Re: FW: [PHP] Accessing Files Outside the Web Root

On Fri, 2013-03-15 at 09:11 -0400, Dale H. Cook wrote:

> At 09:44 PM 3/14/2013, tamouse mailing lists wrote:
> 
> >If you are delivering files to a (human) user via their browser, by whatever mechanism, that means someone can write a script to scrape them.
> 
> That script, however, would have to be running on my host system in order to access the script which actually delivers the file, as the latter script is located outside of the web root.
> 
> Dale H. Cook, Market Chief Engineer, Centennial Broadcasting, Roanoke/Lynchburg, VA
> http://plymouthcolony.net/starcityeng/index.html  
> 
> 


Not really.

You script is web accessible right? It just opens a file and delivers it
to the browser of your visitor. It's easy to make a script that pretends
to be a browser and make the same request of your script to grab the
file.

Thanks,
Ash
http://www.ashleysheridan.co.uk