Prevent Unauthorized Downloads
I have a file that SHOULD only be made accessable to registered users. They must login to get to the download page. The problem I have is that once a user logs in an gets to that page they can potentially share the web link to that file with anyone and that unregistered user can bypass logging in.
I was thinking something along the lines of download.com where when you click download, the actual files location only appears for a split second, pops up the download box, then it switches to another webaddress?
View Replies
ADVERTISEMENT
I have a website setup which also provide ability to download latest version
of our Software by logging into the webpage. All latest softwares (ONLY ONE
FILE .EXE for each Software) are located in the "/Download" folder of my
website. Customer will login to website and the ASP page decide the software
that this user has purchased and privide ONLY that Hyperlink to download the
latest Version file.
My problem is if somoe body know the path and file name then they directly
put the URL in address bar and will get latest file. How do I restrict that?
Please suggest all possible solutions.
View Replies
View Related
I am trying to convert a word document to pdf file from java for this, I am using a asp file to convert doc file to pdf. I got it working when I put the url which has file name as the query string in the browser but when I call that asp file through the java application I am getting 401 unauthorized xxx exception.
I am using weblogic 7 as the app server and IIS as the web server and Adobe acrobat 6 which has pdf distiller in it. The problem is when the asp file tries to create the Server.createObject(pdfdistiller.pdfdistiller.1), since it is a third party component, the machine doesnt allow me to create the object, I guess I am not sure, but I got it working when I put the virtual folder security anonymous user as domain admin but if i give any other user name it is giving the exception 401 unauthorized exception.
View Replies
View Related
I'm running windows 2000 profession, and i know that i can install it from control panel but i tried and it's asking me for the cd and id ont have it.
Could you give me the direct links to the IIS Download as well as the Personal Web Server download.
View Replies
View Related
I have an FTP server that I use to store documents. When a user needs to download any document the "download link" directly points to the FTP server (eg: <a href="ftp://some URL since URL are blocked">Download</a>). I want to avoid this and now have added a user name and password to the FTP sever. But instead of giving the link as "ftp://usernameassword@myftpserver.com/document.xls, I want a much secure way of letting the user download the file without letting the user know about the FTP server username and password.
View Replies
View Related
I need to log how many times one spesific file is downloaded from my
website. First I thought this could be done simply by routing via a script
that count number of downloads, and then redirect to the spesific file. But
this soultion will not work when a user right click on the file/link and
choose "save target as...". How can I solute this?
View Replies
View Related
I have an Access db with usernames and passwords set up on a web site. Upon signing in to a password protected asp page which contains a link to an exe file, the user clicks the link and the browser asks to either Open or Save the file.All this works fine, but if the user simply types the full path to in the address bar, the browser again asks the user to either Open or Save the file - thus bypassing the security Is there a way to prevent this "back door" of accessing the file or would I have to set up an FTP mechanism.
View Replies
View Related
Is it possible to log a successful/unsuccessful download in ASP? I've got a download logging system but I'm wondering if its possible to find out if a download was disconnected or not?
View Replies
View Related
I want to provide the ability to download files from a web page based on whether a user has paid for the file. I therefore need to hide the URL from the user.
How do I write code to download a file and hide its URL?
View Replies
View Related
Is it possible to detect downloads of a file on the web server? Using ASP Classic?
View Replies
View Related
I have an VB ASP page that creates, using a linked database, ad-hoc queries. Like, the user selects what table to look into, what fields, any criterias (ex: PROVINCE="QC"), etc. That part is easy.The problem is, I would like the results to be outputted in MS EXCEL. Well, it's not my idea, but I have to do it. Any ideas how this can be done?
My only idea would be that:
1) The ASP page writes to a file on the server and offer a link to the user to download that file.
2) User Downloads
3) We can't have these Excel files cluttering up the server, so the file would also have to be deleted automatically.
Is this even remotely possible?
I'm not too good with ASP, so is it even possible to write to file? Could I create a Workbook/worksheet object using VB ASP?Can I delete the file programatically
View Replies
View Related
Does anyone know of a way to be able to take 10 urls which point to zip files and then for it to download them one by one, i.e. when one has finished to then begin the next one.
This is for an asp site which is why i posted it here, but i am not sure where to post this as i dont even know how to go about doing it.
