This won't protect the actual files themselves once a valid user has
downloaded them, i.e.. they could easily just re-distribute the PDF
files themselves.... but you could protect the initial downloads using
the Fusebox security model...
For example, if you purchase the Fusebox ebook, it will assign you to
the group number 13, then you will be able to download the PDF file.
<cfswitch expression="#attributes.fuseaction#">
<cfcase value="ebook">
<cfmodule template="../../members/app_secure.cfm"
message="You must purchase the Fusebox book first before you
may
access this"
groups=13>
<cfcontent deletefile="No" file="#request.downloadroot#\ebook.pdf"
type="application/pdf">
</cfcase>
....
</cfswitch>
There is a powerpoint presentation on this security model at:
http://www.fusebox.org/content/index.cfm?fuseaction=presentations
We're doing a little research to secure the download from being
redistributed, but we may have to just trust that the file won't get
bootlegged. This tool looks promising:
http://www.pdfstore.com/mainpage.asp?webpageid=216&pdfsproductid=1413
Steve
John Lucas wrote:
>
> I have a site that is going to use cf to provide user authentication for the
> secure area of the website. That part is the easy one.
>
> In this secure area, there are going to be some PDF files that can be viewed
> by the user as long as they remain a distributor for the company. Once they
> are no longer a distributor, they would no longer have access to these
> files.
>
> So, it would be easy to control whether they can log in or not to the site,
> but is there any way to protect the PDF files since they are not coldfusion
> files. What we want to be able to do is prevent bookmarked PDF files from
> being viewed without being logged in.
>
> I realize that if the user were to save the PDF file locally or print it
> while they had access to the files, that there is no way to control that.
> And, that is fine.
>
> Is there a way to protect non-cf files using CF?
>
> Hopefully this makes some sense.
>
> Thanks,
> John Lucas
> [EMAIL PROTECTED]
>
> ------------------------------------------------------------------------------
> To Unsubscribe visit
>http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/fusebox or send a
>message to [EMAIL PROTECTED] with 'unsubscribe' in the body.
------------------------------------------------------------------------------
To Unsubscribe visit
http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/fusebox or send a
message to [EMAIL PROTECTED] with 'unsubscribe' in the body.
