473,388 Members | 1,426 Online
Bytes | Software Development & Data Engineering Community
Post Job

Home Posts Topics Members FAQ

Join Bytes to post your question to a community of 473,388 software developers and data experts.

Secure File Delivery in Web App problem...questions...

Hello - I am not sure of the best way to solve this problem:

In my web app I need to delivery both static and dynamically generated files
to end-users. These files should not be accessable to users via "url
hacking". The files are of various file types (e.g. TXT; PDF; CSV; DOC;
ZIP; etc...) -

The two approaches I can conceive of offhand are both problematic--

(1) use SQL server BLOB field to store the files. Though I dont know if all
of these types are able to be stored in SQL server's BLOB, especially ZIP?
And if so, how to stream the files from the database to the client with
different formats?

(2) develp some sort of component that can retrieve the files from a secure
directory not web accessible and stream them to the client...The production
web server is clustered (not using appserver/DFS) so where does this
component reside and how to orchestrate the file delivery? How to stream
files such as PDF and ZIP?

----

I understand that these questions and all the nuances of
design/implementation cannont readily be addressed here - but I sure would
appreciate some input...I am sure that others have struggled with (ok, so
maybe I struggle with it) -- I am sure that other more experienced and gifted
folks have worked on this problem...

Any thoughts, insights, tips, tricks, or even a happy anecdote would be very
much appreciated.

Cheerio!

TIA.
Nov 19 '05 #1
2 1353
Take a look at IHttpHandler. If you develop a class that implements
this method, you can restrict downloads to specific file types and
obscure the actual URL by hard-coding path roots.

See the following MSDN article:
http://msdn.microsoft.com/msdnmag/is...s/default.aspx

"=?Utf-8?B?bnVsbHJlZg==?=" <nu*****@discussions.microsoft.com> wrote in message news:<28**********************************@microso ft.com>...

In my web app I need to delivery both static and dynamically generated files
to end-users. These files should not be accessable to users via "url
hacking". The files are of various file types (e.g. TXT; PDF; CSV; DOC;
ZIP; etc...) -

Nov 19 '05 #2
Take a look at IHttpHandler. If you develop a class that implements
this method, you can restrict downloads to specific file types and
obscure the actual URL by hard-coding path roots.

See the following MSDN article:
http://msdn.microsoft.com/msdnmag/is...s/default.aspx

"=?Utf-8?B?bnVsbHJlZg==?=" <nu*****@discussions.microsoft.com> wrote in message news:<28**********************************@microso ft.com>...

In my web app I need to delivery both static and dynamically generated files
to end-users. These files should not be accessable to users via "url
hacking". The files are of various file types (e.g. TXT; PDF; CSV; DOC;
ZIP; etc...) -

Nov 19 '05 #3

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

7
by: ojorus | last post by:
Hello! I want to make a login system as secure as possible on a website I develop. * The user shall log on using a Username and a password (which is stored in a mySQL database) *The server...
6
by: Sarah Tanembaum | last post by:
I was wondering if it is possible to create a secure database system using RDBMS(MySQL, Oracle, SQL*Server, PostgreSQL etc) and web scripting/programming language(Perl, PHP, Ruby, Java, ASP, etc)...
6
by: Billy Jacobs | last post by:
I have a website which has both secure and non-secure pages. I want to uses forms authentication. How do I accomplish this? Originally I had my web.config file in the root with Forms...
9
by: Achim Kühn | last post by:
I´m planning to write a windows application using the .net framework. is there any way to secure the application so the user can´t easily disassemble and manipulate the application?
2
by: lpw | last post by:
I have dilligently reviewed FAQ-lite Section 3.2, "How do I pass a pointer-to-member-function to a signal handler, X event callback, system call that starts a thread/task, etc." The only...
3
by: Matt Sollars | last post by:
I've struggled with this problem, and it's lack of examples, for a couple of months now. On several different web applications that we have written, we need to communicate with a credit card...
0
by: nullref | last post by:
Hello - I am not sure of the best way to solve this problem: In my web app I need to delivery both static and dynamically generated files to end-users. These files should not be accessable to...
8
by: Daniel Crespo | last post by:
Hello everybody, I'm trying to implement a secure xmlrpc server with basis on http://aspn.activestate.com/ASPN/Cookbook/Python/Recipe/496786 recipe. The thing that I'm concerned about is how can...
3
by: Martin M. | last post by:
Hi everybody, Some of my colleagues want me to write a script for easy folder and subfolder creation on the Mac. The script is supposed to scan a text file containing directory trees in the...
0
by: ryjfgjl | last post by:
If we have dozens or hundreds of excel to import into the database, if we use the excel import function provided by database editors such as navicat, it will be extremely tedious and time-consuming...
0
by: ryjfgjl | last post by:
In our work, we often receive Excel tables with data in the same format. If we want to analyze these data, it can be difficult to analyze them because the data is spread across multiple Excel files...
0
BarryA
by: BarryA | last post by:
What are the essential steps and strategies outlined in the Data Structures and Algorithms (DSA) roadmap for aspiring data scientists? How can individuals effectively utilize this roadmap to progress...
1
by: Sonnysonu | last post by:
This is the data of csv file 1 2 3 1 2 3 1 2 3 1 2 3 2 3 2 3 3 the lengths should be different i have to store the data by column-wise with in the specific length. suppose the i have to...
0
by: Hystou | last post by:
There are some requirements for setting up RAID: 1. The motherboard and BIOS support RAID configuration. 2. The motherboard has 2 or more available SATA protocol SSD/HDD slots (including MSATA, M.2...
0
marktang
by: marktang | last post by:
ONU (Optical Network Unit) is one of the key components for providing high-speed Internet services. Its primary function is to act as an endpoint device located at the user's premises. However,...
0
by: Hystou | last post by:
Most computers default to English, but sometimes we require a different language, especially when relocating. Forgot to request a specific language before your computer shipped? No problem! You can...
0
Oralloy
by: Oralloy | last post by:
Hello folks, I am unable to find appropriate documentation on the type promotion of bit-fields when using the generalised comparison operator "<=>". The problem is that using the GNU compilers,...
0
by: Hystou | last post by:
Overview: Windows 11 and 10 have less user interface control over operating system update behaviour than previous versions of Windows. In Windows 11 and 10, there is no way to turn off the Windows...

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.