View Replies
View Related
A big problem with most server statistics is that when they count file downloads, they are counting the number of requests to the server, not complete downloads. Is it possible to count downloads more accurately?
I can use the Response.IsClientConnected command immediately after streaming the file to the browser but it's working only for files with size less then 80MB . How can I resolve this problem?
View Replies
View Related
I have a website that (like many) allows users to download large files. Some are up to several hundred MB in size. The problem is that since switching to IIS 6.0, the size of the file is limited by the ASPBufferingLimit, and it's size seems to be limited to only 4294967295 bytes.
That's pretty big but it's not quite big enough and I need to disable it. Some people have recommended setting it to -1 via:
c:
cd C:inetpubadminscripts
cscript adsutil.vbs set /w3svc/1/aspbufferinglimit -1
but the -1 doesn't really "take"...IIS keeps it at 4294967295.
Setting it to 0 does "take", but then IIS returns nothing (0 bytes).
How do I disable or workaround this security feature in IIS which is not allowing people to download large files?
View Replies
View Related
I currently need to allow users to download a series of Excel files from the intranet which were generated individually using ASP. Rather than have them click one link at a time to download only one file, I want to find out if it is possible to let them download the whole series of files with one link click.
The users are all on the LAN so bandwidth is not an issue. Furthermore, the total size of all the files is only 100kb.
View Replies
View Related
Is there a way to prevent the user from printing a page? I have a form that I would like to make it impossible or very difficult to print out.
View Replies
View Related
I am a webdesigner.We have recently taken over a site created in ASP. The site remains on the original server, but my company does the updates on the site.I do not touch the ASP at all, as I not familiar with it other then I know ASP automatically becomes html when you view it from the browser and u can save the file from there.Anyways, I edit the pages as required, new text, new photos, new links, and create new pages (any new pages I create in html if not tied to the database). I save the pages with a .asp extension and upload. This does not seem to mess anything up.
The person who hosts the site, is upset that someone else is editing the site, so he's really not easy to work with. Anyways, after uploading files, everything works fine, and then a day later, all of a sudden, any .ASP pgs you click on give the following error or similar pasted below. What I'd like to know is if these errors are because of me..and if so, how do I prevent it.
View Replies
View Related
I've got an intranet application that presents a list of files in sort of a 'central repository' web page. Each file is an href in the form
<a href=file://server/share/path/filename.ext>.
When the user clicks on an excel file,it is opening within the browser,which unforntuntely confuses the heck out of them because the usual Print/Print Preview menu options are not available. I would like the user to be presented with the typical Open/Save dialog when clicking on this link.
Is there any way that I can force the browser to do the same thing as 'Save Target As', without modifying the user mime configuration in IE (another common suggestion), or hosting the files on the web server?
View Replies
View Related
i have a form by asp and database by MS access.so i want to prevent the duplicate value in empID because when i add a new employee with the same id ASP gives me this error.
Error Type:
Microsoft OLE DB Provider for ODBC Drivers (0x80040E14)
[Microsoft][ODBC Microsoft Access Driver] The changes you requested to the table were not successful because they would create duplicate values in the index, primary key, or relationship. Change the data in the field or fields that contain duplicate data, remove the index, or redefine the index to permit duplicate entries and try again.
/employee/admin/addemp1.asp, line 48
so i want the employee to get a message like this empID already exist or somthing like this.
View Replies
View Related
I need a help to prevent resizing of <TDwhen i post inside this <TDhtml text of other web page.
View Replies
View Related
If you look around on the web for advice on cache-control and using 'Option Explicit' you get a paradox. Both features are supposed to be the first piece of ASP code on the page. Well they can't BOTH be first can they?
View Replies
View Related
What would the logic be to prevent flooding? On my forum they have a timer, so if the user has submitted a post, it starts the timer, and after 30 seconds it will allow him to post again.
When the user comments, record the date in a session (StartTime) and when the user tries again, DateDiff in seconds to see if the Now() time is more than 30 seconds after the StartTime. If it is, clear the session.
View Replies
View Related
i tried to open Window B using window.open() from Main Window. And from Window B i open another new Window C which fires up session("topic")="something"
So i tried to open another window link from Main Window, and the session("topic") value is still the same. how can i overcome it? Beacuse im using same session("Topic") var for all the sql query statement. so if 1 window is opening and another different session window start, it will overwrite it each other.
View Replies
View Related
How can I prevent posting of a form from any other site but the site the form lives on?
