HOW CAN I HIDE OR MASK PASS AND lOGIN IN ANCHOR

marconi8

on my page are links

<a href='ftp://uploader2😃sVNF@uplr2.yo.lv/dir1/test.zip'>download</>

but i dont want that clients can see ftp login and password how in this link, i tried md5() but this dont work, has anyone some idea ???

Aeiri

Just have it link to a PHP file that reads the data, and outputs the file contents in the header...

IE:


header("Cache-control: private");
header("Content-Type: file");
header("Content-Disposition: attachment; filename=$filename");
echo($filecontents);

Where $filename is the filename of the file and $filecontents is the result of an fread() of the file you are trying to send.

sarahk

In this instance you're not worried about the search engines indexing so you can have

<form action="getFile.php" method="post">
<input type="hidden" name="name" value="xxx">
<a href="javascript:submit();">download</a>
</form>

and getFile then sends the header information. A dedicated page hacker can still get the info but as the form is posted (not get) the info won't be in the url.

Aeiri

A very simple HTML programmer could get your un/pw in that!!

They can just view the source and, guess what? THERE IT IS!!

You must have a wierd definition for "hacker"...

sarahk

fair enough

then when they login store the info in a session and getFile could access it from there.

I thought you were more concerned about protecting the url from being snatched or passed about.

Aeiri

That is, if it's dynamic, if it's just static like what it looks like, then my idea would be best.

Weedpacket

But if it's static then it's not a PHP script that can send out its own headers... (the page the link is on could be either - the request would still look the same.)

marconi8

thanks to all, you really all are good people....