ASP.NET

how to prevent direct access to pdf file?

17-Jun-09 21:50

clsid can be accessed only through IE.

Use object tag for IE only...
For Mozilla or Safari use Embed Tags.

Rose | [Rose]

Abhishek Sur

My Latest Articles
Working with Excel using MDAC

Basics on LINQ and Lambda Expressions

Create .NET Templates

Tridip Bhattacharjee17-Jun-09 20:57

Tridip Bhattacharjee

17-Jun-09 20:57

suppose in my asp.net based project there is many hyperlink and when user click on those link then pdf file will be opened in browser.i want to know is there anyway if user just knows the url of pdf file and then he can directly type the url and press enter and then pdf file will be opened in browser. i want to know basically how can i prevent user to access my pdf directly if he is authenticated user. i just want that user has to access pdf file by clicking on hyperlink. so please guide me for this.

tbhattacharjee

Vimalsoft(Pty) Ltd17-Jun-09 21:18

17-Jun-09 21:18

If the PDF is in your Website and on a aspx page, then its simple , because you have to check if the user has logged in first before a user can access the secure page. If you are not doing that, then you have to start doing it

Vuyiswa Maseko,

Few companies that installed computers to reduce the employment of clerks have realized their expectations.... They now need more and more expensive clerks even though they call them "Developers" or "Programmers."

C#/VB.NET/ASP.NET/SQL7/2000/2005/2008
http://www.vuyiswamaseko.somee.com
http://www.vuyiswamaseko.tiyaneProperties.co.za
vuyiswa@its.co.za
http://www.itsabacus.co.za/itsabacus/

Abhishek Sur17-Jun-09 21:41

17-Jun-09 21:41

Also if you dont want to create asp.net pages to check authentication, you can also use custom HTTPHandler for .pdf files.

Rose | [Rose]

Abhishek Sur

My Latest Articles
Working with Excel using MDAC

Basics on LINQ and Lambda Expressions

Create .NET Templates

Vimalsoft(Pty) Ltd17-Jun-09 21:46

17-Jun-09 21:46

That is Correct

Greg Chelstowski17-Jun-09 21:48

Greg Chelstowski

17-Jun-09 21:48

On the contrary, Vuyiswa, it is not as simple as you explain.
I have encountered a similar problem before.
I think the original question was: "If a user knows the absolute url to a pdf, how can we prevent them from seeing it?"
Obviously, since the pdf files are most likely kept in a virtual directory of a website, opening them should not be a problem at all (if one knows the virtual directory and the filename).

The way I did it was, I kept the pdf files in a private folder and read them using System.IO, then through the application streamed them and eventually displayed them.

I have tried various things, but the way I did it seemed like the most reasonable thing to do, and, well, secure (hopefully).

var question = (_2b || !(_2b));

Christian Graus17-Jun-09 21:50

Christian Graus

17-Jun-09 21:50

The way I do this stuff, and the best way, is to have a http handler, which will not return the file ( whose actual path is hidden ), unless the link came from my site also.

Greg Chelstowski17-Jun-09 21:52

Greg Chelstowski

17-Jun-09 21:52

Yeah, I failed miserably doing that. Wink | ;)

Gotta do some more reading on HTTPHandlers, it would seem.

var question = (_2b || !(_2b));

Vimalsoft(Pty) Ltd17-Jun-09 21:54

17-Jun-09 21:54

Using http handler is a much simpler as Abhishek Sur said.

Abhishek Sur17-Jun-09 22:01

17-Jun-09 22:01

And also place the file in a directory which cant be found from the Virtual path, means dont place it inside a virtual directory.

Just get the file through the handler from an unknown location, (say C:\private)

That will do the trick .. Rose | [Rose]

Abhishek Sur

My Latest Articles
Working with Excel using MDAC

Basics on LINQ and Lambda Expressions

Create .NET Templates

Vimalsoft(Pty) Ltd17-Jun-09 22:24

Html Encryption due to security reason?

