How do you password protect a download?

[fuzzybabybunny]

I know how to password protect a web page, but how do you password protect something that's up for download?

ex. www.mysite.com/downloads/object.pdf

 

[DaveSimmons]

Either password-protect its folder, or have it in some private folder and echo / copy it as the response of a script page, e.g.

/folder/deliverpdf.php ?id=xxxxx

(where xxxx is a code or filename but does -not- include the path to your secret folder o' pdfs 🙂 )

 

[chronodekar]

Why not just host up the file on a password-protected ftp? That should also suffice.

-cd

 

[KLin]

Not really a programming question. Just about every compression tool out there has password protection capabilities.

 

[chronodekar]

Originally posted by: KLin
Not really a programming question. Just about every compression tool out there has password protection capabilities.

From a usability point of view, I find this option irritating. I'd rather type in a password at a web-site rather than in my unzipping software.

The thing is, I've had some password-protected zip files from different sites, and it's a HUGE hassle distributing them to other people as I'll need to also give them a text file with the password. 🙁

The other option for me, is to of course, just re-zip everything without a password, but it's still a hassle.

-cd

 

[fuzzybabybunny]

Originally posted by: KLin
Not really a programming question. Just about every compression tool out there has password protection capabilities.

I'm trying to keep unauthorized persons from direct linking and downloading it in the first place.

 

[EagleKeeper]

Dave Simmons' recommendations will accomplish what you want to do without having to encrypt the file itself

 

[Cogman]

look up stuff about .haccess files. They can be setup to require a password for any file.

Beyond that, I would highly recommend encrypting the file as well. Double redundancy and all.

 

[JACKDRUID]

Originally posted by: fuzzybabybunny
I know how to password protect a web page, but how do you password protect something that's up for download?

ex. www.mysite.com/downloads/object.pdf

stream the file in memory, then package it as a zip with password, then stream it out for user download.

http://dotnetzip.codeplex.com/ <== packager
use it w. zip.password ="your password"

 

[Fallen Kell]

It all depends on your webserver and what you are running. If you run apache and own it all to yourself, you can use either .htaccess or edit the httpd.conf file and add a private folder....

Read up more on http://httpd.apache.org/docs/1.3/howto/auth.html

Again, this assumes apache (which most people use).