Restrict file download directly

[hillhui]

Hi all,

I am trying to protect the user file on my webserver.

I want to restrict the direct donwload from "userfiles/abc.zip", I want to this file donwloaded by using "downloadfile.php?fid=12345" where fid with point to the "userfiles/abc.zip"

i try to browse from the Internet, and saying that I need to create the ".htaccess" file under "userfiles" folder, but after I create it, i can't download it with the direct link and the "downloadfile.php" method.

do you guys have any idea on doing that?

Thank you!

Hill

[The_Chancer]

YOu could have a database back end with temporary links from the fid to the actual name which are cleared after 30mins of being created (via cron job or similar) so the download.php file checks the dba dn then loads the downloadable file and throws it out with a normal download script... (or a simple meta redirect)

[hillhui]

um...
but can i restrict the user download the file directly from "http://domainname/userfiles/abc.zip"???