[PHP-DEV] stop a file called foo.bar

2001-08-03 Thread void

stop a file called foo.bar from being downloaded with a web server ?

Say you'r web site's name is foobar.net.

...and...

Script-kiddy Johny knows that,
but also knows that you'r secret file is called foo.bar
and it is saved in the root dir. of you'r web site.

in a http browser little Johny
can simply type in http://www.foobar.net/foo.bar;
to download it, since the web server (i am on)
will trigger the clients download box to open,
because its not a wrapped extension, or php, or htm, or so .

I have looked into the .htaccess file and added the directive
IndexIgnore *.*
there'r millions of directives and i am looking at them now,

But please tell me if there IS NOT a directive I can add to the htacces file
to keep little Johny from downloading the file.
Because then i might just look the whole day long for nothing !

Thanx a lot for your time

Ben

enjoy the day :-)






-- 
PHP Development Mailing List http://www.php.net/
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]




Re: [PHP-DEV] stop a file called foo.bar

2001-08-03 Thread Andy

Technically, this is not a PHP problem, but I
will be nice...

Add this the your .htaccess file

Files foo.bar
order allow,deny
deny from all
/Files

You can also...

Files *.bar
order allow, deny
deny from all
/Files

On Fri, 03 Aug 2001, void wrote:
 stop a file called foo.bar from being downloaded with a web server ?
 
 Say you'r web site's name is foobar.net.
 
 ...and...
 
 Script-kiddy Johny knows that,
 but also knows that you'r secret file is called foo.bar
 and it is saved in the root dir. of you'r web site.
 
 in a http browser little Johny
 can simply type in http://www.foobar.net/foo.bar;
 to download it, since the web server (i am on)
 will trigger the clients download box to open,
 because its not a wrapped extension, or php, or htm, or so .
 
 I have looked into the .htaccess file and added the directive
 IndexIgnore *.*
 there'r millions of directives and i am looking at them now,
 
 But please tell me if there IS NOT a directive I can add to the htacces file
 to keep little Johny from downloading the file.
 Because then i might just look the whole day long for nothing !
 
 Thanx a lot for your time
 
 Ben
 
 enjoy the day :-)
 
 
 
 
 
 
 -- 
 PHP Development Mailing List http://www.php.net/
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]
 To contact the list administrators, e-mail: [EMAIL PROTECTED]

-- 
PHP Development Mailing List http://www.php.net/
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]