Hi All
My scenario: I have a "downloads" area of my latest site, where users can login to download files. This has been achieved by making the pages private and allowing users to login with the WebLogin snippet - the pages themselves are generated with FileDownload. This all works very well indeed.
My problem: Once a user has logged in and downloaded a file or accessed a private directory He/She can re-use the URL in their browser to access the file or folder structure whether they are logged-in or not. So technically they could pass on the URL and anyone could access the private area!
Ideally the user would be redirected to the login page if not logged-in.
I was hoping someone of superior mental capacity could offer me a solution.
Many thanks in advance.
Look into the FileDownloadPlugin which can be easily incorporated into the FileDownload snippet to prevent this.
Adrian Lawley: www.adrianlawley.com