php - Allow users to download files outside webroot -

-

hello using php allow users upload files , have them sitting in folder outside webroot (/var/www) folder security reasons. in folder /var/uploads. user uploads files specific records. once the uploaded files moved uploads folder, address of attachment stored in database. whenever user checks record, attachments specific record going displayed downloads.

since out of webroot, unable them downloaded have url of

http://localhost/var/uploads/attachment.txt

do have solution or should downloadable folders child directories of webroot?

<?php $con = mysql_connect("localhost","id","pass"); if (!$con)   {   die('could not connect: ' . mysql_error());   }  mysql_select_db("db", $con);  $result = mysql_query("select * attachments");  while($row = mysql_fetch_array($result)) { echo '<a href="'.$row[2].'" target="_blank">download</a>--'.$row[3].'<br>'; }  mysql_close($con); ?>

is code using. folder's owner www-data:/ or web server. there should no access issues.

use

  • a symlink pointing /var/uploads (tutorial here)

  • a apache alias directive alias /uploads /var/uploads (must in httpd.conf)

  • or proxy php script accepts variable filename=upload.jpg , fetches file e.g. using fpassthru()

the latter least preferable option because resource intensive, it's alternative. needs proper securing prevent attacker getting other files on server through proxy.


Comments

Post a Comment

Popular posts from this blog

ASP.NET/SQL find the element ID and update database -

-
basically i've got update query runs when click submit button. i have asp:repeater in page layer inside this <asp:repeater id="dgbookings" runat="server" onitemdatabound="itemdb"> <itemtemplate> <div class="bookingscontent"> <div class="bookingdetails" id="<%# databinder.eval(container.dataitem, "booking_ref") %>"> <p class="infotext"><%# databinder.eval(container.dataitem, "adults") %> <asp:linkbutton onclick="editdetails" text="edit..." runat="server"></asp:linkbutton></p> <p class="infotext"><asp:linkbutton onclick="submitdetails" text="submit..." runat="server"></asp:linkbutton></p> </div> </div> </itemtemplate> <asp:repeater> and outputs ...
Read more

jquery - appear modal windows bottom -

-
i have modal windows in application, work fine <div id="modal" class="modal hide fade" tabindex="-1" role="dialog" aria-labelledby="mymodallabel" aria-hidden="true"> but when modal appears, appear top of windows, , want appear bottom the application joomla 3.0! , using template of meet gavern any idea? i found solution i modified de css in bootstrap .modal.fade { top:-25%; -webkit-transition:opacity .3s linear, bottom .3s ease-out; -moz-transition:opacity .3s linear, bottom .3s ease-out; -ms-transition:opacity .3s linear, bottom .3s ease-out; -o-transition:opacity .3s linear, bottom .3s ease-out; transition:opacity .3s linear, bottom .3s ease-out; }
Read more

c++ - Compiling static TagLib 1.6.3 libraries for Windows -

-
i having super hard time compiling , using taglib 1.6.3 in qt project. i've tried can think of. taglib claims supported through cmake i'm not having luck. furthermore, i'm confused kinds of files need qt libs! i've built *.a files, *.lib, , *.dll. understand far... believe since i'm working in windows *.lib want. no matter do, end "undefined references" taglib functions try use when try compile qt project. have tried mingw32, msys, visual studio 2008, , cross-compiling windows on linux. turning nothing. what makes less sense me if compile same taglib source qt on mac (g++ think?) works fine! somewhere in windows compilation procedures have going wrong. have been smacking face on desk 30 (on , off) hours trying figure out. since qt uses mingw must compile taglib same compiler? if compile *.lib's visual studio not compatible? are *.a libraries usable in windows? (assuming mingw) i'm still trying handle on c++ stuff, after reading coun...
Read more