> Thanks for all the tips! I was not able to change most of the pdf's > to cfcontent because the pdf's legally could not be altered; however, > I found this article on securing pdf's and other documents, thought I > would post it since I'm sure someone in the future is bound to have > the same problem. > > I was able to save all my pdf's in a directory and restrict access to > 'execute only' for the 'everyone' group, but the file could be called > for display or download using the method in the link below. > > http://mysecretbase.com/How_To_Display_Protected_Files.cfm
Jessica, I think you've got it wrong. You don't change your pdf's to cfcontent. rather what you do is set up a cf template that accesses the pdf. Here's how it works, first move the directory housing the pdf's to somewhere outside your web root. Then create a cf template on your site that will access the pdf. On that CF template you first test to see if the person is logged in. If the user is not logged in or not authorized to view the pdf's display a nag message to tell that person to log in or simply redirect them to the login page. If the person is logged in and is authorized to view the message you deliver the pdf via cfcontent and cfheader like this: <cfheader name='content-disposition' value='attachment;filename="PDFFile.pdf"'/> <cfcontent type="application/pdf" file="#FullPathToPDFFile#" /> hth, larry ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;203748912;27390454;j Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:310971 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
