Re: Securing files for download.
From: Petr PALAS (palas_at_atlas.cz)
Date: 12/12/03
- Next message: Dan Key: "Forms Authentication with Server Farm"
- Previous message: localhost: "RE: Determine Global Group vs User in Local?"
- In reply to: Steve Lloyd: "Securing files for download."
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Fri, 12 Dec 2003 19:10:23 +0100
Hi Steve,
when you set the IIS to process all files using ASPNET_ISAPI.dll as it does
with ASPX files. Then you can check if user is authenticated and authorized
in the following event:
Sub Application_AcquireRequestState(ByVal sender As Object, ByVal e As
EventArgs)
'... your code ....
End Sub
You can find a more detailed description in the documentation of PortSight
Secure Access for .NET (you don't need the component to work this out:
http://www.portsight.com/downloads/SecureAccess/1_1/Standard/Secure%20Access%20Guide.chm
Best Regards,
Petr PALAS, petrp@portsight.com
PortSight - Portals & Components, www.PortSight.com
"Steve Lloyd" <steveRemoveThisNow@livenowpaylater.co.uk> wrote in message
news:OF9mizovDHA.2080@TK2MSFTNGP10.phx.gbl...
> Hi,
>
> I am trying to work out how I can secure files available for download on a
> website.
>
> I have forms authentication set and can deny access to aspx file in a
> directory using the web.config file which redirects to the login page and
> works fine, however, if i have a downloadable in this directory people can
> enter the URI of the file and download it without any login. I understand
> that the web.config approach only secures .Net based resources but would
> like to know if anyone has a solution/work around for this. I have
thought
> about storing the files in SQL which would require an aspx page to
> authenticate to the server, I think this would work but SQL space costs
much
> more than web space ..
>
> The webserver is a shared hosting solution so i do not have acces to the
> windows level accounts.
>
> Would appreciate some direction on this.
>
> Thanks very much
>
> Steve
>
>
- Next message: Dan Key: "Forms Authentication with Server Farm"
- Previous message: localhost: "RE: Determine Global Group vs User in Local?"
- In reply to: Steve Lloyd: "Securing files for download."
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
