Can I use $_SESSION to limit access to directories?

From: deko (deko_at_hotmail.com)
Date: 03/12/05


Date: Sat, 12 Mar 2005 19:59:23 GMT

I have a login script that creates a SESSION for authenticated users. But
authenticated users still need access to particular directories (which
contain files for download). My hosting provider lets me protect
directories with htaccess, but this means an already authenticated user must
enter credentials a second time in the pop up dialog that appears in the
browser window when attempting to download something from an
htaccess-protected directory. AFAIK, there is no way to pass credentials to
htaccess. How do I protect an authenticated user's files and/or
directories? Is there an alternative to htaccess?

Thanks in advance.



Relevant Pages

  • Re: Authenticate user and allow anonymous access
    ... anonymous and authenticated users in without using two virtual directories ... But all anonymous users would use the same credentials so they ... but I have had a lot of success with changing the browsers user credentials ... >> This would be a domain account but a restriced domain account with out ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Authenticate user and allow anonymous access
    ... This wold ... > Joe Geretz ... credentials to never be passed on to the application. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • File Download Times Out On Slow Connections
    ... I wrote a newbee ASPX application which allows authenticated users to ... tend to have the download interrupted after about 8-10 minutes. ... Are there any session time out parameters I've forgotten to set? ...
    (microsoft.public.dotnet.framework.aspnet)
  • Implementing Log Off button on the Portal
    ... We have a portal for one of our clients and the clients have ... their users credentials in Active Directory. ... Annonymous Access is disabled for this portal as only authenticated users ...
    (microsoft.public.sharepoint.portalserver.development)
  • Re: SPS & WSS Sites Prompting for User/Password
    ... In article, James M. Parker wrote: ... WSS doesn't do well with NT Integrated Security. ... setting the client browser to pass the current credentials. ...
    (microsoft.public.sharepoint.portalserver)