17-Jun-09 22:24

True

Tridip Bhattacharjee17-Jun-09 20:51

Tridip Bhattacharjee

17-Jun-09 20:51

after rendering aspx page the html shows in browser and if we see the source of the page then user can see raw html. if there is anyway as a result i can encrypt html content after rendering it to browser but browser can read and show the result.if i can encrypt then user can not understan what is written in my html due to security reason. if it is possible then please let me know in detail.

tbhattacharjee

Re: Html Encryption due to security reason?

Abhishek Sur17-Jun-09 21:37

How to put java script....

17-Jun-09 21:37

I think it is not possible to encrypt your HTML.. as otherwise your browser will not render it correctly. Rather what you can do, is just strip spaces and new lines from the html so that everything will be rendered in a single line.

Do it in your custom handler. Also use GZip/Deflate compression to shrink the response.

s = Regex.Replace(s, "^\\s*",string.Empty, RegexOptions.Compiled | RegexOptions.Multiline);
s = Regex.Replace(s, "\\r\\n", string.Empty, RegexOptions.Compiled | RegexOptions.Multiline);
s = Regex.Replace(s, "<!--*.*?-->", string.Empty, RegexOptions.Compiled | RegexOptions.Multiline);

Just use regEx replace to do your job easy in your custom StreamFilter.
Hope you understand.

Abhishek Sur

My Latest Articles
Working with Excel using MDAC

Basics on LINQ and Lambda Expressions

Create .NET Templates

igaurav17-Jun-09 20:50

17-Jun-09 20:50

Hi all,

I want to put this java script ["window.open('Organization.aspx','mywindow','width=750,height=600')"; ]

in treeview event TreeView1_SelectedNodeChanged1

so that on click of every node or sub node this window would open..

help me out please thanx

never let you down...always be happy..

Amol-11117-Jun-09 21:31

Amol-111

17-Jun-09 21:31

try this

if (!IsPostBack)
            {
                TreeNode Parentnode = new TreeNode("Home");
                TreeNode node = new TreeNode("Organization","","","'Organization.aspx","_blank");
                //node.NavigateUrl = "javascript:window.open('Organization.aspx','mywindow','width=750,height=600');";
                Parentnode.ChildNodes.Add(node);
                TreeView1.Nodes.Add(Parentnode);
            }

igaurav17-Jun-09 23:15

17-Jun-09 23:15

not working properly... for my tree view.
its only working for node "HOME" 's sun nod Organizatin.aspx
i want it like i click ANY node or sub node then this popup windows appear.
any way thanx a lot.

never let you down...always be happy..

himanshu256117-Jun-09 21:34

himanshu2561

17-Jun-09 21:34

Hi gaurav
Try this

if (!IsPostBack)
        {
          TreeView1.Attributes.Add("onclick", "javascript:window.open('Organization.aspx.aspx','mywindow','width=750,height=600');");
       }

himanshu

igaurav17-Jun-09 23:19

17-Jun-09 23:19

I want it in a way like if i click ANY node or sub node then this window wud appear.

through your code even i click joints of nodes then this window is appearing..

Thank You

never let you down...always be happy..

himanshu256117-Jun-09 23:58

himanshu2561

17-Jun-09 23:58

Hi,
May be this solve your problem

protected void TreeView1_SelectedNodeChanged(object sender, EventArgs e)
{
    ScriptManager.RegisterStartupScript(this, typeof(string), "OPEN_WINDOW", "window.open( 'http://www.google.com','mywindow','width=750,height=600' );", true);

}

himanshu

igaurav18-Jun-09 0:26

18-Jun-09 0:26

protected void TreeView1_SelectedNodeChanged1(object sender, EventArgs e)
{
Response.Write("<script>window.open('group.aspx?id=" + TreeView1.SelectedValue + "','mywindow','width=200,height=200')</script>");
}

This is the answer..

its working fine...!!

thanx a lot.

never let you down...always be happy..