security_asp thread: Restrict a clients access to files on the ASP server.
How do we restrict a clients access to files on the server that they are
not supposed to see. I have an ASP page which displays files of various
types (eg. pdf,txt,mdb,doc etc.), and the user is given a list of
appropriate files to chose from after a database lookup. However, I want
to prevent the possiblity of the user simply browsing the directory that
holds those files or even just guessing a file name and typing a URL to a
file that they are not ment to have access to.
Mike