restricting downloads
Printed From: Web Wiz Forums
Category: Web Wiz Web App Support Forums
Forum Name: Web Wiz Forums
Forum Description: Support forum for Web Wiz Forums application.
URL: https://forums.webwiz.net/forum_posts.asp?TID=11777
Printed Date: 09 April 2026 at 1:00am
Software Version: Web Wiz Forums 12.08 - https://www.webwizforums.com
Topic: restricting downloads
Posted By: typhoon
Subject: restricting downloads
Date Posted: 13 September 2004 at 4:55am
|
I have many private groups, in my forum, and we utilize the file up/download quite frequenly, we are using the aspsmartupload component.
Now to the problem, the uploads gets stored on the server under a directory in the users name. Usually the link is in a post in a forum. people with access to this post can download the attachment. But we also have people that don't have access to this topic, but other forums, these people can still download that attachment if they would be sent the link in a mail with an direct url to the attached uploaded document. ie attchments gets stored like this: https://forum.org/forum/uploads/files/username/uploaded_docu ment.doc anyone that have access to the server can download that document, well, they must know the url, but still its a bit scary as we really need security on these documents, we are using the active directory integration with this so we dont have to common login procedure for users. Any idea on a solution? i "could" start using a lot of groups, and start securing the documents, problem is new users, and a lot of administration. Any nifty idea for an solution? //Dave |
Replies:
Posted By: khurram007
Date Posted: 16 September 2004 at 12:45pm
Did you mean you did the Active directory integration with WWF??? Can you let me know please how u did it.
|
Posted By: michael
Date Posted: 16 September 2004 at 11:21pm
|
there is a nt auth modekhurram. As for your probelm, you can set ntfs permissions on that folder so only authorized users have access. Besides that it should be fairly easy to mod the forum, in a way that the files upload to a private directory, then when someone clicks a link that must be generated dynamically it gets streamed to the user, this link can be different every time. 4guysfromrolla has a tutorila on how to do that. ------------- http://baumannphoto.com" rel="nofollow - Blog | http://mpgtracker.com" rel="nofollow - MPG Tracker |
Posted By: theSCIENTIST
Date Posted: 18 September 2004 at 6:31am
| Don't use the username as dir name, but use the usercode instead, and I know other users can get the usercodes, but it should be better since they don't know you are using the usercode, for this to work, you cannot pass full URL's of the locations as you did above, send the call to a file that will dynamically make the connection to the file required, you must pass a value from the first file to the second, maybe the usercode reversed so it won't be obvious. |