How to control download file from IIS?

[Guest]

Hi,

I have a website providing pdf file downloading for registered member.

Member needs to login and be able to download pdf file.

I save pdf file in a directory. e.g. http://www.downloadpdf.com/pdf/abc.pdf

However, I needs to restrict those non-member to download the pdf file
directly by input the URL http://www.downloadpdf.com/pdf/abc.pdf.

Can I add a unique session id for each time of download? e.g. after the
member login, the program creates a unique session id, add to the download
URL.

e.g. http://www.downloadpdf.com/pdf/sessionid1234567890abc.pdf

However, if non-member removes the session id of the URL, how to disallow
the member to download the abc.pdf file directly?

For the same member, how to generate one session id for each time of
download? For the second time of download, the first session id is expired
after download and a new session id is generated.

Moreover, how to know the successful download of the member? How to monitor
the file transfer status from server to client through http?

Thanks for suggestion

 

[Dmitriy Lapshin [C# / .NET MVP]]

Hi,

Consider storing PDF files outside the Web application, and outputting them
to the responce stream programmatically. Then, you can use URLs like
http://www.downloadpdf.com/get.aspx?sid=1234567890abcdef and track session
IDs in a database where they will be mapped to the actual files that should
be downloaded:

SID | File | Active