Giving access to db call without......

Anon

..without actually giving access to the db itself.

Doesn't make much sense right? Well a friend of mine has a blog and I have a photo sharing site....on my site I have a random image using the ORDER BY RAND call in MySQL. What he would like is to be able to make the same call and put the picture on his site....he is a good friend so i don't mind giving him my db() functions to make the call .....but I would rather just somehow make it so that only that one call can come through from his domain. And for security reasons I would rather not allow full access to my DB for this onr call...

any ideas?

Anon

The source of the image can be a PHP script on your server that sends a Content-Type: image/whatever header and prints the content of the image to the browser.

dmills

what about a simnple iframe to a page on yr site? you lose older browser support but screw em if they can't update their browsers, at least on non-professional sites.

Anon

hahaha....can't really do the screw them bit....it's a blog (hence my friends)

Anon

not sure I quite catch your drift....The problem is that he wants it different for everyone so that one user would see one image and another would get another random (not the same) image.

So to clarify a bit ....I could give him this tag to put in <img src="http://path.to.myserver/script.php"> ...then inside that script all it is a call to the DB for the random image?.....and output a header: "Content-Type: image/image_name.jpg" ....could you give a quick and dirty example of the code?

Anon

header("Content Type: /image/jpeg");
$filename = "/usr/local/apache/htdocs/images/foo.jpg";$$fd = fopen ($filename, "r");
echo fread ($fd, filesize ($filename));
fclose ($fd);

not sure if that will work exactlly, but there are 1000s of examples in the forum... this is actually how you should do it on your site as well... AmIAGoodPhpCoderOrNot.com

🙂