Folder location

FrEaKmAn · #1 September 23rd, 2007, 01:33 AM

Hi

I'm just wondering if this would work:

so if we have hosting, and we have website listing, and ones of them is public_html + www, which is same thing. But the question is, what if there is a folder created as subfolder to these folders, so that it can't be access via web. But can it be access with script, I don't know using "../"

**Buzz** · #2 September 23rd, 2007, 06:36 AM

You can access folders outside the domain folders in PHP by using the chdir() command and a server path to the folder you wish to access. I do this for my stock art sales. All the image files are stored outside the www directory so they can't be accessed in any way by the public other than the script I have in place unless they were to miraculously guess the server path.

FrEaKmAn · #3 September 23rd, 2007, 08:14 PM

ok, that sounds great

I'm thinking to build a download script and my plan has few problems.

If customer orders something, it inputs into database something like downloadpass, created with md5() and songid. Now when clients access the download, like download/this_is_the_code_created, it's downloads the file (yes located in folder out of www) but it also sets the status of download link to 1 (as already downloaded) so that same link can't be used twice...

but the thing is that client has only one chance to download the file, so in case the internet connection breaks down, the download file can't be accessed again (but client paid for it and didn't get it). Also there is no php script (at least I'm not aware of it) that can check if file is downloaded, but I have seen something like this advertising on few sites, probably they have some programs...

what do you suggest? that I maybe create a session, like 10min long, so in case download doesn't succeed that there is still a chance for download, but again, in 10min that dl link can be shared...

**Buzz** · #4 September 24th, 2007, 12:47 AM

www.withinweb.com checkout PayPalIPNMonitor. Sounds like exactly what you need.

FrEaKmAn · #5 September 24th, 2007, 01:11 AM

hm, too bad my neither countries that I will support don't have paypal support, but it's not so important... I just need your advice, how would you solve this? how would you restrict downloads? how would you build this? no need to post me links to other sites or scripts, I just need a part of your ideas and suggestions...

**Buzz** · #6 September 24th, 2007, 02:42 AM

Each password is given a session field in the database and a time stamp. The password associated with the link times out after the time stamp.

Truth is.. you'll never get around the person that wants to send the link out with a password and username. Ever. All you can do is limit the time it's exposed.

FrEaKmAn · #7 September 24th, 2007, 04:18 PM

possible, what if I limit download time to 15minutes and log downloads, so in case there are multiple downloads for each songs, then I get report...