Starting a file transfer...

[cbvbguy]

Hey, I'm ussing a session object to password-protect my pages... I don't want someone to be able to just navigate to the URL of a file so I'd like to, via a response, programatically initiate a file transfer ("secure" file downloads)... any idea how this could be done?

[DevGrp]

You can use the web.config to protect your site. It would be much easier IMO.

[cbvbguy]

Originally posted by DevGrp
You can use the web.config to protect your site. It would be much easier IMO.

How?

[DevGrp]

Here are some links to get you started.

http://samples.gotdotnet.com/quickst...formsauth.aspx

http://msdn.microsoft.com/library/de...entication.asp

http://msdn.microsoft.com/library/de...lusersfile.asp

[cbvbguy]

Thanks, but how can I use forms authentication to protect against someone just typing in the URL of the "secure" file and downloading it?

[DevGrp]

Use the web.config file to protect the directory that the files are in. If a user is not authenticated then wont be able to download the file.

[tailz]

I know I'm digging up a really old post here but ... :]

I've been playing with the web.config file to restrict access (forms autentication) to a set of .pdf files, I can restrict people accessing .aspx files in a certain directory but it just ignores me for pdf file types.

Do I have to do something to so that .pdf will go through the same routes as the .aspx ?

Cheers,

Gary