Placing files above the index file

  • tastysite
  • Proficient
  • Proficient
  • User avatar
  • Joined: Apr 09, 2008
  • Posts: 349
  • Loc: Brighouse, West Yorkshire, England
  • Status: Offline

Post February 10th, 2009, 4:29 am

HI I want to place the assets,css,marsters,new and include files above my index page so people can not view them.
How do you reference them in that state?
^__^
  • Anonymous
  • Bot
  • No Avatar
  • Joined: 25 Feb 2008
  • Posts: ?
  • Loc: Ozzuland
  • Status: Online

Post February 10th, 2009, 4:29 am

  • joebert
  • Sledgehammer
  • Genius
  • No Avatar
  • Joined: Feb 10, 2004
  • Posts: 13455
  • Loc: Florida
  • Status: Offline

Post February 10th, 2009, 12:46 pm

You don't, they're inaccessible.
Strong with this one, the sudo is.
  • tastysite
  • Proficient
  • Proficient
  • User avatar
  • Joined: Apr 09, 2008
  • Posts: 349
  • Loc: Brighouse, West Yorkshire, England
  • Status: Offline

Post February 11th, 2009, 10:18 am

O tar I just thought because I know you can do it with javascript...
How do you stop people been able to access them then I know sites that even if you know the url of say a pictore and type it in you still can not access it.
^__^
  • joebert
  • Sledgehammer
  • Genius
  • No Avatar
  • Joined: Feb 10, 2004
  • Posts: 13455
  • Loc: Florida
  • Status: Offline

Post February 11th, 2009, 1:45 pm

I don't mean to sound rude, but just because you haven't figured out how to access them doesn't mean they're inaccessible. :)

Usually there's some sort of HTTP referer check being done and since typing the URL sends no referer unless you use something like wget or cURL, it chokes.

There's things that "look" like they work, but for every method, there's a few thousand people at the very least that will show someone how to bypass that method for little or nothing.

You will ALWAYS put more effort into restricting access to public documents than will be used to access them in an unwanted way.
Strong with this one, the sudo is.
  • spork
  • Brewmaster
  • Silver Member
  • User avatar
  • Joined: Sep 22, 2003
  • Posts: 6130
  • Loc: Seattle, WA
  • Status: Offline

Post February 11th, 2009, 11:46 pm

Never rely on "security by obscurity."
The Beer Monocle. Classy.

Post Information

  • Total Posts in this topic: 5 posts
  • Users browsing this forum: No registered users and 188 guests
  • You cannot post new topics in this forum
  • You cannot reply to topics in this forum
  • You cannot edit your posts in this forum
  • You cannot delete your posts in this forum
  • You cannot post attachments in this forum
 
cron
 

© 2011 Unmelted, LLC. Ozzu® is a registered trademark of Unmelted, LLC.