Point me in the right direction? File Viewer

[scopa]

Hey all. I want to set up Client pages that list all the files I have made for a specific client. I was thinking it could work like this:

/clients/index.php will list all clients
/clients/client_A.php will list all files in the /clients/client_A/ folder.

Additionally, it would be awesome if the index.php had a password interface that limited the client user to only being able to click on their own link. OR maybe a forwarding system that once they put in their user/password, they get taken straight to their client_A.php page and I don't need an index.php master list?

Anyone know if there is an existing solution to this problem? I am a total php novice. I know enough to change existing code, but writing from scratch is beyond me at this point.

[wilku]

I'd suggest something like this:

• clients folder should be outside www root
• index.php (in www root) should take care of authentication:

  <?php //index.php
  if (check_logout_submit()) unset($_SESSION['logged_user'];
  if (check_login_submit()&&check_user_and_password($_POST['user'],$_POST['pass'])) 
  {
   $_SESSION['logged_user'] = $_POST['user'];
  }
  if (isset($_SESSION['logged_user'])&&!empty($_SESSION['logged_user']))
  {
   list_content_of_dir('/path/to/clients/'.$_SESSION['logged_user']);
   draw_logout_form();
  }
  else 
  {
   draw_login_form();
  }
  
  ?>
  

  - list_content_of_dir should list links to download.php?file=file_to_download.pdf which would serve the files from outside www root. This will make direct access to files imposible:

  <?php //download.php
  if (isset($_SESSION['logged_user'])&&!empty($_SESSION['logged_user']))
  {
   $file = '/path/to/clients/'.$_SESSION['logged_user'].'/'.basename($_GET['file']);
   if (is_file($file))
   {
    send_apropriate_headers_according_to_extension($file);
    @readfile($file);
  }
  else header('Location: http://yoursite.com/index.php');
  ?>
  

  - this is just an outline - you need to write your own functions for most of it.

[halojoy]

I have used this
http://www.webfilebrowser.org/

It has got many features. And several ways of Authentication.
As already pointed out here, security is a main concern.
You will have think and be careful before make your setup, to avoid potentionally terrible problems.

There is a chapter at the above website:
http://www.webfilebrowser.org/#security
... and handled correctly you should be able to install it in a reasonably secure way.

PS. It is a sourceforge.net project and http://sourceforge.net/
is down today, so you can not download until tomorrow.