Re: Protecting files on the server.

Tech-Archive recommends: Fix windows errors by optimizing your registry

Jeff,

You could turn off anonymous access on the website and use only integrated
security. Integrated security uses encrypted user names and passwords. Then
create a username and password for your application to use when it makes the
webrequest for a file in question. You can create a Credential object that
the webrequest may use in order to authenticate to the website.

--
Sincerely,

S. Justin Gengo, MCP
Web Developer / Programmer

www.aboutfortunate.com

"Out of chaos comes order."
Nietzsche
"UJ" <fred@xxxxxxxxxxx> wrote in message
news:uOqousKBGHA.628@xxxxxxxxxxxxxxxxxxxxxxx
> Eliyahu,
> I'm not sure I understand you. That is essentilly what we already do. The
> problem is when the program goes out to our server to get the file, the
> files are unprotected on our server. I guess the question becomes how
> should I protect the files on the server so the program and only the
> program can access them.
>
> Jeff.
>
> "Eliyahu Goldin" <removemeegoldin@xxxxxxxxxxxxxx> wrote in message
> news:%23TJhdHKBGHA.1676@xxxxxxxxxxxxxxxxxxxxxxx
>> Jeff,
>>
>> Another solution is to have the users authenticated in the program and
>> have the files sitting in a local directory that the program will be the
>> only way of getting to the files from outside.
>>
>> Eliyahu
>>
>> "UJ" <fred@xxxxxxxxxxx> wrote in message
>> news:ujLN5nJBGHA.2704@xxxxxxxxxxxxxxxxxxxxxxx
>>> Folks,
>>> We provide custom content for our customers. Currently we put the files
>>> on our server and people have a program we provide that will download
>>> the files. These files are usually SWF, HTML or JPG files. The problem
>>> as I see it - if you know the name of the file, you could download it
>>> off the server (currently we are using an HTTP/Get but I'm going to be
>>> using WebClient in the new version.)
>>>
>>> If there any way to password protect the file so people can't just
>>> download them even if they know the file name?
>>>
>>> The solutions I've come up with are:
>>>
>>> 1. Store the file in the database as a blob and read it (but this could
>>> get slow as we will eventually add video which could get really big - up
>>> to 100MB).
>>>
>>> 2. Write a web service that will transfer the file back that has a
>>> password on it.
>>>
>>> Any other suggestions?
>>>
>>> TIA - Jeff
>>>
>>>
>>
>>
>
>


.

Relevant Pages

  • Enable Bandwidth throttling programmatically using WMI in C#
    ... Does anybody has the script to add Bandwidth throttling and Website ... public string IPAddress ... /// Gets or sets the name of the IIS server that site ... ManagementObject ...
    (microsoft.public.win32.programmer.wmi)
  • Re: Permission Problems SBS2003 R1
    ... website on the SBS server? ... Default permissions and user rights for IIS 6.0 ... Step 3: Please check the permissions in IIS manager: ... Step 4: Re-running CEICW on SBS server: ...
    (microsoft.public.windows.server.sbs)
  • 85010014 error - Exchange ActiveSync - Resolved
    ... Application Log on our server would be filled with those ActiveSync 3005: ... It basically all comes down to the basics of Windows DNS, how SSL ... and our Default Website could only properly respond to ONE IP ... SSL host header using port 443 with our SSL cert. ...
    (microsoft.public.exchange.connectivity)
  • 85010014 error - resolved - ActiveSync Exchange Server
    ... Application Log on our server would be filled with those ActiveSync 3005: ... It basically all comes down to the basics of Windows DNS, how SSL ... and our Default Website could only properly respond to ONE IP ... SSL host header using port 443 with our SSL cert. ...
    (microsoft.public.pocketpc.activesync)
  • Re: Basic Authentication + IIS 5 + Windows 2000 + Frontpage 2002 = failure?
    ... > By this, I mean, usually, on the basic logon screen of a server, I see ... >>;) under the website in question, enabling only Basic authentication. ... and can use the local administrator account to successfully ...
    (microsoft.public.inetserver.iis.security)