#1
  1. No Profile Picture
    Junior Member
    Devshed Newbie (0 - 499 posts)

    Join Date
    May 2001
    Posts
    1
    Rep Power
    0

    Question Managing File Downloads


    i want to make some files available to certain people on my site. i don't want someone to be able to just type in the address to the file and be able to download it. I have seen this done in some form on many web pages and i have looked for some info on this but i guess i'm just not looking in the right places. So i was wondering what is the best and most secure way of achieving this would be. Any direction as to how to achieve this would be appreciated.

    Comments on this post

    • JimmyGosling agrees
    Last edited by raenius; March 26th, 2002 at 12:37 PM.
  2. #2
  3. No Profile Picture
    Registered User
    Devshed Newbie (0 - 499 posts)

    Join Date
    Mar 2002
    Posts
    20
    Rep Power
    0
    zip the files with a password

    Comments on this post

    • JimmyGosling agrees
  4. #3
  5. No Profile Picture
    Registered User
    Devshed Newbie (0 - 499 posts)

    Join Date
    Feb 2002
    Location
    USA
    Posts
    12
    Rep Power
    0

    Lightbulb chk out this link


    www.sitewizard.com
    They have some good resources for web development.

    DA


    Comments on this post

    • JimmyGosling agrees
  6. #4
  7. No Profile Picture
    Junior Member
    Devshed Newbie (0 - 499 posts)

    Join Date
    Apr 2001
    Location
    Kenju
    Posts
    26
    Rep Power
    0
    If your´re planning to do it with php, just try hotscripts.com, they have tons of ressources / code / ready made download tools including dB support and file logging for this purpose
  8. #5
  9. No Profile Picture
    Junior Member
    Devshed Newbie (0 - 499 posts)

    Join Date
    Apr 2002
    Posts
    2
    Rep Power
    0
    Perhaps you can do something with .htaccess, if you're running Apache. Make a password file and authentication method.
  10. #6
  11. No Profile Picture
    Canta como rafaé
    Devshed Newbie (0 - 499 posts)

    Join Date
    Feb 2001
    Location
    Barcelona
    Posts
    74
    Rep Power
    14
    Put the files to download outside of the DocumentRoot and then make a script or CGI which takes the referenced file and dumps the content back to the user, setting the appropiate mime type in the headers.
    Thrasher



    'Y se ahogaron los dooos
    No eran duros pa pagar, cuñaaoo !!'
    El vagamundo - El risitas y su cuñao
  12. #7
  13. No Profile Picture
    Contributing User
    Devshed Newbie (0 - 499 posts)

    Join Date
    Mar 2002
    Location
    Oxford, UK
    Posts
    28
    Rep Power
    0
    Don't zip the files with a password... At least, the old PKZIP stream cipher was broken ages ago, and I guess they might well use the same cipher in modern zip files for compat... In any case, I wouldn't trust it any further than I could heft it.

IMN logo majestic logo threadwatch logo seochat tools logo