php loading/displaying a image

Question

I am hoping someone can help me, I am wanting to load/display a image on a page using php. But I want disable the images folder from been accessed from the web.

so e.g if I go to /image.php/test.jpg I want it to go get that image from the image folder and show it on screen using the image.php file, but I don't want it to be viewable like this http://website.com/images/test.jpg (i dont need help with the link code or anything, just the code needed instead of the html img tag) at the moment I am putting the img tage into a varible then returning it out of the function, but I don't think that will work this will work when I close up the image folder.

I am using iis8, I know how to disable the access using request filtering and setting the folder in url deny, just cant get the images or css file to load when I do that, unless theres a better/easier way to do it using iis so only php could call the files but guests cant using my existing

Many thanks all, Michael.

Are you displaying other content on the page or just the one image? — David Jones
– David Jones, Commented Nov 3, 2014 at 14:48
So image.php is entirely responsible for outputting image data? Then use the url to the file as the src attribute: <img src="image.php/test.jpg"/> As to how you lock down the images folder, the easiest thing is to place it outside the webroot — Steve
– Steve, Commented Nov 3, 2014 at 14:51
See this post, you can know how to protect your images being accessed.stackoverflow.com/questions/2416736 — Cherry
– Cherry, Commented Nov 3, 2014 at 14:57
possible duplicate of How to password protect files (images, video, zip) dynamically from public and allow access to members only? — Scott Saunders
– Scott Saunders, Commented Nov 3, 2014 at 14:58

I wrestled a bear once. · Accepted Answer · 2014-11-03 14:58:30Z

1

You could use something like this in your .htaccess file (assuming your images are located in /images):

RewriteEngine On
RewriteBase /images/
RewriteRule ^(.+?\.jpg)$ index.php?p=$1 [L,QSA,NC]

Then create an index.php in your images folder and put the logic in there to serve the image.

<?php
if($_SERVER['HTTP_REFERER'] === "mywebsite.com"){
header("Content-type: image/jpeg");
readfile($_GET['p']);
}

Or if you simply want to disable indexing, Google is full of helpful info.

edited Nov 3, 2014 at 14:58

answered Nov 3, 2014 at 14:52

I wrestled a bear once.

23.5k20 gold badges74 silver badges122 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

Funk Forty Niner Over a year ago

(.+?\.pdf) shouldn't that be a jpg file?

motanelu · Accepted Answer · 2014-11-03 15:00:51Z

0

Add a .htaccess file in your images folder (AllowOverride must be set to true) with the following content:

order deny,allow
deny from all

then create your image.php

$img = $_GET['img'];

$file = 'images' . DIRECTORY_SEPARATOR . $img;
header('Content-Type: image/jpeg');

readfile($file);

and your html should look like:

<img src="image.php?img=rick-rolled.jpg">

edited Nov 3, 2014 at 15:00

answered Nov 3, 2014 at 14:51

motanelu

4,0251 gold badge16 silver badges21 bronze badges

9 Comments

Mark Setchell Over a year ago

To the down-voter: It would be courteous to explain your downvote so that everybody learns something.

Funk Forty Niner Over a year ago

I did not downvote and Mark is right. However, I think the downvote was because of $img = $_GET['img']; that should be $img = $_GET['file']; since calling it with image.php?file or $img = $_GET['img']; with image.php?img

I wrestled a bear once. Over a year ago

if you're not worried about hotlinking and you only want to disable indexing, there is no need to get PHP involved.

Funk Forty Niner Over a year ago

@Adelphia You know, I could have easily also downvoted your answer with the error you made, but I didn't. I made a comment about the .pdf. You could have done the same and have said something. There's a lesson here (wink) we're here to help each other, not compete.

I wrestled a bear once. Over a year ago

Fred, Montanelu, Sorry for the delay in explaining my downvote. It was only because I noticed Fred's comment on my answer and wantedd to fix my own error first. I have removed my downvote.

|

Collectives™ on Stack Overflow

php loading/displaying a image

2 Answers 2

1 Comment

9 Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

1 Comment

9 Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related