Re: [phplib] simple security question From: Bart-Jan Vrielink (bartjan <email protected>)
Date: 09/15/00

On Thu, 14 Sep 2000, Mitchell Hagerty wrote:

> Can php/phplib be used to block access to dirs like with htaccess? As
> our user base started to grow I decided I wanted to centralize the
> access right and use a simple form for updates. Now when new people came
> in our office manager - or interns - could give access to new people.
> I'm using php3 and phplib which handes this but I can still gain access
> to certain files if I know the exact path and the file doesn't include a
> permissions check. Does every file in a directory I want protected need
> a permissions check or can I do this at the directory level like with
> htaccess?

If you want to use phplib to protect all html files in a given directory,
then you could use a .htaccess file to autoprepend some phplib code that
does the page_open():

AddType application/x-httpd-php3 .phtml .php3 .html .htm
php3_auto_prepend_file path/to/some/file.inc
php3_auto_append_file path/to/another/file.inc

If you also want to protect other files, then the only way I can think of
is to use a wrapper and put the files itself outside the webroot. 

-- 
Tot ziens,

Bart-Jan

---------------------------------------------------------------------
To unsubscribe, e-mail: phplib-unsubscribe <email protected>
For additional commands, e-mail: phplib-help <email protected>