directory access .htacces

itsme85

Hello,

I have the following directories.

application
library
[INDENT]css[/INDENT]
public
[INDENT].htaccess[/INDENT]
[INDENT]index.php[/INDENT]

.htaccess
RewriteEngine on

RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d

RewriteRule ^(.*)$ index.php?rt=$1 [L,QSA]

Now I want the have access to the css directory. The normal include function works fine. But for the css I want to use "href".

How can I do that? And am I right, the problem is in de .htaccess file.

Thanks in advance.

dagon

your problem is css is not under your http root "public" so is not accessible via the webserver

itsme85

I understand..... but I am trying to search a way to make it possible.

dagon

move the css dir under the http root.

itsme85

I the application folder I have a file called layout.php

There I am using the following script.
<link rel="stylesheet" type="text/css" href="/../Library/Css/main.css" />

I did this because I don't want to have the css in de public folder.

But the script doesn't work. I think I have no access to the library folder with "link rel".

I know that it is not under the webroot. But is there a way to access a file outside the webroot.

scrupul0us

from a the browsers point of view, it only has access to what is within the realm of the public folder (including any virtually mapped folders that are placed within)

If you place the CSS outside the public folder and then try to access it from the html using ../ etc you will not be successful as using ../ is considered a type of 'hack' that servers will not allow... This prevents people from ../ all the way to the root of your system and accessing files they shouldnt

In short, the CSS has to be inside the public realm

bradgrafelman

itsme85 wrote:
But is there a way to access a file outside the webroot.

As scrupul0us has explaind, anything that you want the world to see has to be inside at least the root public folder.

Perhaps we're not asking the right questions; why are you trying to keep your CSS stylesheet(s) outside of the root of your website? If you're trying to "hide" your super secret CSS code, then you might as well give up now. If you expect your CSS to be applied to your pages, you have to send the CSS code to the user's browser. If you send the code to the user's browser, you can expect that the user can easily view your CSS code.

Trying to hide the CSS code is about a pointless as those stupid no-right-click Javascript solutions that only work against the occasional web surfer who's never used a computer for more than eBay and webmail.