how to prevent direct file access

Client Joined: Jan 21, 2006 Posts: 87 Location: Arizona

Ok, guys. First of all thanks for all the help....

I'm trying to add scripts to my site that are not php-nuke scripts.

So if its not a module file, nuke file,or block file then how do i prevent direct access.

I want the only access to the file to come from a link from inside my nuke site. This way I can use the nuke registration process to filter access.

Posted: Sat Jul 08, 2006 2:17 pm

try .htaccess

inside should be:
deny from all

This should stop DIRECT browser access but your site will be able to run the script.

Posted: Sat Jul 08, 2006 3:50 pm

ok, I tried that, but then I get a 404 error - You don't have permission to access index.php on this server.

This happens when I run a link out of phpnuke.

maybe I'm tackling this situation wrong.

Posted: Sat Jul 08, 2006 3:52 pm

The htaccess directive needs to be placed in a htaccess inside the same directory as the file you are trying to protect.
Is this what you did?

Posted: Sat Jul 08, 2006 3:59 pm

yes......
the htaccess file is located at: www.azusamti.com/moodle/htaccess

try this...
Link from the site
http://www.azusamti.com/modules.php?name=NukeWrap&page=moodle

This is the direct link
http://www.azusamti.com/moodle/index.php

Posted: Sat Jul 08, 2006 8:48 pm

I think this is because of the use of an iframe, in iframes its still direct access from the users browser.

sorry I did not think of this earlier. I will look further into this.

Update: because of it being the same as opening 2 browsers to display one page, we have that problem. To answer your question, why not include the is_user function in nuke?

I believe including the mainfile.php may just give you what you need'

Then code this in there after the include

if is_user($user){
code
}else{
die("This module is not active for none members");
}

This will stop them from accessing it directly, If they are not a user but it will not stop a user from acessing it directly, perhaps and include is in order, if possible, Imma test a theory and get back to you.

If this is a FULL script(with more then on file) then include wont work either, but if not, include should work just fine.