How to secure image folder from unauthorize access

Question

0.00/5 (No votes)

See more:

Dear Friends

I am developing a website. I need to put the images to a directory and store the image address to the database.

I want to know that how can I secure my image folder so that No one can see any of the image from that folder.

Posted 28-Mar-11 23:00pm

rashidfarooq

Add a Solution

2 solutions

Solution 1

donot give 777 permission to that folder

Posted 29-Mar-11 3:31am

Raj Bose

Comments

rashidfarooq 29-Mar-11 11:29am

If I do not give 777 permission, How can I Upload images to that directory.

Add a Solution

Add your solution here

Treat my content as plain text, not as HTML

Preview 0

…

Existing Members

Sign in to your account

...or Join us

Download, Vote, Comment, Publish.

Your Email
Password
Forgot your password?

Your Email
This email is in use. Do you need your password?
Optional Password

I have read and agree to the Terms of Service and Privacy Policy
Please subscribe me to the CodeProject newsletters

When answering a question please:

Read the question carefully.
Understand that English isn't everyone's first language so be lenient of bad spelling and grammar.
If a question is poorly phrased then either ask for clarification, ignore it, or edit the question and fix the problem. Insults are not welcome.
Don't tell someone to read the manual. Chances are they have and don't get it. Provide an answer or move on to the next question.

Let's work to help developers, not make them feel stupid.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

Dave Kreskowiak · Accepted Answer · 2011-03-29T03:38:00

Solution 2

If you do that, no one will ever be able to see your images, even your own web pages. The browser has to be able to get at the images somehow, and just by that little requirement, it defeats any security system you have.

You're only possiblity is to have a player running on the client side that can request images from a secured URL and the images are sent over to the client encrypted. The player would then decrypt the images and display them. But, this is a bunch of overhead, and very restrictive to how you can use imagery in your web pages, just so someone can't use your images for their own purposes.

Posted 29-Mar-11 3:38am

Dave Kreskowiak

Comments

rashidfarooq 29-Mar-11 11:24am

Thanks for answering.
So, If I left the images directory as its is, will it be dangerous or risky or not?
Is there any way to make that directory read only.

Dave Kreskowiak 29-Mar-11 13:49pm

I have no idea what your setup is like, nor do I have any idea what you mean by "risky". If you're thinking that someone may overwrite your images, then you just have to make sure the ASP.NET account, or whatever account your site is running under, has only Read permissions to the folder.

rashidfarooq 30-Mar-11 6:11am

Thanks a lot for guiding me.