Re: Securing URL in File Download in ASP.net

On Nov 14, 5:22 am, anoop <an...@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:
Hello,
There is a website in ASP.Net in which there is a File download
option with URL

English/Scripts/download.aspx?file=.... . Here the code substitutes the URL
of the file to download. but If I substitute the URL of the file that is
stored on the web server, then file such as aspx.vb or even web.config can be
downloaded by any user. Now I want to know how to protect this "file"
parameter in ASP.Net, so that only intended files can be downloaded.

Thank you

Put files for download to a special folder (e.g. /download) and check
if requested file is located in that folder (avoid requests to other
folders)
.

Relevant Pages

  • Re: IE6 overwrites anything I try to type in to the address bar
    ... install of WinXP with all of the updates/hot fixes installed before anything ... download a copy of LSPFIX from any of the following sites: ... > enable you to regain your connection. ... > folder after appropriate unzipping, ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: IE6 and "TV Media"
    ... TV Media is still somewhere on your system, and may not be detected by ... Download, install, immediately update the definitions, and then run AdAware ... get a copy of WinsockFix Utility ... and download HiJackThis to the new folder. ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: Paradox Community String Library : Readme.txt
    ... There is a decent main form in the download to showcase what is included. ... Robert Wiltshire ... I would copy the entire download into its own folder. ... This is a developers tool that I created for people who write code. ...
    (comp.databases.paradox)
  • Re: OE6 newsgroup reader problem...
    ... OE6 newsgroup is 90 days. ... to a user created local folder? ... at a time", that is, to download all the headers again. ... being monitored by the .dbx itself. ...
    (microsoft.public.windows.inetexplorer.ie6_outlookexpress)
  • Re: cannot search on address bar
    ... A Single Letter May Be Displayed in the Title Bar ... To Restore Address Search Functions ... Download the fix - Reset Search: ... HOLD, download the programs to that folder, then burn that folder to a CD. ...
    (microsoft.public.windows.inetexplorer.ie6.browser)