RE: Password access for PDF files
Then it is most definitely the way I'd go. Give a shout if you have any trouble with it. ..:.:.:.:.:.:.:.:.:.:.:.:. Bobby Hartsfield http://acoderslife.com -Original Message- From: Andy Matthews [mailto:[EMAIL PROTECTED] Sent: Wednesday, September 06, 2006 1:02 PM To: CF-Talk Subject: RE: Password access for PDF files I don't mind that actually. -Original Message- From: Bobby Hartsfield [mailto:[EMAIL PROTECTED] Sent: Wednesday, September 06, 2006 11:44 AM To: CF-Talk Subject: RE: Password access for PDF files Oops... That will force the user to download the file not open it in their browser. :.:.:.:.:.:.:.:.:.:.:.:. Bobby Hartsfield http://acoderslife.com -- No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.1.405 / Virus Database: 268.11.7/438 - Release Date: 9/5/2006 ~| Introducing the Fusion Authority Quarterly Update. 80 pages of hard-hitting, up-to-date ColdFusion information by your peers, delivered to your door four times a year. http://www.fusionauthority.com/quarterly Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:252244 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
RE: Password access for PDF files
I don't mind that actually. -Original Message- From: Bobby Hartsfield [mailto:[EMAIL PROTECTED] Sent: Wednesday, September 06, 2006 11:44 AM To: CF-Talk Subject: RE: Password access for PDF files Oops... That will force the user to download the file not open it in their browser. ...:.:.:.:.:.:.:.:.:.:.:.:. Bobby Hartsfield http://acoderslife.com -Original Message- From: Bobby Hartsfield [mailto:[EMAIL PROTECTED] Sent: Wednesday, September 06, 2006 12:39 PM To: CF-Talk Subject: RE: Password access for PDF files First store the files you want to 'lock' outside of the webroot so no one is going to guess a link to them or share it once they have downloaded it. Next, write a form that asks for all the information you want to store in the database. When the form is submitted, validate your fields and then use cfheader and cfcontent to push the file to the user I use a random file name to give the user so they dont even know the original file name (like it matters since they are stored outside the webroot though) So basically... :.:.:.:.:.:.:.:.:.:.:.:. Bobby Hartsfield http://acoderslife.com -Original Message- From: Andy Matthews [mailto:[EMAIL PROTECTED] Sent: Wednesday, September 06, 2006 11:27 AM To: CF-Talk Subject: Password access for PDF files I'm working on a simple access for PDF files and HTML page on my client's website. There's nothing sensitive about them, they just want to start collecting user info. So my thought is to have an intermediate page which checks to see if the user is logged in; stores info about the "view" in the database; then redirects the user to the page/file. Problem is that I just tried it and it tried to view it in the browser, not just the PDF but the underlying source code. So I'm wondering what might be the best way to do this. My requirements are: 1) User must log in to view anything inside the "library". At this point the various files and pages are in various directories, but if needed I could consolidate them all into a "library" directory. 2) Store information about the "view" in the database. 3) Redirect user to the appropriate file. Thoughts? ~| Introducing the Fusion Authority Quarterly Update. 80 pages of hard-hitting, up-to-date ColdFusion information by your peers, delivered to your door four times a year. http://www.fusionauthority.com/quarterly Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:252239 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
RE: Password access for PDF files
Oops... That will force the user to download the file not open it in their browser. ..:.:.:.:.:.:.:.:.:.:.:.:. Bobby Hartsfield http://acoderslife.com -Original Message- From: Bobby Hartsfield [mailto:[EMAIL PROTECTED] Sent: Wednesday, September 06, 2006 12:39 PM To: CF-Talk Subject: RE: Password access for PDF files First store the files you want to 'lock' outside of the webroot so no one is going to guess a link to them or share it once they have downloaded it. Next, write a form that asks for all the information you want to store in the database. When the form is submitted, validate your fields and then use cfheader and cfcontent to push the file to the user I use a random file name to give the user so they dont even know the original file name (like it matters since they are stored outside the webroot though) So basically... ...:.:.:.:.:.:.:.:.:.:.:.:. Bobby Hartsfield http://acoderslife.com -Original Message- From: Andy Matthews [mailto:[EMAIL PROTECTED] Sent: Wednesday, September 06, 2006 11:27 AM To: CF-Talk Subject: Password access for PDF files I'm working on a simple access for PDF files and HTML page on my client's website. There's nothing sensitive about them, they just want to start collecting user info. So my thought is to have an intermediate page which checks to see if the user is logged in; stores info about the "view" in the database; then redirects the user to the page/file. Problem is that I just tried it and it tried to view it in the browser, not just the PDF but the underlying source code. So I'm wondering what might be the best way to do this. My requirements are: 1) User must log in to view anything inside the "library". At this point the various files and pages are in various directories, but if needed I could consolidate them all into a "library" directory. 2) Store information about the "view" in the database. 3) Redirect user to the appropriate file. Thoughts? ~| Introducing the Fusion Authority Quarterly Update. 80 pages of hard-hitting, up-to-date ColdFusion information by your peers, delivered to your door four times a year. http://www.fusionauthority.com/quarterly Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:252235 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
