Re: Software Product Download and FTP

From: Terry J Dunlap Jr (terrydunlap@netzero.net)
Date: 02/22/02 

From: "Terry J Dunlap Jr" <terrydunlap@netzero.net>
To: "Mike Carney" <mcar@haestad.com>, <security-basics@securityfocus.com>
Date: Fri, 22 Feb 2002 14:08:42 -0500

Mike,

Have you looked into possibly writing a Perl script in the cgi-bin directory
that would use something like secure copy (scp) (component of SSH) to
connect to the FTP server?

I've used OpenSSH on my system, and I've used Perl scripts in cgi-bin, but
I've never combined the two.

Just a thought.

Terry Dunlap

----- Original Message -----
From: "Mike Carney" <mcar@haestad.com>
To: <security-basics@securityfocus.com>
Sent: Wednesday, February 20, 2002 3:01 PM
Subject: Software Product Download and FTP

Hello All,

Thank you in advance for those who reply.

We are currently looking at a way to protect the download of our products on
an ftp server. What we need to accomplish is:

Use an FTP server
Password protect the directories
Handoff a Web user from our website and log them into the proper directory
on our ftp server

The reason for this is we are now going to offer 'full' versions of our
products for download after they are purchased via our online store. The
problem that we are encountering is that we only want those people who go
from leave the purchase portion of the site to be able to download the
programs.

We can't allow people to be able to just browse the ftp server and download
the files that they want. If anyone has gone through this or may have some
suggestions or links for a scenario like this it would be great if you could
send them along.

Thanks!!

Mike

Relevant Pages

  • Re: Downloads Fail With IIS 6.0
    ... isn't very secure. ... we would have to rewrite many pages of our web ... > would recommend to set up a FTP server and put that file on it. ... >> appear to download, and show the correct number of pages, but have all blank ...
    (microsoft.public.inetserver.iis)
  • RE: question using FtpGetFile
    ... wininet.lib to the list of libraries that your project is linking. ... That should resolve you compile errors, however GetFile is not going to ... The GetFile example is only for downloading a file from an FTP server. ... order to download a file from a web server you will need to use the WinInet ...
    (microsoft.public.windowsce.embedded.vc)
  • Re: clientless windowsbased sftp / ssh server?
    ... > maybe run a secure http webserver instead of ftp server since ie6 ... > webserver then I think I can only download from it, ... No, you can upload too. ...
    (comp.security.ssh)
  • Re: [SLE] I need your help please
    ... Taylor, Phillip wrote: ... Does the ftp server come with This ... Failing that, download the packages ...
    (SuSE)
  • Re: Scheduling of tasks/whats the maximum frequency of the task being executed?
    ... At command also does not allow for such frequent schedule. ... I'm assuming the FTP server is yours. ... Write a perl script to do the get & put. ...
    (RedHat)