How To Secure File Downloading
I have been lately dealing with developing an ASP based web application which uploads documents to a folder. Application itself is password protected by the session.
I am now looking for securing the documents that are uploaded.
For example;
Let's say AAA.doc is uploaded to "/docs" folder by this password-protected application. But, I can't prevent the following link to download this Word document:
(URL address blocked: See forum rules)
How can I prevent the above link to download AAA.doc? Is it something possible to restrict it with a session variable? I also want the user who are authenticated at the beginning to view or download the file, but unauthenticated users shouldn't view it.
I found some articles but they are speaking about IIS level things. Folders may be created dynamically. Is it possible to have this security feature at application level?
View Replies
ADVERTISEMENT
help me in securing a pdf file on my site. i want ot provide a pdf file that can only be viewed and not downloaded.
View Replies
View Related
I work for a large chain coporation. My schedule is posted on their secure web site which I have a user name and a password for. I want to create a URL string that can be sent (using VBA inside of Outlook) which contain my username and passsword and allow me access to my schedule information.
I tried: ....
View Replies
View Related
There any way to download files I'm keeping stored above the www
folder for security
I'm thinking of the following : My script determines what file the user
requests, checks their credentials, and then "forwards" the file from the
non public directory to the user.
View Replies
View Related
From the client side, I want to download a pdf file from the server side that was initially saved there.
this site didnt work for me: ....
View Replies
View Related
I have a download function that allows a site visitor to download a file. It works when the page that calls the function, the function, and the file to download are all in the same folder. I want to be able to have the page that calls in one folder, the function in another folder and the file in a third. Any advice? Code that is working when all three are together:
Function doDownload (fileName)
dim myAttachment
myAttachment = "attachment; filename=" & fileName
Response.AddHeader "Content-Disposition", myAttachment
Response.ContentType = "application"
response.BinaryWrite fileName
End Function
View Replies
View Related
I have an asp script on a server. However whenever I link to the script, instead of running it, the browser displays a message saying. "You are downloading the file "filename" from "server name" Would you like to open this file or save it to your computer ?
View Replies
View Related
I want to create a asp page where i can give the user an option of downloading a file or opening a file e.g an excel file.
How do i do this?? Ive already created an asp page which has a button- where the user can click on the button. The excel option of either opening the file or downloading it comes up- but i want this option actually on a asp page. How do I go about this?
View Replies
View Related
I have written code to download the file stored in the database.
according to some condition the data in database is written using binary write.
If Not rs.EOF Then
Response.ContentType = rs("Content Type")
Response.BinaryWrite rs("File Data")
End If
but when i try to write some filles other than pictures, it will prompt to save the asp file. Code:
View Replies
View Related
I use the following code in an asp.net page to download file from my site to the user:
Response.Buffer = True
Response.Clear()
Response.ContentType = "application/octet-stream"
Response.AddHeader("Content-Disposition", "attachment; filename=""" & dsDocFile.Tables("tbl_DocFile").Rows.Find(FileID).Item("FileName") & """")
Response.Flush()
Response.WriteFile(sFileName)
This works with most every file type I've run across (jpg, gif, doc, ppt, xls, etc..). Normally when the user tries to access a file, a download window pops up asking the user whether he/she wants to open or save the file.
However, when the file is a zip file, the user just receives a blank screen instead of the usual download window. Has any one run into this problem? If yes, how did you resolve it?
View Replies
View Related
i am having prob while downloading a file in firefox. If the filename contains
spaces it takes only name before the first space. The rest of the part in the filename is egnored....
i use the following code for it.
--
Response.Addheader "Content-Disposition", "attachment; filename=" & filename
----
example if the filename is "sample filename.doc". while downloading it saves as "sample" the rest of the part filename.doc is removed.
The above code works fine in IE. Can anyone here tell me how i can handle this in firefox v1.
View Replies
View Related
I am currently working on an ASP based site which displays largely numerical data, which is stored in an access database. I have been asked to create an 'export' page, which, when working properly will allow a user of the site to export the table he or she is looking at and export it to a .CSV file which they can save onto their own machine.
