.htaccess拒绝除了允许javascript访问以外的所有内容

Question

I currently am blocking all access to one directory in on my server using .htacces

deny from all

I use php for all my coding, except at one point I use javascript to play mp3s from my secured directory. But this is blocked by the .htaccess

Is there anyway to allow the javascript access to the directory but still block people from typing in the url and gaining access to the files.

Sorry, I'm new to .htaccess and can't figure it out.

Thanks.

Answer 1

No, JavaScript is client side; thus, if it can access the files, the client can too.

Considering moving the files into a non-public directory, perhaps even outside of webroot, and then reading them & sending them to the client using a script. This can be easily accomplished with PHP.