Prevent Unauthorized Downloading Of Audio Files From A Server?
Mar 2, 2010
For a church website I'm managing, there is a need to place audio files (sermons) on the website. There will be two categories of audio files; one will be a sample size of the audio file, around 5 minutes in length. The other will be the full-length of the sermon (30-50 +/- minutes).
I have decided the best setup would be to place the audio files on the server. I would then store the audio information, as well as the path to the audio file, in a database. I had thought about placing the audio files in the database as a BLOB, but it seemed inefficient. My concern, is with tools like Mozillza plug-in "Download Helper" , it is so easy to simply grab the media files off the server. This would not be a big deal, except we want to sell the full-length audio files. I am running ASP.NET 3.5 on IIS 7.
I am making a small file hosting website, and each user can upload multiple files, and will have access to just his files and can't access others files, for example by guessing the URL. Is there a way to secure files to have access by just the owner and no body else "may be website administrator also will have access"
My code can be found here http://stackoverflow.com/questions/3604864/c-asp-net-ftp-error I am trying to download a file from an FTP server when I try to download it it says I do not have access I have been googling this all morning and have not had any luck. I went to the designated folder and added Everyone with full permissions hoping I was missing a user and that did not work. I tried giving full permissions to myself, Anonymous user, network service, and a few other users that I have found. I have tried using
<identity impersonate="true" /> and <identity impersonate="true" userName="myfullusername" password="mypassword"/>
I am still not having any luck the full error I get is:
System.UnauthorizedAccessException: Access to the path 'C:UsersmynameDocuments' is denied. at System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath) at System.IO.FileStream.Init(String path, FileMode mode, FileAccess access, Int32 rights, Boolean useRights, FileShare share, Int32 bufferSize, FileOptions options, SECURITY_ATTRIBUTES secAttrs, String msgPath, Boolean bFromProxy, Boolean useLongPath)
I have been struggling with an issue that sounds like it should be quite common but I can't seem to get the thing working no matter how much I research it!
I am using an AJAX file uploader to upload files (up to 100MB) to the webserver and when the user clicks a button to complete navigate to the next page, I then attempt to move the files off the webserver onto a file server on Page_Load. Both servers are WinServer 2003. There just isn't enough space on the webserver to hold all the uploads once we go live with this solution so I have to get the files off the webserver.
Uploading the file and creating a new subdirectory on the webserver (to hold the file) works no problem at all. When I do the file copy to our file server locally on VS2008, again, no problem. However, when I delopy to the live server and try the same thing, the upload happens ok, but the file copy does not. I get an UnauthorizedAccessException. I don't have access to the webserver myself (but can request it if absolutely necessary) and our file server sits within the same domain (Active Directory).
I do not want to use Impersonation at a high level (web.config), so I tried it programmatically for the purposes of the copy file but it did not work. I used one of our general clerical accounts to pass in the credentials and gave full permission to this account on the file server to create/modify files.
i made a file uploader to folder named (Books) and i saved the name and the bath of the uploaded file to my DataBase but when i wanna download the uploaded file from the server ? how i make it ? by hyperlink ?
I am working on some project where I am needed to allow users to upload files, but only in pdf and .doc format. Now I know how to let users upload files, but I do not know how to check whether an uploading files is pdf and .doc or not. How could I know that? And how could I know the size of each file, for the file should be no greater than 3 MB?
Also, I have alloted a separate folder for the files that are uploaded by users. I have one page that displays the links to download the files in that folder. I needed to know how could I keep the track of the folder, for the files get uploaded every time? Or in other words, how could my 'downloads page' know about the files in that folder and create links for each file in that folder for the download? Also, if I create a link of a file for downloading purposes, will the file be downloaded when one clicks the link?
I created a HttpHandler for downloading files from the server. It seems it is not handling anything...I put a breakpoint in the ProcessRequest, it never goes there.
public class DownloadHandler : IHttpHandler { public void ProcessRequest(HttpContext context) { //download stuff and break point } }
It never stops there, as mentioned. I also registered it in the web.config.
I am not sure about the path part of that entry. What do I have to enter there? I am downloading txt files, but the URL does not contain the filename, I somehow have to pass it to the handler. How would I do this? Session maybe?
downloading multiple files from the server side through the browser (i.e. Chrome) I've debbuged it the foreach iterates fine but it only downloads the first file.
Here's the code snippet:
FileInfo fInfo; SQLConnection = new SqlConnection(SQLConnectionString); foreach (CartItem CartProduct in Cart.Instance.Items) { [code].....
I have a web site using Forms Authentication that downloads a PDF file specific to the user from a page. On the development server I have it working fine, on the live server it checks to see if the file exists and fails (correctly) if it doesn't, but does not load the Dialog Box to save/open/cancel if it does exist. Any ideas ? There are no events logged, the code is as follows and by the way I have tried various combos of WriteFile/TransmitFile as per other forum posts - many combos seem to work on development machine(!!) but fail on live...
Dim fiPDF As New FileInfo(strReportPath) [code].... Exception message: The remote host closed the connection. The error code is 0x800703E3.
At the moment in my ASP.NET webApp I have some resources such as some .pdf files or pictures in specific folder in the host . If any user know the URL of those files can access them from the browser , How can i manage access or ban anonymous user from those files ?
This is really a couple of questions about preventing unauthorized attempts to access a specific file type. Here go the questions:How do I prevent users from directly requesting a type of file? Do I write an HTTP handler?After preventing a direct download, can my app still explicitly serve that file type? How?
i have a asp.net website i have some files swf files that i want to prevent downloading them
is there a solution that the IIS can have a passord for downloading the file swf file and i can provide this password in some situations on the server that i can pass this password in the code
so that the swf file can be viewed from my page only as provide the password
but no one can download it using download managers or any other http request that request this swf file
i have been writing a music website for my customer using ASP.NET. Everything has been cool except I don't know how to prevent the users from downloadng the song which is being played. For example, I click "Heal the world" to play and while the song is playing, I dont't want the IDM download manager or other download programs appear the download dialog
I have an audio gallery in which i want to give play option to user. I find embed code of html but it just play a file in background i want to give user a control to play or stop as it is available in mediaplayer or any other player. How can i do this?
I want to play video / audio files on asp .net page.
client has following requirements
1) It can play all the popular formats
2) It can use installed player (if windows media player or any other) or it can run inside browser (i.e. Flash player)
I have already explored different options i.e. silverlight, Windows media services & flash player Among these three silverlight is discarded as there very few browsers having that plug in.
The majority of files in the Temporary ASP.NET File folder for a given application get deleted by ASP.NET following compilation -- .DLL and .PDB files amongst others remain.
Our compiler produces proprietary debug information files which are amongst those that get deleted.
Marking the files read-only prevents this but are there other options available?
I want to embed video/audio files using Object tag, the above code works fine in IE with controller but in firefox it plays the video but controller doesn't shop up?
does any one have html code snippet which works in all browsers for all audio/ video mime types?
I'm new to this forum, infact this is the first forum i hav ever joined. I need some help urgently as i'm reaching the deadline of my project.I created an asp.net website, where administrator will upload files to SQL database which is connected to the webpage. From the web page there will be a download link to download those uploaded files. I have been successful in uploading files to the database. But nothing is striking in my mind regarding how to download files directly from database using asp.net C#.
I'm working on a project that requires the ability to let a user download a pdf from a static location on the server. I'm reading the instructions from this website, it's an old post and I notice they specify in an update that Microsoft's MVC framework has long since included and Action Result that allows the same functionality they discuss thus rendering it obsolete, I've looked a bit online but haven't been able to find any resources that discuss this built-in functionality.
