How To Restrict Unauthorized Downloads
I have a website setup which also provide ability to download latest version
of our Software by logging into the webpage. All latest softwares (ONLY ONE
FILE .EXE for each Software) are located in the "/Download" folder of my
website. Customer will login to website and the ASP page decide the software
that this user has purchased and privide ONLY that Hyperlink to download the
latest Version file.
My problem is if somoe body know the path and file name then they directly
put the URL in address bar and will get latest file. How do I restrict that?
Please suggest all possible solutions.
View Replies
ADVERTISEMENT
I have a file that SHOULD only be made accessable to registered users. They must login to get to the download page. The problem I have is that once a user logs in an gets to that page they can potentially share the web link to that file with anyone and that unregistered user can bypass logging in.
I was thinking something along the lines of download.com where when you click download, the actual files location only appears for a split second, pops up the download box, then it switches to another webaddress?
View Replies
View Related
I am trying to convert a word document to pdf file from java for this, I am using a asp file to convert doc file to pdf. I got it working when I put the url which has file name as the query string in the browser but when I call that asp file through the java application I am getting 401 unauthorized xxx exception.
I am using weblogic 7 as the app server and IIS as the web server and Adobe acrobat 6 which has pdf distiller in it. The problem is when the asp file tries to create the Server.createObject(pdfdistiller.pdfdistiller.1), since it is a third party component, the machine doesnt allow me to create the object, I guess I am not sure, but I got it working when I put the virtual folder security anonymous user as domain admin but if i give any other user name it is giving the exception 401 unauthorized exception.
View Replies
View Related
I'm running windows 2000 profession, and i know that i can install it from control panel but i tried and it's asking me for the cd and id ont have it.
Could you give me the direct links to the IIS Download as well as the Personal Web Server download.
View Replies
View Related
I have an FTP server that I use to store documents. When a user needs to download any document the "download link" directly points to the FTP server (eg: <a href="ftp://some URL since URL are blocked">Download</a>). I want to avoid this and now have added a user name and password to the FTP sever. But instead of giving the link as "ftp://usernameassword@myftpserver.com/document.xls, I want a much secure way of letting the user download the file without letting the user know about the FTP server username and password.
View Replies
View Related
I need to log how many times one spesific file is downloaded from my
website. First I thought this could be done simply by routing via a script
that count number of downloads, and then redirect to the spesific file. But
this soultion will not work when a user right click on the file/link and
choose "save target as...". How can I solute this?
View Replies
View Related
I have an Access db with usernames and passwords set up on a web site. Upon signing in to a password protected asp page which contains a link to an exe file, the user clicks the link and the browser asks to either Open or Save the file.All this works fine, but if the user simply types the full path to in the address bar, the browser again asks the user to either Open or Save the file - thus bypassing the security Is there a way to prevent this "back door" of accessing the file or would I have to set up an FTP mechanism.
View Replies
View Related
Is it possible to log a successful/unsuccessful download in ASP? I've got a download logging system but I'm wondering if its possible to find out if a download was disconnected or not?
View Replies
View Related
I want to provide the ability to download files from a web page based on whether a user has paid for the file. I therefore need to hide the URL from the user.
How do I write code to download a file and hide its URL?
View Replies
View Related
Is it possible to detect downloads of a file on the web server? Using ASP Classic?
View Replies
View Related
I have an VB ASP page that creates, using a linked database, ad-hoc queries. Like, the user selects what table to look into, what fields, any criterias (ex: PROVINCE="QC"), etc. That part is easy.The problem is, I would like the results to be outputted in MS EXCEL. Well, it's not my idea, but I have to do it. Any ideas how this can be done?
My only idea would be that:
1) The ASP page writes to a file on the server and offer a link to the user to download that file.
2) User Downloads
3) We can't have these Excel files cluttering up the server, so the file would also have to be deleted automatically.
Is this even remotely possible?
I'm not too good with ASP, so is it even possible to write to file? Could I create a Workbook/worksheet object using VB ASP?Can I delete the file programatically
View Replies
View Related
Does anyone know of a way to be able to take 10 urls which point to zip files and then for it to download them one by one, i.e. when one has finished to then begin the next one.
