encrypting uploaded documents - HTML Forums

Reiss · 11-04-2009, 12:56 PM

Hi all,
I have a web site where a user can upload a number of different types of documents including docx, doc, pdf, jpg, txt xls. The file details are stored in a DB table for later access within a secured CMS.
What is the best way to stop these files being opened by anybody?
At the moment, if someone knows the full location of the document, they are viewable. The documents do get renamed upon upload.
Was thinking maybe password protected zipped files, but of course will have to find a script that can do this.
Any advice much appreciated.
Thanks

¥åßßå · 11-04-2009, 12:59 PM

Store the files above web root and deliver them via a page that authenticates the user

¥

Reiss · 11-04-2009, 01:36 PM

thanks Yabba,
Not sure how to do that, will have a look at my hosting provider.

¥åßßå · 11-04-2009, 01:52 PM

On my setup :

/files/my_folder/my_file.ext <-- "above" webroot
/public_html/ <-- web root
/public_html/file.php/key/my_folder/my_file.ext <-- file "link"

file.php checks for an ip/file/user key and then delivers ../files/[requested_path/file.ext]

simplified, but hope you get my gist

¥

Reiss · 11-04-2009, 03:40 PM

Yep, got it . Thanks again