如何拒绝用户访问，但从.htaccess启用php脚本

Question

I have a server which stores images in a folder called 'images' but I want it to only be accessed by the php scripts. Can anyone help? Thank you.

Answer 1

In your images folder, create an htaccess file with:

Deny from All

Then in your php scripts, you do something like:

<?php
$file = 'images/image.jpg';

if (file_exists($file)) {
    header('Content-Type: image/jpeg');
    header('Content-Length: ' . filesize($file));
    ob_clean();
    flush();
    readfile($file);
    exit;
}
?>

Answer 2

First, you block direct access with a simple .htaccess

deny from all

You can use readfile to read the image from the filesystem and output the bytes to the HTTP response body.