Where to put files on a webserver?

[System_Error]

I know how to put files and stuff on the webserver, but I don't know where to put files that need to be accessed(as in showed) but not downloadable, or how to do it. If you can help me, please post. If you don't understand what I've asked, please question me!

[StevenHickerson]

Hmm any files that can be shown, can be downloaded if the person viewing them wants to.... (the viewer is downloading them temporarily to view them)

Unless you mean you want a directory / file list to see a list of files but not be able to download anything from the list? That might could be accomplished but would be in your FTP settings, not in where you put the files on the server.

Also some servers are automatically set up with a private folder with the permissions set to disallow outside access...

[RobDog888]

If you are just wanting to do FTP downloading from your site then you need to have your files in the "C:\Inetpub\ftproot" directory for starters. Do you have a website or IIS installed and setup?

[System_Error]

Let me explain a little better. I have the website set up(as of right now).. It's pretty bare because I just got the hosting package the other day. This is what I want:

I want to display a java applet, but I DON'T want the user to be able to download the class file.
See, all the they would have to do is go up to where they enter a url and change this:

applet.html

to this:

applet.class

and they can download the program that way. I CAN'T have that, but I don't know of anyway to get around it.

Thanks for the replies...All help is greatly appreciated.

[RobDog888]

Oh, I hate it when that happens. You write some cool code and if you place it on your sites directory, anywhere, they can DL it like that.

You might want to post a link to this thread in the Java Forum. They may have the solution there. Probably NoteMe since he knows allot of Java.

[System_Error]

Thanks! I'll do exactly that.

[Dillinger4]

The binary file still has to be decompiled after it's downloaded. Why not just run the code through a Obfuscator?

[NoteMe]

The binary file still has to be decompiled after it's downloaded. Why not just run the code through a Obfuscator?

Binary? When did you start to compile your appletts to binary.....

Well, I would guess Dilengers method would probably be one of the best. yGuard is a free obfuscator. Never tried it before. Since I don't care if my code get stolen anyway... But you need Ant though. But I guess you can download that. Or find an other obfuscator.

http://www.yworks.com/en/products_yguard_about.htm


To prevent your code to be downloaded (if there is a faw) I guess you have to set some settings in your Apache config, or myabe a .htaccess trick is possible, not sure. But isn't the applett downloaded to your temp folder anyway? In the browser I mean?



- ØØ -

[System_Error]

It is downloaded to the temp folder...I was thinking that decompilation is just something I'll have to deal with, but I don't think their will be that many people that's desperate. Here's what I have in mind:

the applet class has a method getDocumentBase() that returns where the applet was run from. In my code, I could test to make sure it's run from MY website, and if not, the rest of the code won't run. Now that won't prevent decompilation, but it's definately a step.

[Dillinger4]

Posted by NoteMe

Binary? When did you start to compile your appletts to binary.....

Sorry i ment Byte Code.

System_Error, that sounds like a good idea. Check out Smokescreen or RetroGuard which are pretty good a java obfuscators. I also had a friend use Jshrink a while back and he said it was pretty good.

[System_Error]

Thanks guys. I don't know if I want to run it through an obfuscratcher. It just seems to hard. Can they still get the source somehow after running it through the ob. thing?