Hello There

I've got one query regarding security in an ASP Application.

If you have an application with session based login, works fine .. no probs at all.

But .. what about securing the other contents like .swf, jpgs if anyone knows the path then everybody can easily download the file without login.

Any idea of HTTP Authentication... (Directory Based Security???)

Any Help Appreciated !!!

Thanx

Parry

A couple of options...

You can set permissions up on the file itself and give your users a Windows user account on the server with permissions to the file(s). This requires you to be able to administer the server though.

Otherwise, you can store the files in a directory that's usually inacessable to the public, and use ASP to open the file from the private directory and stream the contents to the user. You can build the usual ASP authentication in this way.

Thanx Minaki

But I think the second option is better.

Please give me any example if you can.

Thanx

Parry