This is for an asp site which is why i posted it here, but i am not sure where to post this as i dont even know how to go about doing it.
View Replies
View Related
A big problem with most server statistics is that when they count file downloads, they are counting the number of requests to the server, not complete downloads. Is it possible to count downloads more accurately?
I can use the Response.IsClientConnected command immediately after streaming the file to the browser but it's working only for files with size less then 80MB . How can I resolve this problem?
View Replies
View Related
I have a website that (like many) allows users to download large files. Some are up to several hundred MB in size. The problem is that since switching to IIS 6.0, the size of the file is limited by the ASPBufferingLimit, and it's size seems to be limited to only 4294967295 bytes.
That's pretty big but it's not quite big enough and I need to disable it. Some people have recommended setting it to -1 via:
c:
cd C:inetpubadminscripts
cscript adsutil.vbs set /w3svc/1/aspbufferinglimit -1
but the -1 doesn't really "take"...IIS keeps it at 4294967295.
Setting it to 0 does "take", but then IIS returns nothing (0 bytes).
How do I disable or workaround this security feature in IIS which is not allowing people to download large files?
View Replies
View Related
I currently need to allow users to download a series of Excel files from the intranet which were generated individually using ASP. Rather than have them click one link at a time to download only one file, I want to find out if it is possible to let them download the whole series of files with one link click.
The users are all on the LAN so bandwidth is not an issue. Furthermore, the total size of all the files is only 100kb.
View Replies
View Related
i need help about restricting pages other than home page
i have a project inserting resume details here
i have 4 pages include home page
if i want to restict all the pages except home page
while starting
how to write asp code for that one
View Replies
View Related
i have a signup form in Macromedia flash which posts the details from input boxes to a database, this is the asp file Code:
View Replies
View Related
I have an ASP page that I want to allow access from only from a certain block of address, can someone get me started?
View Replies
View Related
I'm trying to restrict access to a page based on a session variable called MemberUserID, so the way I thought of doing it was to say if MemberUserID is not equal to this value, then you would get an error page, but the operator I'm trying to use is giving me an error:
<%
If Session("MemberUserID") != Name Then
Response.Redirect "error.asp"
End If
%>
is there a better way to do this?
View Replies
View Related
How can one restrict what kind of web browser users use to view your web site. I only want users to be able to browse my web site using firefox. I know this is possible because I've seen others do it. I'm just tired of it working fine on firefox and not right on other browsers.
View Replies
View Related
I know I'm doing something simple wrong here and it's doing my head in. Don't know if anyone can help without me posting yards of code? I am using normal login page in dreamweaver which uses record id as the username and users password as password.
This all works fine logs in and forwards to /ammend.asp?id=7295 which is also restricted, then the user can update their record, no problems so far. The problem is that if I change the ?id= to another number 7687 for instance in the browser then the user has access to that record 7687 when I though it should go back to the login page.
View Replies
View Related
I am running a virtual hosting server. The configuration of server is
as follows:
Windows 2000
IIS 5.0
All the virtual hosting sites are running as seperate user ie for the
site www.xxx.com is running under xxxIIS and www.yyy.com is running as
yyyIIS. I have also taken some precautionary file system security
measures like the group everyone is not present in c: and directories
corresponding to sites. But at the same time I can not remove everyone
access from the full system, I will need to keep them in few
directories.
This can lead to an asp code that is present on the server to do stuff
like browsing through the file system, reading the contents of file
etc. For ex if I have everyone acccess to c:winntsystem32 then any
person on the server can write code to view the contents inside
folder.
I want to know if there is any way to restrict the script belonging to
one virtual hosting site to access only the contents of that site.
example the site www.xxx.com present inside
c:inetpubwwwrootwww.xxx.com directory and can access only the
contents inside this and the child directories. Is this possible? I
searched the on google but could not find any link that gives me any
information on this. It will really be a valuable information to me.
View Replies
View Related
I have big problem because i need to link site and one service. I have customer with his site and about 1000 html pages which he want to be restricted. So we prolly need to do changes in that html pages...
