Click here to get back home

how to secure documents in server

 HomeNewsGroups | Search | About
 comp.lang.php    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
how to secure documents in server RAZZ 07-18-2008
Get Chitika Premium
Posted by RAZZ on July 18, 2008, 6:05 am
Please log in for more thread options
Hello, Can anyone suggest me solution?

I Need to manage different types of documents (doc,xls,ppt etc) in
server. I have folder structure to maintain these documents in server.

Say folder1 is having all doc files; folder2 is having all xls files
and so on.


Now these documents should not be able to get access through the url
by directly typing path.
E-g if I try to access directly www.mywebsite.com/folder1/xyz.doc it
will open the document in browser itself.
At the same time these documents should be access only through our
website once they are login. But without login also if you know the
path you can get these documents how should I avoid it?

How can I provide security to these documents in server?

Posted by GArlington on July 18, 2008, 6:08 am
Please log in for more thread options
> Hello, Can anyone suggest me solution?
>
> I Need to manage different types of documents (doc,xls,ppt etc) in
> server. I have folder structure to maintain these documents in server.
>
> Say folder1 is having all doc files; folder2 is having all xls files
> and so on.
>
> Now these documents should not be able to get access through the url
> by directly typing path.
> E-g if I try to access directlywww.mywebsite.com/folder1/xyz.docit
> will open the document in browser itself.
> At the same time these documents should be access only through our
> website once they are login. But without login also if you know the
> path you can get these documents how should I avoid it?
>
> How can I provide security to these documents in server?

Depending on webserver your should look at .htacceess for Apache or
httpd.ini for IIS...

Posted by RAJ on July 18, 2008, 6:14 am
Please log in for more thread options
>
>
>
> > Hello, Can anyone suggest me solution?
>
> > I Need to manage different types of documents (doc,xls,ppt etc) in
> > server. I have folder structure to maintain these documents in server.
>
> > Say folder1 is having all doc files; folder2 is having all xls files
> > and so on.
>
> > Now these documents should not be able to get access through the url
> > by directly typing path.
> > E-g if I try to access directlywww.mywebsite.com/folder1/xyz.docit
> > will open the document in browser itself.
> > At the same time these documents should be access only through our
> > website once they are login. But without login also if you know the
> > path you can get these documents how should I avoid it?
>
> > How can I provide security to these documents in server?
>
> Depending on webserver your should look at .htacceess for Apache or
> httpd.ini for IIS...

well we are using yahoo server and it doesn't allow .htaccess to
upload or manipulate by developers
so is there any other way? i just want that doc or xls files should
not be able to open directly unless person has properly login.

Posted by Captain Paralytic on July 18, 2008, 6:32 am
Please log in for more thread options
>
>
>
>
>
>
> > > Hello, Can anyone suggest me solution?
>
> > > I Need to manage different types of documents (doc,xls,ppt etc) in
> > > server. I have folder structure to maintain these documents in server=
.
>
> > > Say folder1 is having all doc files; folder2 is having all xls files
> > > and so on.
>
> > > Now these documents should not be able to get access through the url
> > > by directly typing path.
> > > E-g if I try to access directlywww.mywebsite.com/folder1/xyz.docit
> > > will open the document in browser itself.
> > > At the same time these documents should be access only through our
> > > website once they are login. But without login also if you know the
> > > path you can get these documents how should I avoid it?
>
> > > How can I provide security to these documents in server?
>
> > Depending on webserver your should look at .htacceess for Apache or
> > httpd.ini for IIS...
>
> well we are using yahoo server and it doesn't allow .htaccess to
> upload or manipulate by developers
> so is there any other way? i just want that doc or xls files should
> not be able to open directly unless person has properly login.- Hide quot=
ed text -
>
> - Show quoted text -

You're not going to be able to do much on yahoo server I'm afraid. The
most common way to do this is to store the files outside of the web
root and use a php script to deliver the file.

I suggest you change hosts. There are much better value ones out there.

Posted by RAZZ on July 18, 2008, 6:36 am
Please log in for more thread options

> You're not going to be able to do much on yahoo server I'm afraid. The
> most common way to do this is to store the files outside of the web
> root and use a php script to deliver the file.
>
> I suggest you change hosts. There are much better value ones out there.

thank you for response can you suggest me bit in details regarding
"storing files outside of the web root and use a php script to deliver
the file"?

Similar ThreadsPosted
Evaluating php tags/documents outside of web server? December 5, 2006, 4:45 am
secure server-to-server transmissions October 2, 2006, 11:35 pm
secure soap connection where server is in java ? July 19, 2007, 7:58 am
Is PHP secure while PHP code is exposed on the hosting server? May 6, 2008, 12:54 am
pdf documents in php January 23, 2008, 1:43 pm
php in ".html" documents June 20, 2005, 7:47 pm
Question on using HTML within PHP documents June 16, 2006, 8:57 am
Algorithm for detecting/highlighting changes in documents August 19, 2005, 10:29 am
Reading EXCEL (XLS) documents with other charactersets November 7, 2006, 1:42 pm
Unexpected behavior when creating xhtml documents June 6, 2007, 7:23 pm

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap