PHP, IIS2 and Protected Access Question

[farnorth]

I am setting up a website that will have a portion set aside for secure access. This access is being done using user/password with PHP. My question is I will have some .PDF files they will have access to but I don't want anyone to be able to know the true name of the file or be able to type in the actual URL to view it. Any and all help is apprecieated.

FN

 

[sleipnir214]

The problem is that although there are ways to abstract the PDF's system filename from the URL by placing a download script between the user and the file, there are still problems.

First is that the script name must be known.

Second is that you may run into PHP's time-to-execute limits.

Third is that a download script consumes more resources than a straight through-the-web-server-only download.

Want the best answers? Ask the best questions:

http://www.catb.org/~esr/faqs/smart-questions.html

TANSTAAFL!!