Use CFCONTENT to serve up the actual document and store the file in a subdirectory somewhere off the root.
That would be my guess. M -----Original Message----- From: Jim Curran [mailto:[EMAIL PROTECTED]] Sent: Thursday, March 21, 2002 2:54 PM To: CF-Talk Subject: Password Protected File Downloads Hey all, What is the most efficient way to provide files for download to a client after username/password authentication *without* using NT Authentication. The simple way is to validate the user using CF and then just display the documents using CFDirectory, but, if anyone know the URL to the document, they can bypass the cfm template altogether. I was thinking about randomly renaming documents and storing the filenames in a DB, but that seems sloppy too. This client is currently in a virtual hosting environment, so adding directory security seems out of the question. Any thoughts would be greatly appreciated. TIA, - jim ______________________________________________________________________ Structure your ColdFusion code with Fusebox. Get the official book at http://www.fusionauthority.com/bkinfo.cfm FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Archives: http://www.mail-archive.com/[email protected]/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
