Protecting Directory locks out my own PHP

vorxaw

Hi,
I have a php page reading images from a subfolder and displaying it.

I want to protect the subfolder, so I tried the good old .htaccess trick. But that locked down the folder TOO well, even my own php page can no longer access it.

Is there a way to do it so my php page still can get in, but people can't just type the directory in their browsers?

Thank you.

dagon

how is your php page accessing it?

vorxaw

<?php
$files = glob("images/.");
for ($i=1; $i<5; $i++)
{
$x = count($files);
$num = $files[rand(0, $x)];
echo '<img src="'.$num.'"><br>'."";
}
?>

Count files in images folder, and display a random image.

dagon

you cant stop people typing the url in a browser if you want to be able to show the images, on your site. Perhaps your trying to stop hotlinking?

vorxaw

I see. Well I don't mind people typing in the imageurl or hotlinking, just don't want it to list everything in the directory when people type in http://blah.com/images

dagon

oh, i see, either put in a dummy index.html or index.php (maybe redirect to home page)

or in .htaccess

Options -Indexes

there is also

IndexIgnore *.gif *.jpg

to show files other than gif\jpg

vorxaw

Ah thank you, the dummy index idea worked great. I never even thought in that direction!
Take care.

scrupul0us

you could use 'env' vars to allow the server but deny/limit the world