>If your concerned about the security of the files and other people >downloading them, why not password protect the download folder, so that >users need a password to get the files. >I'm sure HMS must provide such a facility. >We use IISPASSWORD for this.
I could, but that wasn't really a feasible solution for me. First, I personally don't care for making the customer enter another username/password if I can avoid it, since they already have logged in to access their download file list. Second, I was looking for a solution that will work for purchasers of my ecommerce software as well. Anything that requires setting something up on the server, or that is OS-specific, is not going to work well. Using a temporary directory creating with a UUID I think will work well enough, it's certainly not likely someone is going to guess the file location. If the merchant has really super-sensitive files they can certainly easily modify the code to include password protection as you suggest. --- Mary Jo ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Create robust enterprise, web RIAs. Upgrade & integrate Adobe Coldfusion MX7 with Flex 2 http://ad.doubleclick.net/clk;56760587;14748456;a?http://www.adobe.com/products/coldfusion/flex2/?sdid=LVNU Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:265506 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4