-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi all
I've been asked to protect an area containing 'course material' (pdf's
etc) and have just thought of a gaping hole in what I've done.

I use an class to handle all the auth stuff and each page checks the
value of $obj->logged_in :: No problem.

but what if someone links to www.thesite/theProtectedArea/file.tar.gz

that file cannot check if the downloader is logged in can it.

So, any suggestions or words of wisdom would be much appreciated :-)

- -- 
Nick Wilson     //  www.explodingnet.com



-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)

iD8DBQE83N09HpvrrTa6L5oRAlSZAJwNVHXfeP3w8aaJTtRUmPH2v/nvNwCfaqp4
HpXVvWLn87rkhCQxnBtszAc=
=St/c
-----END PGP SIGNATURE-----

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to