.htaccess files are not my strong point.
I have document uploads going to /uploads. The user should be able to view the documents they’ve just uploaded by clicking on the document link that appears via ajax after uploading is completed.
However, I would like to be able to password protect the /uploads folder BUT still enable the current user to view the clicked document without having a password request appear.
Is this possible to do in .htaccess?
Thanks for any suggestions.
I don’t think this is possible in .htaccess – since .htaccess has no way of knowing which user uploaded which files. Even if it did (e.g. by putting files in
uploads/username/), I don’t think .htaccess files are the way to go. I think you’ll probably want to enforce this at the application level.