如何防止直接访问文件？

Question

I have a system where users upload image files. I only want specific users to have access to these files and not for anyone to just go to example.php/image.jpg and see any user's image...Thanks

Answer 1

只需将它们上传到您的Web根目录之外的目录中，并使用php脚本来获取它们，并在用户满足适当要求时将其显示给用户。

Answer 2

You can create directory for each user. For example, if username is Jhon, you can create a directory images/jhon/, then use PHP to restrict access to another users directory

Answer 3

Put the in a separate directory, and in that directory create a file called .htaccess containing the following:

deny from all

This will do what you want.

Answer 4

You can add the following to an .htaccess file, and drop the file into the directory where your images are stored :

To prevent directory browsing:

Options All -Indexes

To prevent image hotlinking:

RewriteEngine on
RewriteCond %{HTTP_REFERER} !^$
RewriteCond %{HTTP_REFERER} !^http://(www\.)?mydomain.com/.*$ [NC]
RewriteRule \.(gif|jpg|js|css)$ - [F]

Replace mydomain.com with your own domain name.