How to prevent download of files to unauthenticated users

Question

I have a website into which users log in using forms authentication, with a folder path from which I do not want any unauthenticated users (those users not logged in) to download files from. How can I implement this?

Thanks,

Sachin

Answer 1

You can do this through configuration, see http://msdn.microsoft.com/en-us/library/8d82143t.aspx

<location path="Files">
   <system.web>
     <authorization>
       <deny users="?"/>
     </authorization>
   </system.web>
</location>

Answer 2

You can make function to download (on server side) where you will check current login and then send path to file for accessible people.

Here you can see another ways get-files-if-login

Answer 3

Place the file in an authorised folder. so that if unauthorised users come to that folder. they will be redirected to login page to get authorised.