Hmmm that is correct. Would a worm be able to index the 
contents of the PDF folder?


On Mon, 21 Mar 2005 16:37:47 -0500
  Douglas Knudsen <[EMAIL PROTECTED]> wrote:
> Lee,  this will not secure the pdfs though.  A direct 
>request to
> http://foo.com/goo/mypdf.pdf is not passed to CF. 
> Therefore the
> application.cfm will never be fired.
> 
> Doug
> 
> 
> On Mon, 21 Mar 2005 15:26:33 -0600, Lee 
><[EMAIL PROTECTED]> wrote:
>> In the folder where the PDF's are stored create an
>> application.cfm file. In that file do a cfif and check 
>>for
>> the existance of a cookie with a meta redirect (To form
>> page described below) if it doesn't exist. Within the 
>>PDF
>> folder create another folder called something like
>> security. Within that folder create another
>> application.cfm with nothing but a comment in it. Also
>> create a form and and a form action page in the security
>> folder. On the form ask for a name and or password. On 
>>the
>> action page either query a database for validation or
>> hardcode the name and password to check against what the
>> user entered. If they enter the correct stuff, set the
>> cookie with a time limit and redirect to an index page 
>>in
>> the PDF folder. If they enter the wrong stuff redirect
>> them back to the sign in. Hope that makes sense.
>> 
>> Lee
>> 
>> 
>> On Mon, 21 Mar 2005 16:00:43 -0500
>>   "Wurst, Keith D." <[EMAIL PROTECTED]> wrote:
>> > Hi everyone. I have a cf security question. I have a
>> >website and on that
>> > site are some pdfs. The site is password protected. On
>> >the site I have a
>> > pdf directory where I keep all my pdf's. I am 
>>concerned
>> >that if I
>> > emailed someone a link
>> >http://www.mysite.com/pdf/pdfname.pdf that they
>> > would be able to open the pdf without having to log 
>>into
>> >the site first.
>> > Is there a way to force users to have to login before
>> >they can open a
>> > ..pdf - and still email them a link in the format I 
>>have
>> >written above?
>> > Thanks so much for the help.
>> >
>> >
>> 
>> 
> 
> 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
Discover CFTicket - The leading ColdFusion Help Desk and Trouble 
Ticket application

http://www.houseoffusion.com/banners/view.cfm?bannerid=48

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:199615
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Reply via email to