PHP & .htaccess

[Moonark]

I have a simple PHP application that can read files from a directory as well as search for files in the parent and sub directories. The script works great until I place the following .htaccess file in my directory.

AuthType Digest
AuthName "TEST"
AuthDigestDomain /
AuthDigestFile C:/TestSec/.digest
Require valid-user

PHP files can no longer search other sub directories. Any thoughts on why a .htaccess file with digest authentication would stop PHP files from working correctly, basic authentication works fine.

Basically I try to pull a file such as (test is used to hide actual data):

http://www.test.com/test/index.php?dir=&file=test.pdf

I am running Apache 2.0.50 and PHP 5.0.1 for Windows

 

[Deleted member 139972]

I'm not sure what the htaccess file would do to your script, but technically it shouldn't alter PHP. Maybe the operating system is protecting files using the htaccess file? Does the PHP process have permission to read the file in that folder? In windows it's I_USR(NAMEOFYOURMACHINE). What OS are you running? Can you post a snippet of your PHP code that is causing the problem? What PHP version are you running? Extensions running, etc...

Also, little security note. You should make sure that users cannot hack your URL and say somthing like:

http://www.test.com/test/index.php?dir=../../Windows/system32&file=net+shutdown