我怎样才能显示在我的PHP应用程序的Web根目录以外的图像? [英] How can i show the images outside the web root directory in my php application?
问题描述
我使用PHP Web应用程序的Apache服务器,Linux操作系统。对于某些安全原因,我保留网站根目录外的文件和图像。我该怎么让这些图片,当用户登录。
I have web application in PHP using apache server, linux. For some security reason i am keeping the documents and images outside web root. How can i show these images, when the user login.
推荐答案
PHP在默认情况下已经可以访问文件的Web根目录之外,除非有一个的open_basedir
指令限制(或安全模式,而是希望你在笼子里不是)。
PHP by default can already access files outside the web root, unless restricted with an open_basedir
directive (or safe mode, but hope you're not in that cage).
这通常是一个很好的做法,一个虚拟主机配置中的的open_basedir
限制中插入。您可以指定由分隔的多个目录:在Linux和
;在Windows上
It's normally a good practice to insert within a VirtualHost configuration an open_basedir
restriction. You can specify multiple directories separated by :
on Linux and ;
on windows.
php_admin_value open_basedir /var/www/s/stage:/usr/share/php:/your/dir
要访问这些文件,或者使用绝对路径或相对于所谓的PHP文件的位置的路径。 (所以你必须 ../
来达到上述级别)。
To access those files either use an absolute path or a path relative to the position of the PHP file called. (So you'll have to ../
to reach levels above).
另外要确保目录要在其中写入分配给网络服务器和用户有写权限。
Also be sure that directories in which you want to write to are assigned to the webserver user and have write permission.
,否则你有第二个选项:
在你的www目录,创建image.php的文件,具有相似的内容:
Inside your www directory, create a "image.php" file, with a similar content to:
<?php
header('Content-Type: image/png');
readfile("../img/" . $_GET['img']);
?>
和与打电话给你的图片
<img src="image.php?img=myimage.png" />
请注意,你的PHP文件不应该是如此简单:)至于你可能要应对多种图像格式(并为他们提供正确的标题),检查恶意文件路径/夹杂物(你不想使用$ _GET而无需验证/消毒输入),额外的缓存等等,等等等等。
Please be aware that your PHP file shouldn't be that simple :) As you may want to address multiple image formats (and providing the correct header for them), checking for malicious file path/inclusions (you don't want to use $_GET without validating/sanitizing the input), extra caching etc. etc. etc.
但是,这应该给你你如何能针对您的问题的想法。
But this should give you an idea on how you can target your issue.
这篇关于我怎样才能显示在我的PHP应用程序的Web根目录以外的图像?的文章就介绍到这了,希望我们推荐的答案对大家有所帮助,也希望大家多多支持IT屋!