Link to home
Start Free TrialLog in
Avatar of cesemj
cesemj

asked on

prevent users from access a file folder form the web

my sql 5.5
ubuntu 12.04
php

Hi,

I created a PHP web application and I have a web page that allows users to upload word, pdf, and excel files.  Once the file is uploaded a confirmation page displays saying the file has been uploaded.  Problem: even though the url is encrypted a person can take the link and send it to a individual that does not have permission to the application  We created a session cookie for each logged in user but we are unable to protect the folder at the application level.  

Please share suggestions or examples about different ways to protect a folder from the public.   The only people that should have access are the users stored in user db table.  I am having trouble finding solutions.


Thanks.
ASKER CERTIFIED SOLUTION
Avatar of Ray Paseur
Ray Paseur
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of cesemj
cesemj

ASKER

Thank you Ray, I am going review, test, and let you know if I am sinking or rising.
Ha!  I expect you'll be paddling for a while before anything happens :-)
Avatar of cesemj

ASKER

I am still paddling ad thank you for checking in on me!
Avatar of cesemj

ASKER

Thank you for sharing your insight and subject matter expertise.  The direction you presented allowed us to to implement a important safeguard.  You Rock!!!!!!!!!!!!
Thanks for the points and for your kind words, and thanks for using EE! ~Ray