>Can anyone either point out any major problems with this approach, or > >alternatively (preferably), suggest a better alternative ? > >In case it makes any difference to peoples ideas/views, I am not using Apache > >for access control. Users authenticate against a database, then on each page > >they visit, their user level (taken from the session object) is checked > >against the access level required for that page. > > > Since You already have the users level is the Session object, you can > have an asp handle the downloads, like this: > - check if the user has the required level. > - set $Response->{ContentType} to whatever it is you want > - open the (out of the webroot) file and while reading it, output to > the client.
--- Sorry for taking so long to reply, but I had email "issues". Thanks for this suggestion - it sounds like it will probably be just what I need. I have one further question though. Is there a list somewhere of all the "ContentTypes". Eg, if I am sending a word document, or a PDF, what is the content type ? Thanks Richard --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]