Using Apache to call a script for all files requested in a folder

Kinsbane

So, I'm hoping to use CodeIgniter's .htaccess method to help in managing files that are directly linked to and stopping download of files that need proper credentials. I cannot use a password-protected folder for this.

RewriteEngine On
RewriteBase /library/
RewriteCond %{REQUEST_FILENAME} !-d
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_URI} !^(index\.php|docs|scripts|library\.php)
RewriteRule ^(.*)$ index.php/$1 [QSA,L]

What I have is a folder full of files. Some of them can be accessed without credentials, some cannot. What I need to do is have Apache call up a PHP script that will check the file being requested for proper credentials if it's a secured file. If the credentials aren't met, it should show an error page with login form. If they are met, the file needs to be a forced download to the browser. Publicly available files should just automatically get sent to the browser.

So, how would I go about using the .htaccess file to send the file being requested to the PHP script? I hope I've explained this well enough. Basically, I need to stop direct links to files that should be protected.

Thanks for any help!

dagon

i would move the files out side the web root, then use a php script to make them available, the script can check credentials if needed.

Kinsbane

dagon;10934756 wrote:
i would move the files out side the web root, then use a php script to make them available, the script can check credentials if needed.

Crap! Sorry I forgot to mention, they already are outside the web root, but they're made directly linkable through symlinks. So a link like http://site.com/docs/file.zip, the folder 'docs' is actually a symlink to /var/www/ps_files/docs - not exactly how it is, but you get the idea.

dagon

well take out the symlink then :-)