Click here to Skip to main content
12,444,376 members (49,511 online)
Click here to Skip to main content
Add your own
alternative version

Tagged as

Stats

10.2K views
13 bookmarked
Posted

Limit Access Rights to download a file in ASP.NET

, 22 Feb 2010 CPOL
Rate this:
Please Sign up or sign in to vote.
If you want to keep a downloadable file private to end users / customers with their username and password, everyone suggests not to put the file in the web root directory, and gives you a suggestion to change IIS settings and use Response.TransmitFile. When you are not having access to the...
If you want to keep a downloadable file private to end users / customers with their username and password, everyone suggests not to put the file in the web root directory, and gives you a suggestion to change IIS settings and use Response.TransmitFile. When you are not having access to the server, then it will be a difficult task for you.

Where you are not having access to the server and you are permitted to upload files under your web directory only, here are some simple steps for you to restrict access to files with username and password.

Say file myfile.zip is to be downloaded with a usersname/password validation.

Step 1: Rename myfile.zip with myfile.config.
Step 2: Create a page to enter username and password.
Step 3: If username and password are valid, then use the below code to transfer the file.

if (isValidUser)
{
    Response.Clear();
    Response.ContentType = @"application/setup";
    Response.AppendHeader(@"Content-Disposition", ("attachment; filename=myfile.zip"));
    Response.TransmitFile(@"myfile.config");
    Response.End();
}
else
{
    // prompt the web user with some message of access privileges
}


No server access is required to implement this trick. The only workaround in this is that ASP.NET will not allow access to files with extension .config.

You are done.
Any suggestions are highly appreciated.

License

This article, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

Share

About the Author

Ravi LVS
India India
No Biography provided

You may also be interested in...

Pro
Pro

Comments and Discussions

 
QuestionAbsolute BOGUS / Rubish Pin
nahid47712-Jul-12 20:52
membernahid47712-Jul-12 20:52 
GeneralMy vote of 5 Pin
NourBerro24-May-12 3:20
memberNourBerro24-May-12 3:20 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Praise Praise    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.

| Advertise | Privacy | Terms of Use | Mobile
Web02 | 2.8.160811.3 | Last Updated 22 Feb 2010
Article Copyright 2010 by Ravi LVS
Everything else Copyright © CodeProject, 1999-2016
Layout: fixed | fluid