[SOLVED] How to display Protected Images?

fire · February 25, 2014, 6:24am

Hi R.K. can you please post your solution? I too want to serve images below root…

R.K.:




/**

 	* generates thumb of image

 	* @param string $img - path of image

	*/

	public function actionViewImages($img)

	{


    	$folder = Yii::getPathOfAlias('images_path') . DIRECTORY_SEPARATOR;

    	$path = $folder . $img;


    	$img = Yii::app()->imagemod->load($path);


        	$img->file_new_name_body = md5($img->file_src_name);


    	header('Content-type: ' . $img->file_src_mime);

    	echo $img->process();

	}

also i was using this extension cimagemodifier

wannabe · May 7, 2014, 7:38pm

Hi ,

Doesn’t below simply solve the problem with accessing files outside webroot?

$url = Yii::app()->assetManager->publish(’/any/path/to/image.jpg’);

ahbowers · May 10, 2014, 9:37pm

The problem wasn’t that an image didn’t happen to be under the webroot directory; the problem was keeping the image private. If you use “publish” then the image would end up in the assets directory which is publicly visible. Granted, the assets subdirectories are difficult to guess, but a user can always look at the specific assets directory that was used to download their files and end up seeing other people’s files.

If you want to be really secure about ONLY showing an image to a specific, authorized user, then the ‘readfile’ solution is best. I used this solution on my website which lets a group share images with other group members, but no one else can see them.