Protecting files directory, but allow server side access

I have a files directory that stores PDFs and doc files. Users that log into my website can download and upload files to/from this directory and never visit the file URL. I want to be able to restrict access to files via the address bar, but allow my code
(pages on the same server) access to the directory.
Is this something that can be done?
Thank you in advance for your help.

Hello,
permissions are set with NTFS on the folder containing the files. NTFS permissions can be set for domain users or with everyone group.
If this is about IIS security you may ask in
http://forums.iis.net/
Best regards
Meinolf Weber
MVP, MCP, MCTS
Microsoft MVP - Directory Services
My Blog: http://msmvps.com/blogs/mweber/
Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.

Similar Messages

Genius and Disabling Itunes Store but allowing Itunes U Access bug?

If I disable the Itunes Store in Parental Settings but allow Itunes U access then Genius disappears and cannot be used. Does anyone else have this problem??
If I disable the Itunes Store in Parental Settings completely (and not allow Itunes U access) then Genius works fine.
Am using iTunes 9.

This is still not fixed in iTunes 9.01

Removing access to "PC Settings" Modern UI app (but allow Control Panel access)

Hi all,
I have just deployed Windows 8.1 Pro to a number of machines and am having an issue with the "PC Settings" Modern UI app - this allows users to modify local users (i.e. create new local users, modify existing local users) and play with settings
that they shouldn't be messing with! This happens even when though the "Show only specified Control Panel items" policy setting has been configured (which works correctly with the classic Control Panel).
The only way I can get this blocked is by enabling the "Prohibit access to Control Panel and PC Settings" policy setting; however, this also blocks access to Control Panel, which is required for users to access
keyboard, mouse and printer settings.
Is there any way to block access to the "PC Settings" Modern UI app? (I have already removed all Modern Apps (and provisioned apps) possible by using the usual PowerShell cmdlets).
The users need to be able to add/remove printers and modify keyboard settings (nothing else), hence minimal Control Panel functionality is essential. I need to be able to block all settings being accessed from the PC Settings Modern UI app though!
Has anyone got any ideas?
Thanks,
Kim

Hi,
Thanks for the suggestion. Unfortunately, AppLocker is only available in Windows 8.1 Enterprise / Ultimate. We are using Professional.
Cheers,
Kim

Allowing server side script for an explicit page

Works with SP2010, but not with SP2013:
<PageParserPath VirtualPath="/_catalogs/masterpage/InternalSystems.master" CompilationMode="Always" AllowServerSideScript="true" />
I don't want to use the "VirtualPath=/*"-workaround.
Any solutions ?

<PageParserPath VirtualPath="/*" CompilationMode="Always" AllowServerSideScript="true" IncludeSubFolders="true" />
As i mentioned above: Don't want do use "/*" as virtual path. As soon as i change this to a particular site (e.g. "/pages/*"), it does not work. Always get an exception.

TS3991 can i upload pictures to the cloud, create a file name and allow others to access it from non-apple devices?

I have pix for co-workers not to be shared in public forum, would like to know where in knowledgebase to find the instructions. thank you

You can do this by adding photos to a shared stream and enabling the public website option (see http://help.apple.com/icloud/#/mmc0cd7e99). This will give you a private url that can be shared with non-iCloud users, enabling them to see the photos on the web from their computer browser. You will need iPhoto '11 to do this, available in the Mac App Store.

Server Side Includes for Apache and parsing text files

I have an old website I used to do zipped up and I decided to set it up on my personal webserver in OS X . I got apache configured to allow server side includes (edited the httpd.conf to all them:
<Directory />
Options FollowSymLinks Indexes MultiViews Includes
AllowOverride None
</Directory>
But I can't get the pages to come up. See I have this .shtml page which loads fine and a part of it has this line:

But it won't parse that txt file and show the html that its formatted in.
Anyone have any ideas on how to get it to parse that txt file? Even if I load just that txt file it shows raw code not it formatted. Please help.

Ignore that first reply. I thought I was dealing with server.
As usual, I fogot to make sure that Includes was in the Options directive for the DOCUMENT_ROOT or VirtualHost. After 10 years, you'd think I'd remember that. I just configged one of my macs to do SSI. Here's the 3 lines that I changed:
Line 399 (the DOCUMENT_ROOT definition): Options Indexes FollowSymLinks MultiViews Includes
Line 887 (To use server parsed HTML): AddType text/html .shtml
Line 888: AddHandler server-parsed .shtml
apachectl restart
and off it went!
Roger

