Security Model

mailtome

Hi
I want to bulid the security model for my website such that i dont have to incorporate any code in each and every page of my website .Something like squid does.If user doesnt has permission to view Yahoo ,he is not allowed to visit it .No code is written on Yahoo pages.How can this be done ?Can someone show me the way?

dgrinberg

In PHP this can be achieved by creating an include file which handles all of the security, then it can be automatically added to all PHP files by setting auto_prepend_file in the PHP INI.

http://www.php.net/ini.core

The other setting that might be useful as well is auto_append_file. Which includes the file at the end of all PHP files.

Please note: this only works on PHP files. It does not work on HTML files

mailtome

Thanks David
This is what I was looking for.
1 question though.If I change the settings in php.ini ,it would apply to rest of my php sites too.But I want this setting for only 1 of my php site.

dgrinberg

Yeah, changing it in the INI does change it for all sites.

In an Apache world, you can do this per site using the .htaccess file.

Unfortunately in windows there is no equivalent. If you were really in a bind you could run multiple instances of PHP! (Maybe someone else has another option?)