I am not sure exactly where to post this, sorry if this is in the wrong section.
Anyways, here goes.
I have developed a website where I want users to be able to securely login, and view content specific to them. This content can be like text-based messages, MS Word files, PDF files etc.
Now my site is arranged as a bunch of folders, with an index.htm file in each. Login is done using a php script. After a successful login, user is sent to an 'index.php' page.
Firstly, I don't know where to place the secure content, or if I put it in a folder how to lock access to it. Obviously I don't want anyone to use a browser to just get to this folder and download whatever they like.
Secondly, for each user how do I maintain a separate database - which contains the information about documents specific to that user. Surely, mysql cannot handle files in its db capabalities?
Hope this was clear enough.