security - Restricting access to files within a folder to webservice IIS6/7 -
i looking way restrict direct access folder or folders on our website hosted in iis7 in our second dev environment, iis6 in our first dev environment , iis6 on production.
basically should able link these files our website i.e.: http://www.domain.com/stuff/survey.pdf
but if tries link blog post, etc. should not serve content. there way in web config or beyond abilities of iis?
what ended doing writing php script served content outside of web root, if user logged in , had valid site cookie.
then created folders replace content serving (.pdf, .png, etc.) since there not wanted secured. name folder same original document, i.e.: /webroot/survey.pdf/ , placed index.php inside of survey.pdf folder.
this worked, , can use script link content want secured.
Comments
Post a Comment