Disable direct access to files...

far

I need some expert opinions on this...

I have a link:

<a href='#' onclick=\"javascript:openpage('includes/clients/myfile.php')\">Click to open</a>

as we can see the file path is includes/clients/myfile.php, i need to disallow users to type the file path into the Url? How can I do that?

Is it possible to create a session when a user clicks on a link?

Roger_Ramjet

far wrote:
Is it possible to create a session when a user clicks on a link?

Yes, use session_start() at the top of the script to both initiate and resume a session. NB session start must come before any page output or you will get the error: headers already sent

far wrote:
I have a link:
<a href='#' onclick=\"javascript:openpage('includes/clients/myfile.php')\">Click to open</a>
as we can see the file path is includes/clients/myfile.php, i need to disallow users to type the file path into the Url? How can I do that?

Well one way is to use $_SERVER['HTTP_REFERER'] to check that the user was forwarded from your own page. However this is not foolproof - read the user notes at the bottom of the manual page for more info about this issue.

You can also do this in Apache .htaccess but again as the manual sez, using referer is problematic.