网站安全[关闭]

I'm creating a website which some information strictly for member only. I'm thinking:

1. Store information into database such as mySQL, if the information is too big, like the books, is it good choice?

(I would like to store e-books for different member reading. Does mySQL can store each book in each cell? If so is it good choice? )

1. Create files in different directory, however some one still can access those files if they know the path?

Any suggestion?

I'm not sure why you would think the information is too big..

However, if you are talking about serving files then typically you don't provide direct access to them. Instead you would have something like getfile.php?id=x

The getfile page would be responsible for testing that the user is indeed logged and has rights to that file. If so then it would stream the file back to the browser.

If not it would redirect them to a login page, or something else that's suitable.