protect physical files

[beachboy]

Hello all,

I have a private section for members, and all page contents are protected by
login.
Is any way/method I can protect all files (doc, jpg, pdf) from physical
access, e.g: user can type the full path in address bar on IE, then they can
view the doc.

C# | .NET Framework 1.1

Thanks in advanced.

[Steven Nagy]

Remove the ASPNET account from having access to the folder where those
items exist.
Create another account that does have access.
Have your application authenticate as the second account when
retrieving the files

There's also the option of having the files in a database instead of
file locations as well.

There is probably a better way to do it though thats all I could come
up with.

[Kevin Spencer]

Are you talking about ASPX pages or HTML pages? If you're talking about ASPX
pages, there's plenty of built-in support in the ASP.Net Framework for doing
this. For static (HTML) pages, the pages themselves should not be in a
folder which can be browsed anonymously, and rather than having them served
directly, have an ASPX page read them and return the content to the client.

--
HTH,

Kevin Spencer
Microsoft MVP
..Net Developer
A brute awe as you,
a Metallic hag entity, eat us.
"beachboy" <st*****@javaca tz.com> wrote in message
news:%2******** *******@TK2MSFT NGP12.phx.gbl.. .

Hello all,

I have a private section for members, and all page contents are protected
by
login.
Is any way/method I can protect all files (doc, jpg, pdf) from physical
access, e.g: user can type the full path in address bar on IE, then they
can
view the doc.

C# | .NET Framework 1.1

Thanks in advanced.