#1
  1. No Profile Picture
    BrainFreeze
    Devshed Newbie (0 - 499 posts)

    Join Date
    May 2000
    Location
    London
    Posts
    318
    Rep Power
    14

    Download problem


    I have a load of zip files downloads at a certain web address.

    i.e. http://www.yourdomain.com/download/d...d2/zipfile.zip

    The files are available for download only if people sign up. However if they enter the address correctly then they can directly download the files without having to sign up. I do not allow directory browsing.

    Using Win 2k adv server and iis 5.

    what is the best way to stop people directly downloading, they have to be signed up first.
    _________________________
    Triangle Solutions Ltd
    http://www.triangle-solutions.com/
  2. #2
  3. No Profile Picture
    Slacker
    Devshed Newbie (0 - 499 posts)

    Join Date
    Feb 2001
    Location
    Sweden
    Posts
    76
    Rep Power
    14

    how I would solve this


    I don't know if this is the magic bullet everyone use to solve your problem, but if I would need to solve this problem for myself I would put the files outside the filestructure that is accessible over the web:

    c:\wwwroot - your webcontent (shared through browser)
    c:\ftproot - your FTP (shared through FTP)
    d:\files - your "secret" files (not accessible over the internet)

    Then you use your favourite script language like php, python, jsp, perl, CobolScript or whatever. I think even asp can handle this. And use this to create the file access and validate user precedure. Since these scripts are executed locally, they can access the catalog d:\files but no external progam can get to that directory.
    This makes it impossible to access your files without going through your validation... Well, except actually hacking the server of course.

    Simple and secure...

    /Fjodor
    Last edited by Fjodor; August 6th, 2002 at 04:32 AM.
  4. #3
  5. No Profile Picture
    BrainFreeze
    Devshed Newbie (0 - 499 posts)

    Join Date
    May 2000
    Location
    London
    Posts
    318
    Rep Power
    14
    Very Simple and very secure - now why didnt i think of that?

    Thank you for all your help
    _________________________
    Triangle Solutions Ltd
    http://www.triangle-solutions.com/
  6. #4
  7. No Profile Picture
    Slacker
    Devshed Newbie (0 - 499 posts)

    Join Date
    Feb 2001
    Location
    Sweden
    Posts
    76
    Rep Power
    14
    You're welcome.

    The simple things are the first to escape when trying to solve a problem.

    /Fjodor

IMN logo majestic logo threadwatch logo seochat tools logo