Hello!

This is Zeeshan Ahmed from itHighway. We need a wayt to protect a couple of folders from directly being accessed. One folder will contain "images" and the other folder will contain "Text files".

Right now if someone directly type the http address of image or text file, it opens the file in browser. We need a way to protect image and text file folder. But on the other hand we also want our administrator to access these files after login in to his account.


Do we have to set some permissions to server?

Any Idea...
Any Help....
Will be greatly appriciated..


Thanks
Zeeshan Ahmed

__________________
Zeeshan Dar
itHighway
Get in Touch with People Texting your Website
Advanced Real Estate Listings Solution - FREE Hosting

Zeeshan,

I guess you can disable "directory browsing" option for those folders in IIS. (Start >> Run >> Inetmgr).

But still the end user can flick the text/js files by just typing the full url. Similarly for images .. once it is loaded on IE they can save it from there. Are you worried about these also? or You are only bothered about denying access to those folders?

Best Regards
Vadivel

MVP ASP/ASP.NET
http://vadivel.thinkingms.com

Zeeshan -

I am pretty sure your admin is going to have to cough up some cash for a third party component to do the trick.

I think this company ASP Smart http://www.aspsmart.com/aspSmartSecurity/
might have what you are looking for.

We've used stuff from them in the past and they work great with our enterprise level apps.

Another drawn out approach if you are using a higher-end DBMS would be to ponder putting image files (binary) or text files and storing them in the database. This is an interesting approach and will probably take some reworking with your companies current application model but it works too.

I say try to hunt down a good third party tool

Cheers,
Christian