I'm not sure if this is OT or not. I want a web page to deliver a file when the user clicks on a download link, but I don't want the file delivered if the direct URL is entered into the browser location bar.

I have a CGI that provides access to a download page for only those who are authorized to be there, and who can enter correct credentials. The hole in the system is that if they copy the download link from the protected page and give it out, the file can be downloaded by anyone who has that link.

I found some info about htaccess files that seems to indicate there is a setting I can use to prevent that, but the examples I tried didn't work.

Does anyone know a way to do this? I'm not adverse to writing another CGI if I have to, but it would be easier to let Apache handle it if possible.

If not, has anyone delivered largish files via CGI (about 6 megs.) I've never tried it. Can a CGI script just do a "put" of the file? This is the old-style CGI engine, not the new irev server.

--
Jacqueline Landman Gay         |     jac...@hyperactivesw.com
HyperActive Software           |     http://www.hyperactivesw.com

_______________________________________________
use-livecode mailing list
use-livecode@lists.runrev.com
Please visit this url to subscribe, unsubscribe and manage your subscription 
preferences:
http://lists.runrev.com/mailman/listinfo/use-livecode

Reply via email to