Streaming 2

[SteveD73]

Hello

How can I stream in a file?

 

[BigBadDave]

Hi,
One way to do it is to keep the *.zip file in the database itself let me know if you need more info.

From Big Dave

 

[SteveD73]

The reason I need to stream the file is to stop unauthorized users from accessing it. I have no problems stopping unauthorized users from accessing the asp files but im worried that a user could just type the name of the zip file in and download it directly, therefore bypassing the asp page security.

If I put it into a database could the authorized users download it like a normal zip file?

Thanks

 

[BigBadDave]

You can incorperate the download page into the session variable scenario so you will be able to control download rights

 

[link9]

How many people would have access to this file? Would it be effective to put it in a protected directory, and then give the password to those people so that they could access it?

By that I mean stick the file in a directory and then put read only rights on that directory and only for one user (or more if you wish) -- but no rights for the default users (browser)... then, if anyone tries to type in the address, they will be prompted for a username and password.

Additionally, you could put that username and password on a page that is easily protected via your ASP access rights.

The page might look like this:

<%
if session(&quot;privelage&quot = &quot;canSee&quot; then
%>
Click the link below and this information when prompted:

userName: special
password: 8976212

http://mySite.com/specialDir/docs.zip

<%
else
response.redirect(&quot;someOtherPage.asp&quot
end if
%>


Would be a secure option --

paul

 

[SteveD73]

Im not to sure what you mean DavidByng as im quite new to ASP. Do you know any sample ASP that demonstrates this?

Link9's answer seems the easiest but I would prefer it if the user had to only enter there personal username and password.

 

[BigBadDave]

I have made a demo for you the url is :

http://www.byngdesigns.co.uk/bindata/

the demo username is : admin

the demo password is : admin

you can view the ASP source of the pages by viewing :

http://www.byngdesigns.co.uk/viewsource/showcode.asp?source=/bindata/default.asp

replace default.asp with the page name e.g. file.asp you get the gist

From Big Dave