Yii2 access to files only to authorised users

Question

I have a "files" folder in Web, where I am saving all the user's files.

http://localhost/myweb/files/ we can see all the images inside that folder.

So, I have question:

How to grant access to this folder only for authorised users? Thanks!

hum.... why users can see an image folder? – Sfili_81 Mar 22 '18 at 10:37 — Sfili_81, Mar 22 '18 at 10:37
htacces file , search info about that – eborrallo Mar 22 '18 at 12:11 — eborrallo, Mar 22 '18 at 12:11
not sure if this has anything to do with `Yii`. – Muhammad Omer Aslam Mar 22 '18 at 21:46 — Muhammad Omer Aslam, Mar 22 '18 at 21:46

score 0 · Accepted Answer · answered Mar 23 '18 at 14:24

The best way to solve this is to store the images outside of the web accessible folder and serve them with php. For downloadable files you can use this function, but to serve images in the browser I believe you would have to change the headers like in this non-yii answer or this yii-related answer.

Yii2 access to files only to authorised users

1 Answers1