disabling users from downloading certain files!

[petebak]

hi all......
I am using a web protal that uses .tpl files for the skin, I have been able to disable directory browsing but this does not prevent users to downlaod the .tpl files as their names are uniqe, so it's easy to create a hyperlink to them and grab them all.
anyone know how to do get this accomplished!?

Thanks

[B&T]

Easy to stop http access to any file or type of file.
http://prettyworthless.com/tips.php?tip=block_traffic#tip

Example (put in your in your htaccess file):
<files file.ext>
order deny,allow
deny from all
</files>

[BerksWebGuy]

You can take certain measures to make it 'not so easy'. But basically, if its online, its public property.

[petebak]

B&T, thank you so much, works great!

[B&T]

B&T, thank you so much, works great!
Glad it does what you want. You can use this technique to block any file (or whole directory if you change the tag) from http access. This is good to do with all included files, skins, data files, and anything else that does not get directly addressed by the browser.

Then if you also chmod them to 600 they cannot be viewed by other customers on your same server. When on a shared server, if the file is not chmod 600 it can be viewed by other customers on that same server.