I develop website where users can upload doc , pdf and text files . They also can see files list and delete files. Problem is in this files have personal data . Can i protect somhow this files ? I Want administrators and moderators to see this files but also i want to protect from random downlad from other peoples. I hope i explain well .
Share
Put them somewhere outside of the webroot, only accessible via your system. Whenever someone tries to access it, check his permissions and if they’re okay, serve the file.