How can i load file into database from client-side to server-side

i want to upload file from client-side to server-side, i use the following code to load blob into database.
if the file is in the server-side, it can work, but if it in the client-side, it said that the system cannot find the file. i think it only will search the file is in the server-side or not, it will not search the client-side.
how can i solve it without upload the file to the server first, then load it into database??
try
ResultSet rset = null;
PreparedStatement pstmt =
conn.prepareStatement ("insert into docs values (? , EMPTY_BLOB())");
pstmt.setInt (1, docId);
pstmt.execute ();
// Open the destination blob:
pstmt.setInt (1, docId);
rset = pstmt.executeQuery (
"SELECT content FROM docs WHERE id = ? FOR UPDATE");
BLOB dest_lob = null;
if (rset.next()) {
dest_lob = ((OracleResultSet)rset).getBLOB (1);
// Declare a file handler for the input file
File binaryFile = new File (fileName);
FileInputStream istream = new FileInputStream (binaryFile);
// Create an OutputStram object to write the BLOB as a stream
OutputStream ostream = dest_lob.getBinaryOutputStream();
// Create a tempory buffer
byte[] buffer = new byte[1024];
int length = 0;
// Use the read() method to read the file to the byte
// array buffer, then use the write() method to write it to
// the BLOB.
while ((length = istream.read(buffer)) != -1)
ostream.write(buffer, 0, length);
pstmt.close();
// Close all streams and file handles:
istream.close();
ostream.flush();
ostream.close();
//dest_lob.close();
// Commit the transaction:
conn.commit();
conn.close();
} catch (SQLException e) {

Hi,
Without some more details of the configuration, its difficult to know
what's happening here. For example, what do you mean by client side
and server side, and where are you running the upload Java application?
If you always run the application on the database server system, but can't
open the file on a different machine, then it sounds like a file protection
problem that isn't really connected with the database at all. That is to
say, if the new FileInputStream (binaryFile) statement fails, then its not
really a database problem, but a file protection issue. On the other hand,
I can't explain what's happening if you run the program on the same machine
as the document file (client machine), but you can't write the data to the
server, assuming the JDBC connection string is set correctly to connect to
the appropriate database server.
If you can provide some more information, we'll try to help.
Simon
null

Copy a .swf file from server side to client using signed applet

Hello All,
I already have my applet signed and its working pretty well. However I want to know how can I import a .swf file into clients machine. The .swf file initially is on server side, my applet checks whether this .swf file exists already on client machine. If not it copies it to his machine.
I know how to chk if the file already exits on client machine but I am not sure how to copy this .swf file to his machine if its missing.
May be I need to set some input buffers from server side and then copy them to his machine.
Can some one throw some light on this issue ??

Hello to all Java Code Masters out thr,
I am trying to copy a .swf file from server side to client side, however I am unsuccessful in writing the correct data. By correct data I mean that , the data does gets saved on the client side in the .swf file, and the size of the .swf file on client side is as expected, but some how I don't know why the data is not the same as expected.
I tried opening up both the swf file, one which is on server side and the other which is on client side. And both looked different in the notepad.
When I opens up the client side .swf file on browser it shows nothing while the .swf file on server side worked fine.
Here is a snap shot of the two .swf files when opened in notepad:
clientside.swf
坃ࡓ죃鱸뷤瀉&#56220;ᡚ穸ｓ歒斷뛉쭬ⶲ뉯緤░뉋쭬틲&#56237;&#57181;毳띵뺤畮祮୹釯烉쉍‼➀Ƿℵ㼤ꦅ㼌⡉⁈ș㖩䈼ꦓɊጵꨘ妆ၸ쇠鳳ﯯ龜괯䪅&#57113;쿾칿칷컹緶履殖㋿罣쯻杬&#56728;懨&#57340;Ｅ&#56023;翂䶙幷鿠︡拡ﬦ댨꾖政ᯋὣꯤ糥䧩缿䨗捫嶺깼瘶羋⯞勹쪾癞ঞ頁韧୘롻ⱖ撯貊攗閩㫙↳萰Ⳁ⼈쳂荡᧰ﻶ顠꓈鸎싔㿄㰧柂䪄러䂀좹㏠ꕊ㌏힟䘜㦴⌙⍈㽾ꙴ㿯렑㽔serverside.swf
CWS�� x�� p��ZxzS�Rk�e��l��-o��}�%K�l��]��ku��nu��nyy��pM�< �'�5!$��I
(H �
5<B
��J5��Yx��/��J��w��}��
k�2c��lg��a��\�%��serverside.swf is what I expect to be saved, but clientside.swf is what i get.
Below is a code snippet which I am trying :
public void writeswftoclient(String swfcontent) {
 String userHome = System.getProperty("user.home" );
 String ImoracleDirectory = userHome + "\\MyFolder";
 File fdirectory = new File(ImoracleDirectory);
 if(!fdirectory.isDirectory()) {
 fdirectory.mkdir();
 String playlist = ImoracleDirectory + "\\clientside.swf";
 File fplaylist = new File(playlist);
 try {
 Writer output = null;
 output = new BufferedWriter(new FileWriter(fplaylist,true));
 *System.out.println(swfcontent);*
 *output.write(swfcontent);*
 output.close();
 catch (Exception e) {
 System.out.println("Cannot create or write to the playlist");
}In above code I am trying to write the string swfcontent, which contains the data shown above in serverside.swf, to clientside.swf.
Interesting thing is that I am doing System.out.println(swfcontent); just before writing the data to clientside.swf using output.write(swfcontent);. And System.out.println does print the write data on the java console. However I dont know out of what reason the data doesnt get written correctly on the client's computer.
Kindly help me in this plzzzzzzzzzz.

