Securing and Accessing XML Files

From: crjunk (crjunk_at_discussions.microsoft.com)
Date: 12/20/04 

Date: Mon, 20 Dec 2004 06:35:03 -0800

I’m not very experienced with security on a web server, so what I’m asking
might be really stupid.

I have an application that is creating XML files in the C:\temp folder on
our DMZ. I want to create an aspx page that will pull a user’s XML file from
the C:\temp folder and populate a Crystal Report. The data in the XML file
is somewhat sensitive, so I don’t want the whole world to see it. The aspx
page will verify that the user is who they say they are by connecting to the
SQL Sever and verifying their user name and password in my user table. A
routine will run periodically everyday and delete any XML files that are over
1 day old.

1. Will I be able to pull information from the C:\temp folder from my web
form, if it is located in another directory?

2. Is there a big security risk involved with storing the data as an XML
file in the C:\temp folder?

Thanks!
crjunk

Relevant Pages

  • Re: Protecting directories and files.
    ... Let the application access only C:\MyApp folder and subfolders ... Protect the content of the files from other users ... Problem 2 can be solved using Windows security by giving access to the files ... the XML files my application reads and writes are in clear text; ...
    (microsoft.public.dotnet.security)
  • Re: Default file locations/behaviour
    ... needs to script writing the XML files to local storage. ... Per the above FMP defaults ... usually default to the users desktop or documents folder. ...
    (comp.databases.filemaker)
  • Re: Automate a task for an FTP Site
    ... I have a folder on my computer with X amount of XML files ... I need to create one folder on the FTP site for each one of the XML ... the CLI I use provides transparent FTP support ...
    (microsoft.public.scripting.vbscript)
  • Re: Does SP2 need them?
    ... Delete them to the Recycle Bin for a few days. ... .XML files 'can' be hard to ... > Please don't confuse this folder with the one where Temporary Internet ...
    (microsoft.public.windowsxp.general)
  • Re: multiple xml imports from local path
    ... Using Dirin a loop like that is a long-established standard way of ... You should see the name of one of the XML files in the folder. ... >> Dim strfile As String ...
    (microsoft.public.access.externaldata)