View Replies
View Related
How can you prevent the database error from displaying on
screen? Can you redirect users to a more friendly error
screen that is custom created. Using ASP/SQL Server. For
instance, if the database cannot be found, instead of
displaying,
Microsoft OLE DB Provider for SQL Server error '80004005'
[DBNETLIB][ConnectionOpen (Connect()).]SQL Server does not
exist or access
denied.
/myConn.asp, line 7
Can you make it to where you could display something like
this:
"I'm sorry, a database error has occured, please try your
request later, click hyperlink for list of possibilities."
View Replies
View Related
Currently i am doing a file management project where user are able to create folder and upload files to it. The file ownner would be able to set permission (from database linking to the file path) if a user able to download it or not.
*each file info will be stored into a table e.g. fileid, filename, path, access.
Now i am facing a problem where if a user does not have permission to click on the link to download, the user can guess the path and the file name and directly type the path on the address bar to download the file.
View Replies
View Related
I have a form which when submitted will validate the fields and then add the record to a database. If a mandatory field is not completed, there is an instruction to return to the form and complete the mandatory fields and then submit.
The problem I have is preventing the user from resubmitting the same form once it has been added to the database. I cannot deactivate the submit button, because if they need to return to complete mandatory fields, the submit button is still required.
I have read the article "Programming Forms To Submit Only Once" from 15seconds.com and this looks exactly what I need......
To prevent the same form from being submitted more than once we must:
Initialize the data structures.
Create a mechanism to give each form a unique identification.
Find a way to store a list of already submitted forms.
When processing a form submit, we just have to check if its ID is on the list.
I am having problems when adding the recommended code to my form and my process form pages.
View Replies
View Related
This may not be possible on the server side, so apologies if this is the
wrong group for this post.My form consists of an unknown number of pairs of text boxes. They are named textbox_a and textbox_b. I then split the comma separated list
that gets posted:
textbox_a = split(Request.Form("textbox_a"),",")
for i = ubound(textbox_a)
...insert into db
then do the same for textbox_b
If anyone puts a comma into one of the text boxes, this will result in
unmatched pairs. How can I deal with the comma, or prevent it?
View Replies
View Related
Well i am developing an application in which few pages display just images ... (*.jpg)
format ...
now what happens is that i dont want to allow the user to SAVE these images onto their
disks ... when a user RIGHT CLICKS on the images menu pops us which gives option SAVE
PICTURE AS ...
well so is there anyway i can prevent that ... i thought of following way ...
(1) If I can override the RIGHT CLICK event handler and replace it with my own custom code
in which i may just display a Messagebox say ... "you cannot save this picture" ...but the
problem is that i dont know how to override this event ...
i am using ASP with VBSCRIPT and i dont know anyother scripting language .... so plz help
someone as soon as possible ...
any other method is WELCOME but keep it in VBSCRIPT ...
View Replies
View Related
I want to prevent multiple logins in my web application. For eg:If a user "userA" logs into the application,some other user with same userid "userA" should not be allowed to login as long as previously logged in "userA" is active.
Is there any solution? One method I thought was when user logs into application,
I set a flag in table.If user logs out of application from the logout button explicitly provided in application, I reset the flag for that userid.But if user closes the application from browser(close) , I am unable to find a way to reset a flag.
View Replies
View Related
How to prevent resubmit after logout?After logout, I hit back button, then the browser ask whether I want to resend the data? How to prevent this?
View Replies
View Related
due to my 'Language for non-Unicode Setting' in Regional Settings,my ASP page keeps outputing the date format as Chinese Simplified characters when issuing say, <%=Now()%>. In addition, my client script also interpret it as Chinese characters, which I don't want it to behave this way.
However, I can't remove my 'Chinese (PRC)' settings in control panel as I need it for other Chinese version software. Does anyone knows how can I display the date in my ASP page in normal English? I did try out the META tag Content Type and put in several charset to try out, but seems like it doesn't work at all.
View Replies
View Related
I assume it has to do with cache control, but how do I prevent the form from clearing when a user hits the back button? The form I am referring to is my registration page. After the registration is submitted, they are taken to an error handling page. If an error comes up, they are required to hit the back button and correct the mistake.
It seems like for the most part it retains all of the information in the fields, but occasionally it clears it out. How can I prevent this?
View Replies
View Related
