locked
Best place to keep uploaded files RRS feed

  • Question

  • User-1579957735 posted

    Hi guys, may i know where is the best place to keep user's uploaded files?

    And.. what are the procedure for most secure way for the user to upload files?

    Tuesday, September 20, 2011 11:49 PM

Answers

  • User1269925535 posted

    hi

    i told u can put your Files directory in App_code or App_data for security.

    also you can use nomal folder like Images . but for more security :

    users should not now the file path when they start downloading...

    for example ur files are pdf and path for specific file  is:

    www.ccc.com/Images/Myfiles.pdf

    now when user start downlaoding they can see the path...

    http://forums.asp.net/t/542979.aspx/2/10

    use above link to hide the path...

    there is more ways too

    • Marked as answer by Anonymous Thursday, October 7, 2021 12:00 AM
    Wednesday, September 21, 2011 1:21 AM

All replies

  • User1269925535 posted

    hi

    the best place if u mean the secure place is App_code and App_data

    these folder are protected by IIS..

    for more security you can read files as binary and write them to the response....

    Tuesday, September 20, 2011 11:59 PM
  • User-744022866 posted

    The best place to store files depending on your application logic, and the level of security you need, the options are

    1. Under database - you will have more work, you need to write handlers to retrieve files, but you doesn't need to give any write permission to the disk space for your web application account

    2. file system - always there is a danger of write permission, but for normal applications this can be worked out with impersonation...

    Tuesday, September 20, 2011 11:59 PM
  • User1269925535 posted

    this linke is usefull:

    http://forums.asp.net/t/542979.aspx/2/10

    Wednesday, September 21, 2011 12:11 AM
  • User-1579957735 posted

    Wow thanks guys. But is these places are able to retrieve out too? e.g. Images files, take the image link and place to ImageButton etc etc

    Wednesday, September 21, 2011 12:18 AM
  • User1269925535 posted

    hi

    i told u can put your Files directory in App_code or App_data for security.

    also you can use nomal folder like Images . but for more security :

    users should not now the file path when they start downloading...

    for example ur files are pdf and path for specific file  is:

    www.ccc.com/Images/Myfiles.pdf

    now when user start downlaoding they can see the path...

    http://forums.asp.net/t/542979.aspx/2/10

    use above link to hide the path...

    there is more ways too

    • Marked as answer by Anonymous Thursday, October 7, 2021 12:00 AM
    Wednesday, September 21, 2011 1:21 AM