Im working with scriptcase,php code generator (hope anyone knows it) inwhich i create projects based on the pre-build forms of Scriptcase. Each application has it's own folder. Now.. When i try to access the menu.php file directly from the url bar (ex: http://192.168.1.111...r/menu/menu.php ), it shows me a message "unauthorised user" since i haven't logged in. But when i try to access in the same way another file of the same project, i can open it right away! No login required! What i want is to protect all of my files, so outsides won't be able to access them without preregistration. How can i do it? I tried to deploy each application apart and have them assigned the login app as the initial app, in the deploy process..but no luck!
What should i do??
Looking forward to a response.. All the best
5 Replies - 275 Views - Last Post: 04 October 2012 - 07:32 AM
#1
Security issue! Make applications unreachable from outside
Posted 04 October 2012 - 06:40 AM
Replies To: Security issue! Make applications unreachable from outside
#2
Re: Security issue! Make applications unreachable from outside
Posted 04 October 2012 - 06:46 AM
What server software are you running?. WAMP/nginx/Lightspeed so on, look at .htaccess
#3
Re: Security issue! Make applications unreachable from outside
Posted 04 October 2012 - 06:51 AM
#4
Re: Security issue! Make applications unreachable from outside
Posted 04 October 2012 - 06:56 AM
The more direct route is require a session to be started when the user logs in.. at the top of each page check for this session - if not present then redirect them to the login page.
#5
Re: Security issue! Make applications unreachable from outside
Posted 04 October 2012 - 07:18 AM
ok,but HOW do i do this?? i can't create a .htaccess file, it won't let me..
is this something to be done on the host sode?!!? or am i totally wrong..?
#6
Re: Security issue! Make applications unreachable from outside
Posted 04 October 2012 - 07:32 AM
It's not an .htaccess file. The could would be at the top of your php file. When the page loads it would check to see if a session has started (and it can only start when the login occurs).
http://php.net/manua...ssion-start.php
http://www.dreaminco...tication-class/
http://php.net/manua...ssion-start.php
http://www.dreaminco...tication-class/
Page 1 of 1
|
|

New Topic/Question
Reply



MultiQuote








|