My problem lies here, I can create the .CSV file on the server, BUT permissions on our host are such that the file can only be saved to the 'databases' folder and not on the webroot.
Is there any way in which I can either setup a way for the user to download from the databases folder? or rather than creating the file on the server, directly write the file to the user's machine?
View Replies
View Related
I need to provide a way to download a software and its corresponding
manual from a web page.
So far I have done the sign in page where people give their data. I
will then give access to a page with a link allowing to download the
required file(s).
My worry is how to avoid that somebody grabs the URL of the file and
send it to another for downloading directly from the server. What can
I do to avoid this ?
View Replies
View Related
I have set of mp3 files as a list (DownloadFiles.asp). The user can click on any of the mp3 files to download(Download_Porcess.asp).After downloading the file the user has to redirect to the DownloadFiles.asp.
For this i used:
response.contenttype="audio/mpeg3",
response.binarywrite("binarystreamofmp3file)
In Download_Process.asp to force the save dialog box. This works fine. This allows the user to download the file. After downloading this mp3 file, this file should not be displayed in the list ie in (DownloadFiles.asp).
How can i do this?
I am not able to redirect from Download_Process.asp to DownloadFiles.asp, b'coz I used response.binarywrite.
View Replies
View Related
I've been trying to send a (large) file to the browser via a download
page that uses a file download component. The file downloads fine,
except that Internet Explorer refuses to browse to a different page
while the file is downloading! I don't understand why it does that
and I don't know how to fix this problem.
Any idea? Code:
View Replies
View Related
how do i restrict anyone by changing an asp file. can it be done using visual source safe? Is there any way that i can stop any one from making changes in my asp file.
View Replies
View Related
I have a bunch of Excel reports that I would like to display on my company's intranet. The reports contain priviledged information, however. My plan was to have a page with a dropdown box so someone could pick the report they need to view. This page can be secured with a session object, etc. But what is to keep an unauthorized person from accessing a file by typing. Is there something I could configure in IIS? Set permissions?
View Replies
View Related
I need to be able to secure files on my web server. I am using asp to secure access to links and pages, for example:
<%If Session("manager")=FALSE Then%>
You are not authorized to view this page
<%Else%>
<<<Page Code>>>
<%End If%>
The place I'm running into problems is with files. I have a lot of charts and such in PDF version. I kind of doubt there is a way to secure these files with asp, but I thought it would be worth a try.
My biggest issue is that PDFs are stored in the browser's history, so once the page has been accessed, anyone using the browser can get to thatunsecured PDF. As a brute force fix, is there some way to simply erase the site from the browser history? If not, is there a way to secure the PDF, or does someone know of a better group to post on?
View Replies
View Related
i have an ecommerce site that is split across two domains, a secure space that retains cc details and the main site where contact information and order details are held. I need to be able to produce a report that displays both sets of info in a printable document. aside from using iframes is there a better way of doing this?
View Replies
View Related
I have a problem and it's pretty basic. I need to install PWS on a Windows NT Workstation 4.0 PC in college but cannot find a download just for PWS. I've done a search of the web and microsoft's download site and still no luck.
Installing IIS is not an option as Im technically not allowed to install anything and I'd rather it be PWS than a bigger and more noticeable IIS. I've heard that it comes on the Windows 98 disk but unfortuneatly I do not access to one.
Does anyone know of a link to download PWS? I've heard that it comes with an NT Option Pack aswell but can I just install PWS from this or will it change other settings?
View Replies
View Related
I've been searching through google and different script sites to try and locate a script for simply downloading files(Small video clips) from an access database to my web page. But have been unable to find what I am looking for.
Do any of you guy's know of any good scripts. Don't need anything fancy just the basics.
View Replies
View Related
I'm using Infomentum's ActiveFile to download files. My machine is running Windows'98 and IE 5.5. I'm able to download all kinds of files except PDF files. I'm using the components File.Download method as per the example available in the web site and the directory that contains the file has sufficient rights granted, surprisingly I'm able to download those PDF files through OPERA.
