What is the best method to hide a file on a server?

问题:

I am going to make an image hosting system in PHP. I wondered how I should hide my images from users so they can only be accessed through a special url.

I need to discuss all techniques that include htaccess.

回答1:

i would prefer that instead of having a PHP process send the file and hog server resources for long while its sending the content.. create a script which copies the file over to a directory with a random name and then just send that file to the user and have another script clear out that directory after set intervals .. if creation time older than 30 mins .. delete .. that way u minimize u just need an apache process to send back the file instead of apache + php process.

回答2:

Put the files outside of the relative root and use a script like showimage.php to grab the file from outside of the webroot and stream it down to the user. The code would look something like:

$len = filesize($filename); header("Content-type: image/jpeg"); header("Content-Length: $len"); header("Content-Disposition: inline; filename=\"$new_filename\""); readfile($filename); 

Additionally, since you're running a script, you can do authentication/authorization in the script. This allows you to set up a modRewrite rule such as:

RewriteRule ^images/(.*)$   /showimage.php?file=$1 

so that your image files could be rendred as:

www.domain.com/images/somefile.jpg 

instead of:

www.domain.come/showimage.php?file=somefile.jpg 

回答3:

You write a little php script that reads the image file and sends the contents to the client. The PHP script can check its parameters and cookies and the image is saved somewhere outside the document root.

回答4:

Just don't store your images in the web root. Use a php file to manage access. When you want to show a file, do something like:

<?php header('Content-type: image/jpeg'); $f = file_get_contents('path/to/image.jpg'); print $f; ?> 

回答5:

Put them in a directory one-up from your document root. Then, use an .htaccess file to grab them:

RewriteBase / RewriteRule ^(.+?)\.jpg$ ../imgs/$1.jpg 

回答6:

I think the best method would be to encrypt it.

文章来源: What is the best method to hide a file on a server?