i meant {B3204294203942} is actually user session id.On 5/13/09, Gunawan Hadikusumo <[email protected]> wrote: > my advise is to create a folder using GUID. It is hard to try or to > guest. And use Rewrite URL to hide the exact location of the file. so > if the actual file is on > http://www.test.com/b92932-24201-uy224-34byws/abc.xls, use re-write > url technique into http://www.test.com/{B3204294203942}/abc.xls. the > {B3204294203942} is actually user session. > > On 5/12/09, CallMeLaNN <[email protected]> wrote: >> >> There is no way by coding. >> >> Your prob is related to host setting. Find the setting so that user >> can't directly access the file. >> >> Do you use ASP.NET hosting? >> >> If yes you can trick like: >> >> Put the file in special folder. set the ASP.NET access rule to the >> folder so that only logged in user can access the folder. >> (recommended) >> >> Another way, try use URL mapping, the ~/orders/9May2009.xls will map >> to ~/orders/75874392748374/9May2009.xls (wrong dummy location). User >> might see 404 file not found. >> >> >> On May 11, 2:04 pm, jack me <[email protected]> wrote: >>> Thanks a lot, Sorry i did not mention i need this with coding. >>> >>> On Sun, May 10, 2009 at 1:11 AM, anna simookhin >>> <[email protected]>wrote: >>> >>> > in your host configuration, search an option like "deny direct access >>> > to >>> > files" and check it. it will deny direct access to your files by >>> > browsing. >> >
