access to web file

Hi all,

I wanna put a word document on the web. There is a link on my website which will open that document for logged in user.

my question is, how to prevent unauthorised user from directly download the word document?

as they can easily do that by entering

to download the file.

thanks a lot.

gbupc

store the file in a location outside the web root. You can reference a .php file, but you'll need to send the right mime-type.

Attached is a comprehensive file which shooould tell you everything you need. It has some good security concepts.

Sam

that's cool... thanks a lot.