RE: Password access for PDF files
First store the files you want to 'lock' outside of the webroot so no one is going to guess a link to them or share it once they have downloaded it. Next, write a form that asks for all the information you want to store in the database. When the form is submitted, validate your fields and then use cfheader and cfcontent to push the file to the user I use a random file name to give the user so they dont even know the original file name (like it matters since they are stored outside the webroot though) So basically... ..:.:.:.:.:.:.:.:.:.:.:.:. Bobby Hartsfield http://acoderslife.com -Original Message- From: Andy Matthews [mailto:[EMAIL PROTECTED] Sent: Wednesday, September 06, 2006 11:27 AM To: CF-Talk Subject: Password access for PDF files I'm working on a simple access for PDF files and HTML page on my client's website. There's nothing sensitive about them, they just want to start collecting user info. So my thought is to have an intermediate page which checks to see if the user is logged in; stores info about the "view" in the database; then redirects the user to the page/file. Problem is that I just tried it and it tried to view it in the browser, not just the PDF but the underlying source code. So I'm wondering what might be the best way to do this. My requirements are: 1) User must log in to view anything inside the "library". At this point the various files and pages are in various directories, but if needed I could consolidate them all into a "library" directory. 2) Store information about the "view" in the database. 3) Redirect user to the appropriate file. Thoughts? ~| Introducing the Fusion Authority Quarterly Update. 80 pages of hard-hitting, up-to-date ColdFusion information by your peers, delivered to your door four times a year. http://www.fusionauthority.com/quarterly Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:252233 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Re: Password access for PDF files
The ISAPI rewrite would catch ALL instances of ".pdf" or whatever you script it to: So , www.domain.com/test.pdf would be caught, rewritten to: www.domain.com/library/downloads.cfm?file=test.pdf The file string could then be parsed, checked in a databse, and then served if approved. You'd have to put an exception in the http.ini file to prevent the Filter from re-catching the ".pdf" in the ?file= string though! T On 6 Sep 2006, at 16:36, Andy Matthews wrote: > Right. I'm planning on some system setups to make sure that people > can't > link directly to the file. How would this work though with > alternate file > types? For example, all but 3 or 4 of my newsletters are PDF. The > other 3 or > 4 are plain Coldfusion pages. > > andy matthews > web developer > certified advanced coldfusion programmer > ICGLink, Inc. > [EMAIL PROTECTED] > 615.370.1530 x737 > --//-> > > -Original Message- > From: Tom King [mailto:[EMAIL PROTECTED] > Sent: Wednesday, September 06, 2006 10:32 AM > To: CF-Talk > Subject: Re: Password access for PDF files > > > Add an Isapi rewrite to redirect all .pdfs to a page like library.cfm? > file=filename.ext > > Then you can log the filename and any other info in a database, and > then serve the file via CFHEADER.? > > T > > > > On 6 Sep 2006, at 16:26, Andy Matthews wrote: > >> I'm working on a simple access for PDF files and HTML page on my >> client's >> website. There's nothing sensitive about them, they just want to >> start >> collecting user info. So my thought is to have an intermediate page >> which >> checks to see if the user is logged in; stores info about the >> "view" in the >> database; then redirects the user to the page/file. Problem is that >> I just >> tried it and it tried to view it in the browser, not just the PDF >> but the >> underlying source code. >> >> So I'm wondering what might be the best way to do this. My >> requirements are: >> >> 1) User must log in to view anything inside the "library". At this >> point the >> various files and pages are in various directories, but if needed I >> could >> consolidate them all into a "library" directory. >> >> 2) Store information about the "view" in the database. >> >> 3) Redirect user to the appropriate file. >> >> >> Thoughts? >> >> > andy matthews >> web developer >> certified advanced coldfusion programmer >> ICGLink, Inc. >> [EMAIL PROTECTED] >> 615.370.1530 x737 >> --//-> >> >> >> > > > > ~| Introducing the Fusion Authority Quarterly Update. 80 pages of hard-hitting, up-to-date ColdFusion information by your peers, delivered to your door four times a year. http://www.fusionauthority.com/quarterly Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:252220 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
