Secure a specific file types

[fmrock]

I have a password protected site. On this site there are 2 types of files that I have links to. PDF and TIFF.

I have a special Java applet that to view the tiffs and a link to the PDF files.

Is there anyway to secure the files so you cant just browse to them if you know the file path and you have to be logged into the website.

I know I could put them below the web root and stream them back to the end user but that would be allot of code changes.

 

[emozley]

Hi Fmrock,

As far as I know there is no other way of doing this as web folders as it is you can't manage NTFS security in the same way that you would do otherwise.

The advantage of having a separate script to stream the file is that you can put in some script to log the download as well as querying a database to see if the user is allowed to download the file in question.

Thanks

Ed