Securing files

[MrPresident2k]

Hi,

Is there any way to secure my files in my web server. Say I have a file for download in my web server called sample.doc. If a user tries to access it as ,

http://www.server.com/docs/sample.doc, he shouldn't get the file.

Any Suggestions.

Thanks
Pres

[Kings]

Put it above the wwwroot, and you won't be able to access it from the internet.

[MrPresident2k]

Hi,
Thanks for the reply, but the problem is that these files have to be available for downloading. A user logged into the site has to download the site. But the problem is, any person directly typing the URL will get the file. Hope you understand the problem.

Thanks,
Pres

[JoshT]

If you use IIS, you can configure Authentication for the file or folder its it, then set NTFS file permissions on the file.

Also, you can write a script that reads a file from the filesystem and writes the results to the browser, using Response.ContentType to set the MIME type and Response.BinaryWrite to write the data.