Password

[SteveD73]

Hello

I have created a web site which requires the user to enter a password. If this password is recognised a Session variable called securityLevel is set. This allows me to restrict access to asp pages okay. The problem is I want only authorized users to be able to download a file called docs.zip. How can I stop users from just typing docs.zip into internet explorer and downloading the file?

 

[wushutwist]

Send the request for download to an ASP page that does the security check. Have the ASP page set the appropriate page content and stream in the file. This will cause most browsers automatically to prompt for download unless the content type is recognized (as is the case for .html files). Wushutwist

 

[SteveD73]

Thanks for the above. Do you know of any examples of streaming a file?