[thelist] IIS file/directory access

[Chris Harrington]

One Solution is to wrap access to the files with ASP so that you can check
in ASP if the user has an authenticated session.  You will need to write a
small VB object to read whatever binary file you are serving out. And you
will need to set the ContentType correctly. But this will definitely work -
I do this often.  If it would be helpful I can post or email the VB source.

Chris Harrington

At 07:59 PM 5/23/2002 -0700, you wrote:
>I have a client that needs to be able to deliver .doc and .pdf files
>to users, but only after they have registered.
>
>The concern  is that once one user knows the link to the document -
>like "http://www.somedomain.com/files/thefile.pdf", then they could
>give that link out to anybody.
>
>I've done plenty of "password protected" pages with ASP, but since
>these are not .asp pages that solution doesn't work.
>
>What I'm looking for is the same function as .htaccess on a
>Linux/Apache system, but on an IIS 4.0/NT 4.0 server.
>
>As I understand it, NT Challenge/Response isn't really a solution
>since there will be hundreds (thousands maybe) of users needing to
>download these files, but they should not/could not be added as users
>on the NT server.
>
>Any ideas or references on how to solve this?
>
>Best, Joel Morris
>-------------------------------
>CityCenter Co.
>Website Development & Marketing
>http://www.citycent.com
>mailto:joelm at citycent.com
>
>--
>For unsubscribe and other options, including
>the Tip Harvester and archive of thelist go to:
>http://lists.evolt.org Workers of the Web, evolt !


Chris Harrington
Active Interface, Inc.
www.intrasight.com
Ph: 412-901-1184
Fax: 412-799-0927