Hello all.
I read a few posts and some are incomplete and rather old, but I have at least trawled the forums to find relevant information.
I am learning php to work with mysql. I have a few pages working and added secure pages to my database to accept secure logins. However, the purpose of doing so is to provide a few files for download to members only. I am not interested in using mambo or joomla at all. What I can't figure out is, to keep the files secure, do I add them to the database itself, or use a referal to a hidden directory? Right now the files are simply in htdocs, which is a long way from where I want to be! Anyone can access these files.
To begin understanding this, I would like to know the correct format before the code. Where should the files be, and what stops a user simply opening that directory in a browser? Can my system link to a directory for the download outside of htdocs?
Then what topic am I looking for to research the code? Thank you.
I am running the latest php, mysql and apache, but am using apache with 1.3 support.
