Hi

I can't say exactly how to do it, but I know that you can use the .htaccess
file to set access rights to file types and using the referrer to only
facilitate access from designated locations.  I have seen it done to protect
images, but I am not sure of the exact syntax.  I am sure that there is
someone out there who can provide it, or a search should pull up some
references.

Mark

-----Original Message-----
From: Rob Atkinson [mailto:robatkinson(at)nucleus.com]
Sent: Tuesday, January 02, 2001 5:38 AM
To: hwg-techniques(at)mail.hwg.org
Subject: Security Challenge


Not having been able to solve this challenge myself, I look to my
colleagues for help.

Object
---------
To prevent *.exe & *.zip files from being downloaded, except from
a link on a page at the site. Server is Linux with Apache 1.3.12.


Tried
--------
PERL download scripts with Anti-Leech which all worked as
advertised but did not meet the Challenge. When download script
kicks in, the actual URL is shown in the Status Bar. In Netscape
it happens to quick for the eye to follow. In IE the URL shows
long enough for someone to get the actual location URL.

Someone could then use the actual URL as a download link from a
page on "their" site, thus defeating the purpose of an
Anti-Leeching download script.

Used Protected Directories with ID/PW built into the download URL
from the PERL script but again, the actual location URL (with
ID/PW) is shown which also defeats the purpose. IE has a tendency
to accept/not accept, the built ID/PW when using a URI of http:
and I didn't bother with ftp: as I figured same result.

The test page can be viewed at:

http://www.webhostingavailable.com/download_test.html

Only the download links are functional on the pages.

I look forward to any workable solution and can always have a
mod installed if necessary.

TIA


Website Rob
Helping people create a Potent Website

• Web Designer Courses
• Off the Shelf Training Courses

HWG hwg-techniques mailing list archives, maintained by Webmasters @ IWA