i am trying to implement a user system (PHP) where every user has a unique files folder,
the user can upload any files to that folder and download it later.
current restriction are: string of ‘htaccess’ inside file names is replaced with ‘hhtaccesss’.
no sub folders are created.
my question: is there any way (.htaccess or other) to make those files for download purpose only? in order to ensure that none of those unknown files will be run on the system?
sub question is there any danger zip/unzip those files?
example: if the user types a direct url to a .php file, the system will not process the file(which can be harmful) and instead just ‘deliver’ it to the user?
same for all types of scripts/files..
in .htaccess in the appropriate directory add
should force the browser to download any file no matter the type. can use
<FilesMatch ..if you want to leave some intact.