Securing PDF & Doc files in ASP site

[nsanto17]

I have a created a site using the ASP/VB. All of my pages are secure but i just realized that all my DOCS and PDF files are not secure. Anyone who knows the path can just type in the path and access my files. Is there anything i can do to fix this?

I am using SQL.

Thanks

Nick

 

[vacunita]

Put your files outside the document root, and serve them through a script instead of through direct links.

That way the page that serves the files would have a url like:

http://www.myserver.com/fileserving.asp?somefile

You can check for login information in that script, if they aren't logged in you don't serve the file. And they can't just type the location since the files are outside the document root and you don't actually show the path to them.

You'll need to ask this in the ASP forum for a more accurate explanation on how to serve files.
forum333

----------------------------------
Ignorance is not necessarily Bliss, case in point:
Unknown has caused an Unknown Error on Unknown and must be shutdown to prevent damage to Unknown.

 

[nsanto17]

I ended up using a program WebAssist Digital File Pro to do this. Works like a charm. Only $50..