Uploading File

[zzz]

I need to be able to upload files and let users who login be able to download them. Currently I'm using a utility that places the files in a folder CHMOD 777. I noticed that if you try to access the file the browser leaves history trail to the file and next time, even if you're not logged in you can just go to browsers's address window, open history an go straignt to the file.

I tried placing the files to a directory that is parallel to my www, and I'm able to upload/delet them there, but not open...

What's the better way of safely placing files to be accessed from the site?

[designguy79]

I would recommend using .htaccess -- http://www.sambar.com/syshelp/htaccess.htm -- or, putting the directory outside of your www/ folder and then writing a script that checks their security first, and then loads the file from said folder.

Hope that helps...

[designguy79]

Ah, I just noticed your comment about already trying to do it in a different directory.

When you say that you cannot open them, do you mean via your browser, or in the script itself (using 'readfile' or 'fopen')?