What do you mean by sanity checking?
On 7/13/05, John Berninger <[EMAIL PROTECTED]> wrote: > On Wed, 13 Jul 2005, David McDowell wrote: > > > I'm not sure I follow... here's more: > > > > http://www.example.com/viewfiles.php for example can list the files > > from /mnt/mysharename b/c PHP can access the file system. The web > > server has NO rights to /mnt/mysharename so the web URL for a file > > can't be http://www.example.com/myfirstfile.pdf and it can't be > > http://www.example.com/mnt/mysharename/myfirstfile.pdf. Those just > > don't make sense. Does Apache need a directive that puts > > /mnt/mysharename as a valid web directory, or an alias folder in > > /var/www/html/ or some other method? > > PHP can list the dir, so PHP *should* be able to read the files. > > Build the viewfiles.php page so that the hyperlinks are pointing > at things like getfile.php?file=myfirstfile.pdf and then have > getfile.php do sanity checking (lots of sanity checking) and then just > readfile($file). > > -- > John Berninger > > GPG Key ID: A8C1D45C > Fingerprint: B1BB 90CB 5314 3113 CF22 66AE 822D 42A8 A8C1 D45C > > Ita erat quando hic adveni. > -- > -- > TriLUG mailing list : http://www.trilug.org/mailman/listinfo/trilug > TriLUG Organizational FAQ : http://trilug.org/faq/ > TriLUG Member Services FAQ : http://members.trilug.org/services_faq/ > TriLUG PGP Keyring : http://trilug.org/~chrish/trilug.asc > -- TriLUG mailing list : http://www.trilug.org/mailman/listinfo/trilug TriLUG Organizational FAQ : http://trilug.org/faq/ TriLUG Member Services FAQ : http://members.trilug.org/services_faq/ TriLUG PGP Keyring : http://trilug.org/~chrish/trilug.asc