Other thing is that part of site would be avaliable via payment thorugh SMS service. SO basicaly u go to one site, send SMS with instructions, and that service send u SMS with random generated password.
Then user need to go back to site and login using that random generated password. Can this be done and in what way. We have this system working in php but i dont have much ideas how to use this in ASP specialy with random passwords. I have some asp scripts that restrict pages but ofc users and pwd must be defined in access/SQL which is problem here regarding i dont have user/pwd i only have random generated code:
View Replies
View Related
I have a problem with restricting multiple users to get access to my site with the same username and password.
I allready set up a table getting the UserID of the user and putting it in the table, therefore restricting access for future logins as long as the users Session is still valid.
Now to my problem. When the user logs out everything is great, but when he just closes IE the session is still valid and the field in the DB will not be deleted. I have put a SQL in the Sessoin_OnEnd in the global.asa file, but since this site is a micro site in another folder than the root, the global.asa can effect the main site aswell. And it will take at least 15 minutes before he can login again (and I do not want to set session.timeout any lower).
View Replies
View Related
i would like to know if it is possible to restict a file to an
IP address. i.e: It would only open on a system based on its IP
address.
View Replies
View Related
My problem, I've combined "log in" and "access levels" to restrict access to
certain pages, using the built in "log in" and "user authentication,
restrict access to page" features. But I find the after login I constantly
get redirected from the restricted pages. Code:
View Replies
View Related
I would like to restrict access to certain PDF files on my webserver. How can they be protected if they are in a "public" directory? For example, lets assume you have your html and asp pages for http://www.xyz.com saved on the server's hdd @ c:xyz.comhtdocs. If you place thefile.pdf in that directory, then all the "unauthorized" person would need to know is the pdf file url, i.e., http://www.xyz.com/thefile.pdf.
Assume I place the pdf file in the following directory on the server c:xyz.compdfs. Is there a way in ASP that I can allow certain visitors to view that file Remember, the asp file would be located on at c:xyz.comhtdocs.
View Replies
View Related
How can I prevent a user from entering more characters than are allowed in a database field.For instance,if a field only allows 6 characters,how do I prevent the user from trying to submit the form in a user friendly way?
View Replies
View Related
i need help about restrict page in asp
i have one project RESUMES INSERTING INTO DATABASE
for that one i have 3 pages in that one while starting.it must show 1 page only how to do that one.
View Replies
View Related
I have a select box that displays the phone numbers of an sms directory, Which has a limit of 100 . how do i restrict the size of the select box to 10 ? Code:
<select name="address_book" multiple id="address_book">
<option value="1234567">1234567</option>
<option value="1234567">1234567</option>
<option value="1234567">1234567</option>
<option value="1234567">1234567</option>
</select>
View Replies
View Related
I'm trying to find out how I can make a page to be restricted to open
between Saturdays 12:05 pm until Sundays10: pm... and that.. EVERY WEEK...
is there any way at all to do this or is it just simply impossible.???
View Replies
View Related
My boss wants me to create a form that will contain about 50 condo listings. He wants me to place a restriction on the form as to the number of Condo listings a user can select/request. Is that possible? If so, what will I need to do or use to make this stunt possible?
There will be several pages that will make up the form. There will be data being passed between the forms. To do that I would use ASP (I guess).
The items on each page would be different. Lets say on page1 there are 20 available condos located in area A. On page2 there are 20 available condos located in area B. On page3 there are 10 available condos located in area C.
The user goes to page2 sees a condo that he/she would like information about. They select that condo.
The user has now selected -one- condo from page2.
If the user goes to page 1 or 3 and selects a condo from those pages when the user hits the Submit button, the program should not allow the page(s) to submit since they have selected more than one condo. How can I make this possible?
View Replies
View Related
Can someone point me in the right direction on this? There are 3
fields in the DB: model, rma, bagqty. If the values on a certain row
are I530, 1108, 50 and a user goes to input the same data I dont want
the insert to be allowed and force a new insert.
I dont need someone to do this for nor do I want that, just need a push
in the right direction.
View Replies
View Related