protecting a folder containing .doc and .pdf, etc.

[mechro99]

Hello,

While I know how to show/hide links to documents on an asp page using if/then statements and a list of authorized users, I'm at a loss as to how you protect the documents themselves if an unauthorized user should happen to learn the url of a word document or a PDF.

Can anyone make suggestions on how to make sure all of the contents of a folder is protected, in the event that the above situation should occur?

 

[SimonEireconsulting]

you could store the documents in SQL Server instead of on your server and serve the documents from your database.

 

[guitarzan]

Alternately, use something like below to let users download a file, rather than providing a direct link to the file:
Downloading any file using ASP, FSO and the ADODB Stream object

http://www.xefteri.com/articles/show.cfm?id=7

Then, make sure that the user is autorized before allowing that code to run.

 

[mechro99]

Thank you both. This sounds like something I could use, guitarzan.