Search found 6 matches

by vd
Fri Oct 21, 2005 10:09 am
Forum: PHP - Theory and Design
Topic: Access rights with groups
Replies: 8
Views: 3141

I would like to create a very flexible permission system. The grant of permissions should work as dynamic as possible. So it should be enough if I grant permissions only to the group and everybody who is a member of this group will inherit her permissions. If a specific person should have more right...
by vd
Thu Oct 20, 2005 3:07 am
Forum: PHP - Theory and Design
Topic: Access rights with groups
Replies: 8
Views: 3141

thank you very much for your suggestions! deltawing you got it. As I understood you right there is no other solution than writing restrictions for ordinary users. In my case, all the groups have the same access rights. I think, I have to write a logic which detects if a user is part of only one grou...
by vd
Wed Oct 19, 2005 9:19 am
Forum: PHP - Theory and Design
Topic: Access rights with groups
Replies: 8
Views: 3141

Access rights with groups

Hello, I'm currently working on an idea to handle access rights. At the moment I have created a system which gives you the possibility to create users and groups. A user can be a member of unlimited groups. I would like to add access rights to the groups only. My problem is: You link a user to a gro...
by vd
Thu Sep 01, 2005 7:48 am
Forum: PHP - Theory and Design
Topic: Securing Photos on Website
Replies: 5
Views: 2407

Which way would you suggest? or is there an even better way? I would post the ID and then check for the rest in the db. If you post the filename it can be overwritten to something else. With the ID you have only to check if the person is allowed to open this special file. I got some good examples o...
by vd
Tue Aug 30, 2005 7:22 am
Forum: PHP - Theory and Design
Topic: Securing Photos on Website
Replies: 5
Views: 2407

put your images outside of the document root. save the file name in a datebase (together with the permissions) put following example into "getfile.php" // ... here should stay your code to translate the posted image id into the internal file name if (file_exists($_file_name)) { header(&quo...
by vd
Tue Aug 30, 2005 5:06 am
Forum: PHP - Theory and Design
Topic: Database image storage versus disk based storage
Replies: 12
Views: 4952

storing your images in the database will cause problems uploading a dump e.g with phpMyAdmin, when "upload_max_filesize" and "post_max_size" were set to a lower value than the total filesize.