Home/ Questions/Q 6627849
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-25T22:03:44+00:00

I will have clients upload pdf files with sensitive information. I’m planning on having

  • 0

I will have clients upload pdf files with sensitive information. I’m planning on having the directory outside public_html. When a client want to download his/her file they will get a php link that will authenticate them. Is more I can do to protect such files?

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team
    • Place the files outside docroot,
    • make the temporary links (www.oink.com/abd73df10e92/whatever.pdf) expire,
    • never direct link the files, use a php wrapper to readfile out the contents
    • never use the stored filename,
    • make sure the files have the least permissions
    • if the files are really sensitive, provide them over only HTTPS
    • 0