Hide paths for files

[medirecpr]

Hello all, I am new to PHP, and have been tasked with adding functionality to an existing dynamic webpage.

I have a link for logged in users, that displays an xml/xsl file:

Code: Select all

<?php
echo "../patientfiles/".$_SESSION['Login']."/ccd".$_SESSION['Login'].".xml";
?>

however, if a user copies the url, he/she may paste it in the browser at any time and access the file w/o logging in.

is there a way to display the file in the browser, without giving up the path?

Kindest regards,

[seandisanti]

There are several ways to do what you're trying to do. the easiest way is probably to include an .htaccess denying access to all, and then have your server side scripts display it when logged in.