RE: Password access for PDF files
Right. I'm planning on some system setups to make sure that people can't link directly to the file. How would this work though with alternate file types? For example, all but 3 or 4 of my newsletters are PDF. The other 3 or 4 are plain Coldfusion pages. -Original Message- From: Tom King [mailto:[EMAIL PROTECTED] Sent: Wednesday, September 06, 2006 10:32 AM To: CF-Talk Subject: Re: Password access for PDF files Add an Isapi rewrite to redirect all .pdfs to a page like library.cfm? file=filename.ext Then you can log the filename and any other info in a database, and then serve the file via CFHEADER.? T On 6 Sep 2006, at 16:26, Andy Matthews wrote: > I'm working on a simple access for PDF files and HTML page on my > client's > website. There's nothing sensitive about them, they just want to start > collecting user info. So my thought is to have an intermediate page > which > checks to see if the user is logged in; stores info about the > "view" in the > database; then redirects the user to the page/file. Problem is that > I just > tried it and it tried to view it in the browser, not just the PDF > but the > underlying source code. > > So I'm wondering what might be the best way to do this. My > requirements are: > > 1) User must log in to view anything inside the "library". At this > point the > various files and pages are in various directories, but if needed I > could > consolidate them all into a "library" directory. > > 2) Store information about the "view" in the database. > > 3) Redirect user to the appropriate file. > > > Thoughts? > > andy matthews > web developer > certified advanced coldfusion programmer > ICGLink, Inc. > [EMAIL PROTECTED] > 615.370.1530 x737 > --//-> > > > ~| Introducing the Fusion Authority Quarterly Update. 80 pages of hard-hitting, up-to-date ColdFusion information by your peers, delivered to your door four times a year. http://www.fusionauthority.com/quarterly Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:252219 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Re: Password access for PDF files
Add an Isapi rewrite to redirect all .pdfs to a page like library.cfm? file=filename.ext Then you can log the filename and any other info in a database, and then serve the file via CFHEADER.? T On 6 Sep 2006, at 16:26, Andy Matthews wrote: > I'm working on a simple access for PDF files and HTML page on my > client's > website. There's nothing sensitive about them, they just want to start > collecting user info. So my thought is to have an intermediate page > which > checks to see if the user is logged in; stores info about the > "view" in the > database; then redirects the user to the page/file. Problem is that > I just > tried it and it tried to view it in the browser, not just the PDF > but the > underlying source code. > > So I'm wondering what might be the best way to do this. My > requirements are: > > 1) User must log in to view anything inside the "library". At this > point the > various files and pages are in various directories, but if needed I > could > consolidate them all into a "library" directory. > > 2) Store information about the "view" in the database. > > 3) Redirect user to the appropriate file. > > > Thoughts? > > andy matthews > web developer > certified advanced coldfusion programmer > ICGLink, Inc. > [EMAIL PROTECTED] > 615.370.1530 x737 > --//-> > > > ~| Introducing the Fusion Authority Quarterly Update. 80 pages of hard-hitting, up-to-date ColdFusion information by your peers, delivered to your door four times a year. http://www.fusionauthority.com/quarterly Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:252218 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Password access for PDF files
I'm working on a simple access for PDF files and HTML page on my client's website. There's nothing sensitive about them, they just want to start collecting user info. So my thought is to have an intermediate page which checks to see if the user is logged in; stores info about the "view" in the database; then redirects the user to the page/file. Problem is that I just tried it and it tried to view it in the browser, not just the PDF but the underlying source code. So I'm wondering what might be the best way to do this. My requirements are: 1) User must log in to view anything inside the "library". At this point the various files and pages are in various directories, but if needed I could consolidate them all into a "library" directory. 2) Store information about the "view" in the database. 3) Redirect user to the appropriate file. Thoughts? ~| Introducing the Fusion Authority Quarterly Update. 80 pages of hard-hitting, up-to-date ColdFusion information by your peers, delivered to your door four times a year. http://www.fusionauthority.com/quarterly Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:252217 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
