Re: Password Protected File Downloads
In my intranet, I created a directory outside the webroot and gave it no permissions except to the system account. Then I use cfcontent to push the file to the user (after being authenticated via cf). > What is the most efficient way to provide files for download to a client > after username/password authentication *without* using NT Authentication. > > The simple way is to validate the user using CF and then just display the > documents using CFDirectory, but, if anyone know the URL to the document, > they can bypass the cfm template altogether. I was thinking about randomly > renaming documents and storing the filenames in a DB, but that seems sloppy > too. > > This client is currently in a virtual hosting environment, so adding > directory security seems out of the question. > > Any thoughts would be greatly appreciated. > > TIA, > > - jim > > > __ Get the mailserver that powers this list at http://www.coolfusion.com FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
RE: Password Protected File Downloads
that's how I've done it. Also allows you to log file access and such... -Original Message- From: Haggerty, Michael A. [mailto:[EMAIL PROTECTED]] Sent: Thursday, March 21, 2002 1:14 PM To: CF-Talk Subject: RE: Password Protected File Downloads Use CFCONTENT to serve up the actual document and store the file in a subdirectory somewhere off the root. That would be my guess. M -Original Message- From: Jim Curran [mailto:[EMAIL PROTECTED]] Sent: Thursday, March 21, 2002 2:54 PM To: CF-Talk Subject: Password Protected File Downloads Hey all, What is the most efficient way to provide files for download to a client after username/password authentication *without* using NT Authentication. The simple way is to validate the user using CF and then just display the documents using CFDirectory, but, if anyone know the URL to the document, they can bypass the cfm template altogether. I was thinking about randomly renaming documents and storing the filenames in a DB, but that seems sloppy too. This client is currently in a virtual hosting environment, so adding directory security seems out of the question. Any thoughts would be greatly appreciated. TIA, - jim __ This list and all House of Fusion resources hosted by CFHosting.com. The place for dependable ColdFusion Hosting. FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
RE: Password Protected File Downloads
Thanks Bryan and Mike, Works perfectly. - j __ This list and all House of Fusion resources hosted by CFHosting.com. The place for dependable ColdFusion Hosting. FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
RE: Password Protected File Downloads
What about in digital asset distribution, such as ESD's? Does CFCONTENT store the file in memory before it serves it to the client? If so, then won't your server crash (or will the user just experience a long wait before the data is sent) if you have 15 clients downloading an 80 MB file at one time? Or does CFCONTENT stream the file data? Thoughts? -- SCOTT VAN VLIET SENIOR ANALYST SBC SERVICES, INC Tel: 858.886.3878 Fax: 858.653.6763 Email: [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> -Original Message- From: Chambers, Bryan (NE) [mailto:[EMAIL PROTECTED]] Sent: Thursday, March 21, 2002 12:55 PM To: CF-Talk Subject: RE: Password Protected File Downloads Hi Jim, CFCONTENT may be the way to go to serve up the files. The files to be downloaded would sit outside of the webroot so it would be impossible to get to them by typing in a URL. -Bryan -Original Message- From: Jim Curran [mailto:[EMAIL PROTECTED]] Sent: Thursday, March 21, 2002 2:54 PM To: CF-Talk Subject: Password Protected File Downloads Hey all, What is the most efficient way to provide files for download to a client after username/password authentication *without* using NT Authentication. The simple way is to validate the user using CF and then just display the documents using CFDirectory, but, if anyone know the URL to the document, they can bypass the cfm template altogether. I was thinking about randomly renaming documents and storing the filenames in a DB, but that seems sloppy too. This client is currently in a virtual hosting environment, so adding directory security seems out of the question. Any thoughts would be greatly appreciated. TIA, - jim __ Structure your ColdFusion code with Fusebox. Get the official book at http://www.fusionauthority.com/bkinfo.cfm FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
RE: Password Protected File Downloads
Hi Jim, CFCONTENT may be the way to go to serve up the files. The files to be downloaded would sit outside of the webroot so it would be impossible to get to them by typing in a URL. -Bryan -Original Message- From: Jim Curran [mailto:[EMAIL PROTECTED]] Sent: Thursday, March 21, 2002 2:54 PM To: CF-Talk Subject: Password Protected File Downloads Hey all, What is the most efficient way to provide files for download to a client after username/password authentication *without* using NT Authentication. The simple way is to validate the user using CF and then just display the documents using CFDirectory, but, if anyone know the URL to the document, they can bypass the cfm template altogether. I was thinking about randomly renaming documents and storing the filenames in a DB, but that seems sloppy too. This client is currently in a virtual hosting environment, so adding directory security seems out of the question. Any thoughts would be greatly appreciated. TIA, - jim __ Get the mailserver that powers this list at http://www.coolfusion.com FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
RE: Password Protected File Downloads
Use CFCONTENT to serve up the actual document and store the file in a subdirectory somewhere off the root. That would be my guess. M -Original Message- From: Jim Curran [mailto:[EMAIL PROTECTED]] Sent: Thursday, March 21, 2002 2:54 PM To: CF-Talk Subject: Password Protected File Downloads Hey all, What is the most efficient way to provide files for download to a client after username/password authentication *without* using NT Authentication. The simple way is to validate the user using CF and then just display the documents using CFDirectory, but, if anyone know the URL to the document, they can bypass the cfm template altogether. I was thinking about randomly renaming documents and storing the filenames in a DB, but that seems sloppy too. This client is currently in a virtual hosting environment, so adding directory security seems out of the question. Any thoughts would be greatly appreciated. TIA, - jim __ Structure your ColdFusion code with Fusebox. Get the official book at http://www.fusionauthority.com/bkinfo.cfm FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
