Ideas needed! Password protect a file download.

2003-11-16 Thread Jeff Fongemie
Hey everyone, 
Very soon I'll need to set up a system that will let users download files. The users will need to be logged in, so I'll be checking for a username and password before I let them download the file. The part I'm not sure about is protecting the file itself. I want the file to be protected so no one can brows to it by http. Someting similar to download.com, where the file just starts downloading automaticly would be great. 

How do they (download.com) have the file auto-download without a user having to right click on the file??

Any suggestions toward any of this would be most helpful.

Thanks!

Jeff
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




RE: Ideas needed! Password protect a file download.

2003-11-16 Thread Paul Vernon
> The part I'm not sure about is protecting the file itself. I want the
file to be protected so no one can brows to it by http. 

Jeff,

A bit of pseudo code for you.


    
    
value="attachment;filename=thefilenamethatyouwanttheusertosee">
    
type="putyourmimetypehere">

    Access denied!


Put this into a .cfm file and try it out.. Obviously, you need to set
the filenames and mime types correctly.. I use a piece of code like this
for zip files on our server. The getproductquery basically contains the
filename of the file I want to send to the user.


value="attachment;filename=#Trim(getproduct.Filename)#">

file="#GetDirectoryFromPath(GetCurrentTemplatePath())##Trim(getproduct.F
ilename)#" type="application/x-zip-compressed">

Yours

Paul Vernon
http://www.web-architect.co.uk  
t: +44 (0)844 779 9797
m: +44 (0)7887 952591
f: +44 (0)844 779 9797
e: mailto:[EMAIL PROTECTED]
 

The information contained in this e-mail and any attachment is intended
only for the named addressee(s). If you are not the named addressee(s),
please notify the sender immediately and do not disclose, copy or
distribute the contents to any other person other than the intended
addressee(s).

 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




Re: Ideas needed! Password protect a file download.

2003-11-16 Thread Tom Kitta
What you need is cfcontent tag. Set standard security in application.cfm file. Once user is logged in create a page under application.cfm control called download.cfm. In that file place cfcontent tag set for the file you wish user to get. User selects what he wants from index.cfm and gets redirected to download.cfm where download of his choice starts automatically.

TK
  - Original Message - 
  From: Jeff Fongemie 
  To: CF-Talk 
  Sent: Sunday, November 16, 2003 11:33 AM
  Subject: Ideas needed! Password protect a file download.

  Hey everyone, 
  Very soon I'll need to set up a system that will let users download files. The users will need to be logged in, so I'll be checking for a username and password before I let them download the file. The part I'm not sure about is protecting the file itself. I want the file to be protected so no one can brows to it by http. Someting similar to download.com, where the file just starts downloading automaticly would be great. 

  How do they (download.com) have the file auto-download without a user having to right click on the file??

  Any suggestions toward any of this would be most helpful.

  Thanks!

  Jeff

 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




RE: Ideas needed! Password protect a file download.

2003-11-16 Thread Philip Arnold
Use CFContent to pass the file to the user, but have it behind a login
type thing - then you can check that the user has rights to the relevant
file

 
With CFContent you can place the files anywhere on the hard disk, so
they can be nowhere near the browsable area

-Original Message-
From: Jeff Fongemie [mailto:[EMAIL PROTECTED] 
Sent: Sunday, November 16, 2003 11:34 AM
To: CF-Talk
Subject: Ideas needed! Password protect a file download.

Hey everyone, 
Very soon I'll need to set up a system that will let users download
files. The users will need to be logged in, so I'll be checking for a
username and password before I let them download the file. The part I'm
not sure about is protecting the file itself. I want the file to be
protected so no one can brows to it by http. Someting similar to
download.com, where the file just starts downloading automaticly would
be great. 

How do they (download.com) have the file auto-download without a user
having to right click on the file??

Any suggestions toward any of this would be most helpful.

Thanks!

Jeff 
  _  


 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




RE: Ideas needed! Password protect a file download.

2003-11-16 Thread Kwang Suh
If you put the downloadable files into the web root, then they're not at all
protectable by CF.

 
Downloadable files need to be placed somewhere off the web root.

-Original Message-
From: Paul Vernon [mailto:[EMAIL PROTECTED] 
Sent: November 16, 2003 10:41 AM
To: CF-Talk
Subject: RE: Ideas needed! Password protect a file download.

> The part I'm not sure about is protecting the file itself. I want the
file to be protected so no one can brows to it by http. 

Jeff,

A bit of pseudo code for you.


    
    
value="attachment;filename=thefilenamethatyouwanttheusertosee">
    
type="putyourmimetypehere">

    Access denied!


Put this into a .cfm file and try it out.. Obviously, you need to set
the filenames and mime types correctly.. I use a piece of code like this
for zip files on our server. The getproductquery basically contains the
filename of the file I want to send to the user.


value="attachment;filename=#Trim(getproduct.Filename)#">

file="#GetDirectoryFromPath(GetCurrentTemplatePath())##Trim(getproduct.F
ilename)#" type="application/x-zip-compressed">

Yours

Paul Vernon
http://www.web-architect.co.uk  
t: +44 (0)844 779 9797
m: +44 (0)7887 952591
f: +44 (0)844 779 9797
e: mailto:[EMAIL PROTECTED]
 

The information contained in this e-mail and any attachment is intended
only for the named addressee(s). If you are not the named addressee(s),
please notify the sender immediately and do not disclose, copy or
distribute the contents to any other person other than the intended
addressee(s).

  _  


 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]




RE: Ideas needed! Password protect a file download.

2003-11-16 Thread Michael T. Tangorre
Thats why I love hostmysite.com for my CF hosting needs.. They allow the
tags!

  _  

From: Jeff Fongemie [mailto:[EMAIL PROTECTED] 
Sent: Sunday, November 16, 2003 5:00 PM
To: CF-Talk
Subject: Re:Ideas needed! Password protect a file download.

You guys are fantastic. I just talked to the crummy isp for the site and it
looks like it may take some work to get them to allow me to use the
cfcontent tag, but they are considering it. Looks like it is the way to go.

I'll report back if I can get them to switch it back on.

Thanks!!! 
  _  


 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]