I did not get any error when I go to the download, instead a blank page was displayed.
View Replies
View Related
I'm creating the Intranet for my company and in one of the parts of it I want that users to be able to upload and download files, however, I'm not sure what would be the best option/application to use for its creation. I need them specially for the uploading to be able to track when was the upload done, which user did it, and so on.
I have been using ASPs to create the website. Could I do this with ASPs ?
View Replies
View Related
i want that user should listen the songs without downloading.
there is link for every song when user click on the link the small popup will open and then song should start. but for that user dont have to download the song.
please tell me it is possible or not or if possible then please tell me the code.
View Replies
View Related
I am developing an app that has a reporting function
which displays the non-PDF reports. One of the users
wishes to have the reports saved to his machine as PDFs.
The app can convert the reports, and save to the server
with no problem (uses a component for this). The problem
is, figuring out how to save the reports to the client.
The ideal approach would be to have the app save the
reports to his desktop, like some of those stupid casino
sites save their shortcut links.
However, I would settle for just just being able to force
the "download" dialog to display, instead of opening
Acrobat when the app attempts to send the report to the
client.
View Replies
View Related
I am developing web pages , therein doing database
connectivity using ASP with Microsoft Access.I want to
insert a file (.opt/.pmopt) into a field 'OLE Object'. Also
I want to display that file name in tabular form and a link
to download that file.
View Replies
View Related
The help is not very informative here, but it says, that it is possible to
download files, by using the 'a' tag. What I am trying to do, is create a
link, that the user clicks, which will download a file from the server. This
works fine for most files, but for things like TXT and HTM, they open in the
browser window. I want the 'Save As' dialog box to appear, instead.
If I use;
Response.Write "<a href='http://mydomain/myfile.txt'>myfile</a>"
I get the contents of myfile.txt displayed in the browser window. If I use;
Response.Write "<a href='http://mydomain/myfile.mdb'>myfile</a>"
I get the 'save file as' dialog box appear. How do I force the 'save file
as' dialog box to appear for ALL files
I tried using the 'FileSystemObject' and using the 'Copy' method of GetFile.
But this does not allow you to have a 'user defined' path to save the file
(which is pretty obvious, as this is the server side)... Is there another
function that I can use, or is there a property setting of the anchor tag,
that I need to set
View Replies
View Related
i m getting file not found error when iam trying to download a file with name "test..doc" the actual file name is "text." and the extension ".doc".does using DOT(.) got any limitations with file names? strangly in the development i was able to download such file with dots at the ending.
View Replies
View Related
I am writing asp page, based on the selection of the drop-down list I want to allow the user to download some files.for example
my drop-down list will contain a select control and a button
select control will have
File1.doc
file2.doc
file3.doc
e.g. when file file2.doc is selected and clicked on the button, the user should be able to download that file from the server.
View Replies
View Related
I want to use the information stored in an SQL database. There is a website with .asp pages that access it. I want to know if I can download the .asp files un-compiled so that I can see how they access the database or is there a way to see how the database is structured without getting the asp files?
View Replies
View Related
i want to set mime type of an image which is available for download.i gave the link of following page from a wml page and try to download a jpeg file on mobile.
test.asp
<%
Response.contenttype="image/vnd.nok-wallpaper"
response.redirect( "http://localhost/test/mustafa.jpg" )
%>
but instead of redircting to jpg file andsetting its mime type , my fone download test.asp and says file formate unknown.
View Replies
View Related
im trying to add a facility to upload and download files to and from my web site. The uploaded needs to be made available to be downloaded. Does anyone know the coding for this, as its being bugging me for weeks. I just cant find code anywere.
View Replies
View Related
I'm developing a webpage in ASP and javascript for downloading s/w. I've set of files and when user clicks download I should zip all files and provide user to download .zip or .tar file. how should I do this?
View Replies
View Related
