I am planing to bulid www portal in PHP, where many pictures will be stored. I decide to store pictures in directories at the server(not DB) for performence reason. Some pictures will be accessible for all users from internet, and some (if user set them private) not according to session id. What is the best solution of this problem? Perforance is important. Shoud I use some mod_rewrite or move private files to other directory than public?
John
分享 There are two options:
Store the pictures in some publicly accessible folder of your site root, name the files such that the filename cannot be guessed (randomly generated and non-sequential), and make sure directory indexing is turned off. Only serve links to images that a user is authorized to see. Provided they don't share the links to their private photos, it will be very hard for people to accidentally (or intentionally) stumble across private photos.
Store the pictures outside of your site root, and serve them via a script which authenticates against the session. There are examples of how to read an image into memory and output it to the browser on the imagejpeg page of PHP.net
分享
