
August 6th, 2002, 04:19 AM
|
|
Slacker
|
|
Join Date: Feb 2001
Location: Sweden
Posts: 76
Time spent in forums: < 1 sec
Reputation Power: 13
|
|
|
how I would solve this
I don't know if this is the magic bullet everyone use to solve your problem, but if I would need to solve this problem for myself I would put the files outside the filestructure that is accessible over the web:
c:\wwwroot - your webcontent (shared through browser)
c:\ftproot - your FTP (shared through FTP)
d:\files - your "secret" files (not accessible over the internet)
Then you use your favourite script language like php, python, jsp, perl, CobolScript or whatever. I think even asp can handle this.  And use this to create the file access and validate user precedure. Since these scripts are executed locally, they can access the catalog d:\files but no external progam can get to that directory.
This makes it impossible to access your files without going through your validation... Well, except actually hacking the server of course.
Simple and secure...
/Fjodor
Last edited by Fjodor : August 6th, 2002 at 04:32 AM.
|