Security and Cryptography
 
Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
User Name:
Password:
Remember me

The Shed is going Social! Join us on FaceBook and Twitter and chime in on the conversation.

Go Back   Dev Shed ForumsSystem AdministrationSecurity and Cryptography

Reply
Add This Thread To:
  Del.icio.us   Digg   Google   Spurl   Blink   Furl   Simpy   Y! MyWeb 
Thread Tools Search this Thread Rate Thread Display Modes
 
Unread Dev Shed Forums Sponsor:
  #1  
Old August 6th, 2002, 02:39 AM
iwarner iwarner is offline
BrainFreeze
Dev Shed Newbie (0 - 499 posts)
 
Join Date: May 2000
Location: London
Posts: 318 iwarner User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 3 h 41 m 9 sec
Reputation Power: 13
Send a message via ICQ to iwarner Send a message via Yahoo to iwarner
Download problem

I have a load of zip files downloads at a certain web address.

i.e. http://www.yourdomain.com/download/...ad2/zipfile.zip

The files are available for download only if people sign up. However if they enter the address correctly then they can directly download the files without having to sign up. I do not allow directory browsing.

Using Win 2k adv server and iis 5.

what is the best way to stop people directly downloading, they have to be signed up first.
__________________
_________________________
Triangle Solutions Ltd
http://www.triangle-solutions.com/

Reply With Quote
  #2  
Old August 6th, 2002, 04:19 AM
Fjodor Fjodor is offline
Slacker
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Feb 2001
Location: Sweden
Posts: 76 Fjodor User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 13
how I would solve this

I don't know if this is the magic bullet everyone use to solve your problem, but if I would need to solve this problem for myself I would put the files outside the filestructure that is accessible over the web:

c:\wwwroot - your webcontent (shared through browser)
c:\ftproot - your FTP (shared through FTP)
d:\files - your "secret" files (not accessible over the internet)

Then you use your favourite script language like php, python, jsp, perl, CobolScript or whatever. I think even asp can handle this. And use this to create the file access and validate user precedure. Since these scripts are executed locally, they can access the catalog d:\files but no external progam can get to that directory.
This makes it impossible to access your files without going through your validation... Well, except actually hacking the server of course.

Simple and secure...

/Fjodor

Last edited by Fjodor : August 6th, 2002 at 04:32 AM.

Reply With Quote
  #3  
Old August 6th, 2002, 04:26 AM
iwarner iwarner is offline
BrainFreeze
Dev Shed Newbie (0 - 499 posts)
 
Join Date: May 2000
Location: London
Posts: 318 iwarner User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 3 h 41 m 9 sec
Reputation Power: 13
Send a message via ICQ to iwarner Send a message via Yahoo to iwarner
Very Simple and very secure - now why didnt i think of that?

Thank you for all your help

Reply With Quote
  #4  
Old August 6th, 2002, 04:30 AM
Fjodor Fjodor is offline
Slacker
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Feb 2001
Location: Sweden
Posts: 76 Fjodor User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 13
You're welcome.

The simple things are the first to escape when trying to solve a problem.

/Fjodor

Reply With Quote
Reply

Viewing: Dev Shed ForumsSystem AdministrationSecurity and Cryptography > Download problem

Developer Shed Advertisers and Affiliates



Thread Tools  Search this Thread 
Search this Thread:

Advanced Search
Display Modes  Rate This Thread 
Rate This Thread:


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
View Your Warnings | New Posts | Latest News | Latest Threads | Shoutbox
Forum Jump

Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
  
 


Powered by: vBulletin Version 3.0.5
Copyright ©2000 - 2013, Jelsoft Enterprises Ltd.

© 2003-2013 by Developer Shed. All rights reserved. DS Cluster - Follow our Sitemap