disable a user from browsing images in an asp.net website.

Question

User1227914298 posted

Hi All,

 how to disable a user from browsing images in an asp,net website.

I hav a site.In the images folder there are some confidential images.now users can browse it through browser just by entering path.how to disable user from accessing it.

Any help on this is highly appreciated.

Thanks,

Anoop.

Answer 1

User551462331 posted

I hav a site.In the images folder there are some confidential images.now users can browse it through browser just by entering path.how to disable user from accessing it.

for this, u have to hide the path of image... so, instead of directly specifiying the image path in image control use the dedicated image handler file.

so, u will not write this... <asp:Image ImageUrl="Images/imagename.jpg" .. />

insteda, use this... <asp:Image ImageUrl = "ImageHandler.aspx?imagename=imagename.gif" ../>

now, ImageHandler.aspx (this can also be .ashx file) will retrive imagename.jpg from image location on server and send the image as a output stream... like explaiend here

http://techpractices.blogspot.co.uk/2011/09/aspnet-how-to-hide-your-images-path.html#!/2011/09/aspnet-how-to-hide-your-images-path.html

so that actual image path is not displayed to user or in browser view source

hope this helps...

Answer 2

User1227914298 posted

Thanks KK! Will try this one. :)

Answer 3

User44562928 posted

Refer below URL,

http://www.codeproject.com/Articles/6814/Securing-image-URLs-in-a-website