WebApp Sec mailing list archives

Re: Controlling access to pdf/doc files


From: Jed Holler <j.holler () juno com>
Date: Tue, 24 Feb 2004 13:59:23 -0700

I think it may be better to have the file dynamically generated, and then
deleted as soon as the file is transferred. Have the file name be a
random number or string, generated by your application. Also set a timer
that will delete the file after 2 or 3 minutes, in case the client
terminates the connection before the file has a chance to transfer.

Jed

________________________________________________________________
The best thing to hit the Internet in years - Juno SpeedBand!
Surf the Web up to FIVE TIMES FASTER!
Only $14.95/ month - visit www.juno.com to sign up today!


Current thread: