html files 
in another folder outside your html root. Then redirect all requests using ON 
WEB CONNECTION. For every http request 4D cannot serve directly, it uses ON WEB 
CONNECTION.
    
    This is more elaborated e.g. here:
    
    How to skip over HTTP and redirect to HTTPS
    https://kb.4d.com/assetid=75313
    How to skip over HTTP and redirect to HTTPS: Part 2 (The Web decoy folder)
    https://kb.4d.com/assetid=75753
    
    And there was a book "The Web Companion" by David Adams, it's a bit old 
now, but the technique remains the same. If you can get a copy ...
    
    HTH
    
    Regards
    Lutz
    
    -----Ursprüngliche Nachricht-----
    Betreff: Web aficionados - Not allow user to access file directly
    
    Hi Web Experts,
    
    I don't want the web users to access html files directly, without going 
through ON WEB CONNECTION.
    
    e.g.
    
    http://myweb/foobar.html
    
    If "foobar.html" exists in the web folder, Users can put in this in the 
address and it will pull up the web page, but will not process the 4D Tags, etc.
    Very, very funky.
    
    So, I'm probably being a dope, but does anyone know what I can do to 
prevent accessing html files directly?
    
    Gracious thanks
    
    Randy Engle
    
    
    **********************************************************************
    4D Internet Users Group (4D iNUG)
    Archive:  http://lists.4d.com/archives.html
    Options: https://lists.4d.com/mailman/options/4d_tech
    Unsub:  mailto:[email protected]
    **********************************************************************
    **********************************************************************
    4D Internet Users Group (4D iNUG)
    Archive:  http://lists.4d.com/archives.html
    Options: https://lists.4d.com/mailman/options/4d_tech
    Unsub:  mailto:[email protected]
    **********************************************************************


**********************************************************************
4D Internet Users Group (4D iNUG)
Archive:  http://lists.4d.com/archives.html
Options: https://lists.4d.com/mailman/options/4d_tech
Unsub:  mailto:[email protected]
**********************************************************************

Reply via email to