03-21-2018, 06:36 PM
Thanks Brandin and sorry for the delay in responding - the email was in the spam folder and I've only just seen it. Your reply confirms what I suspected. Your hash suggestion is something that I already use in some areas of the site so I could extend its use. The Excel files are read/search/displayed using the PHPExcel class. My concern is that if the url of the data folder is revealed then the data is directly accessible and can be downloaded. Hashing the path and accessing the files via a single interface would be a solution.
I don't understand what you mean by HTTP Authentication but I'll research it and see if that provides a solution
Regards
Nello
I don't understand what you mean by HTTP Authentication but I'll research it and see if that provides a solution
Regards
Nello