securing html files using asp

[Jennifer Smith]

Here is the situation:

My client has purchased 'software' - it really is just a series of html
documents. I need to ensure that these pages are protected and only
those who log in can view them.

I am building an asp/db based login front end to ensure that users have
paid for the system. I just do not know how to protect the files from
there because they are html. Converting them to asp is not an option.

Any ideas??

Thanks in advance for your time.

[Curt_C [MVP]]

put them in a "non-anonymous authentication" directory.
Either that or move them outside the wwwroot path and stream them to the
clients after authentiction.
Or store them in a DB and pull them on demand after authentication.

--
Curt Christianson
Owner/Lead Developer, DF-Software
www.Darkfalz.com
"Jennifer Smith" <je******@nospam.com> wrote in message
news:40***************@nospam.com...

Here is the situation:

My client has purchased 'software' - it really is just a series of html
documents. I need to ensure that these pages are protected and only
those who log in can view them.

I am building an asp/db based login front end to ensure that users have
paid for the system. I just do not know how to protect the files from
there because they are html. Converting them to asp is not an option.

Any ideas??

Thanks in advance for your time.

[Jennifer Smith]

Thanks Curt.

I have some follow up questions:

If I used non-anonymous authentication wouldn't they have to enter a second
username and password set up on the server?

Can you explain what you mean by streaming the files in? I like this one
because the files cannot be seen using the website url.

DB is not really an option at this point. There are 1000's of files, and
they will be updated regularily.

Thanks!!

"Curt_C [MVP]" wrote:

put them in a "non-anonymous authentication" directory.
Either that or move them outside the wwwroot path and stream them to the
clients after authentiction.
Or store them in a DB and pull them on demand after authentication.

--
Curt Christianson
Owner/Lead Developer, DF-Software
www.Darkfalz.com

"Jennifer Smith" <je******@nospam.com> wrote in message
news:40***************@nospam.com...

Here is the situation:

My client has purchased 'software' - it really is just a series of html
documents. I need to ensure that these pages are protected and only
those who log in can view them.

I am building an asp/db based login front end to ensure that users have
paid for the system. I just do not know how to protect the files from
there because they are html. Converting them to asp is not an option.

Any ideas??

Thanks in advance for your time.

[Curt_C [MVP]]

inline......

--
Curt Christianson
Owner/Lead Developer, DF-Software
www.Darkfalz.com
"Jennifer Smith" <je******@nospam.com> wrote in message
news:40***************@nospam.com...

Thanks Curt.

I have some follow up questions:

If I used non-anonymous authentication wouldn't they have to enter a second username and password set up on the server?
yes and no. You could pass it in with a user:pa**@www.yoursite.com
Can you explain what you mean by streaming the files in? I like this one
because the files cannot be seen using the website url.

see this http://www.darkfalz.com/1098/
DB is not really an option at this point. There are 1000's of files, and
they will be updated regularily.

That limits it down a little then.
Thanks!!

"Curt_C [MVP]" wrote:

put them in a "non-anonymous authentication" directory.
Either that or move them outside the wwwroot path and stream them to the
clients after authentiction.
Or store them in a DB and pull them on demand after authentication.

--
Curt Christianson
Owner/Lead Developer, DF-Software
www.Darkfalz.com

"Jennifer Smith" <je******@nospam.com> wrote in message
news:40***************@nospam.com...

Here is the situation:

My client has purchased 'software' - it really is just a series of html documents. I need to ensure that these pages are protected and only
those who log in can view them.

I am building an asp/db based login front end to ensure that users have paid for the system. I just do not know how to protect the files from
there because they are html. Converting them to asp is not an option.

Any ideas??

Thanks in advance for your time.

[Steven Cheng[MSFT]]

Hi Jennifer,
Thanks for posting here. As for your latest question on how to stream
file(on the server disk) in, I think that means to read a ceratin type of
file (as binary) in and then write out to the browser at runtime, yes?
Here are some kb and tech articles discussing on such topics:

#HOWTO: Use the ADODB.Stream Object to Send Binary Files to the Browser
through ASP
http://support.microsoft.com/default...b;en-us;276488

#Reading a text file in ASP
http://www.codeproject.com/asp/readfile.asp

#HOWTO: Raise a "File Download" Dialog Box for a Known MIME Type
http://support.microsoft.com/default...b;en-us;260519

#ASP File Downloading samples
http://www.devasp.com/search/default.asp?c_id=6

Hope they're helpful.
Regards,

Steven Cheng
Microsoft Online Support

Get Secure! www.microsoft.com/security
(This posting is provided "AS IS", with no warranties, and confers no
rights.)

Get Preview at ASP.NET whidbey
http://msdn.microsoft.com/asp.net/whidbey/default.aspx