Protect sheet but allow deleting rows

I remember seeing the protect method for the excel sheet with property allowdeleting rows. But now I couldn't find it.
I have a requirement using OLE automation to protect the sheet but allow to delete rows. Can somebody help me please?
Thanks
Anupama

Yes it is their. Use the 'PROTECTION' property of WORKSHEET object to return 'PROTECTION' object. Once protection object is obtained, allwdeletingrows is property which needs to be set 'TRUE'. The rows containing the cells to be deleted must be unlocked when the sheet is protected.

Multiple room management -- best practice -- server side http api update?

Hi Folks,
Some of the forum postings on multiple room management are over year old now. I have student/tutor chat application which has been in the wild for 5 months now and appears to be working well. There is a single tutor per room, multiple chats and soon to be a whiteboard per student, which is shared with the tutor in a tabbed UI.
It is now time to fill out the multiple tutor functionality, which I considered and researched when building, but did not come to any conclusions. I'm leaning towards a server side implementation. Is there an impending update to the http api?
Here is what I understand to be the flow:
1) server side management of who is accessing the room
2) load balance and manage the room access 1 time user and owner session from the server side
3) for my implementation, a tutor will need to login to the room, in order for it to be available
4) Any reconnection would in turn need to be managed by the server side, and is really a special case of room load balancing.
My fear is that at some point I'm going to need access to the number of students in the room or similar and this is not available, so that I'll need client functionality, which will need update the server side manager.
As well, I'm concerned about delays on the server side access to which might create race conditions in a re-connect situation. User attempts to reconnect, but server side manager thinks that the user is already connected.
Surely this simple room management has been built, does anyone have any wisdom they can impart? Is there any best practice guidance or any samples?
Thanks,
Doug

Hi Raff, Thanks a ton for the response.
I wasn't clear on what I was calling load balancing. What I mean by this is room assignment for student clients. We have one tutor per room. There are multiple students per room, but each is in their own one-on-one chat with the tutor.
I'm very much struggling with where to do the room assignment / room managemnt, on the server side or on the client side (if that is even possible). In my testing it is taking upwards of 10 seconds minimum to get a list of rooms (4 virtually empty rooms) and to query the users in a single room (also a minimum of users/nodes in the queried room). If after this point, I 'redirect' the student to the least full room, then the student incurs the cost of creating a new session and logging into the room. As well I intend to do a bit of xml parsing, and other processing, so that 10 seconds is likely to grow.
Would I see better performance trying to do this in the client?
As far as the server side, at what point does a room go to 'not-active'?
When I'm querying the roomList, I am considered one of the 'OWNER' users in the UserLists. At what point can it be safe to assume that I have left the room?
Is there documentation on the meaning and lifecycle of the different status codes? not-active, not-running, and ok? Are there others?
How much staleness can I expect from the server-side queries?
As far as feature set, the only thing that comes to mind is xpath and or wild card support for getNode() but i think this was mentioned in other posts.
Regarding the reconnection issues, I am timing out the student after inactivity, and this is probably by and large the bulk of my reconnect use cases. This and any logout interaction from the student presents a use case where I may want reassign the student return to the same room as before. I can envision scenarios of a preferred tutor if available etc. In this case, I'll need to know list of rooms. In terms of reconnection failover, this is not not a LCCS / FMS issue.
Thanks again for responding.

Server side redirect with 4.5.1 and Netscape Enterprise Server

 Is it possible to have a servlet running under WL 4.5.1 to perform a server
 side redirect ala CGI?
 Here's my config:
 web server: Netscape Enterprise Server 3.6 on solaris, with weblogic
 plugin
 servlet runner: WL 4.5.1 on different host from ES.
 Here's what I want to happen:
 1) HTTP GET from browser to enterprise server
 2) forwarded by plugin to servlet
 3) servlet logs some activity to an application log file, and sends a
 server side redirect to enterprise server
 4) Enterprise server returns the file identified by the rediect directly
 to the client.
 This is possible with enterprise server and CGI, because the ES CGI code
 checks the return stream from the CGI program for "Location: <some url>". If
 it see's that, it tries to locally resolve that URL as the client had asked
 directly for that URL. I think this would only be possible with WL if the WL
 NSAPI plug in supported a server side redirect feature. Anyone know status
 of that? Or might ES support something like this depending on the order of
 the objects in obj.conf?
 Here's what I've tried in the servlet:
 res.setHeader("Location:", location);
 res.setContentType("magnus-internal/redirect");
 res.setStatus(302);
 This just sends an HTTP tempoary new location to the client for a client
 side redirect. Client side redirect is not desirable because it doubles the
 HTTP traffic.
 Another option would be to read the file I want to redirect to from inside
 the servlet and return it from the servlet, but that is not desirable
 because I want to have ES serve the file - thats it's job, it caches, less
 network traffic (between our servers), etc.
 Server side redirect is very useful feature and not that uncommon for web
 applications, so if WL does not support it now, I will probably put in a new
 feature request.
 Thanks for your help
 Mark Johnson.


Why not just use the proxy servlet to redirect to your netscape server? That
 does it on the server side!
 -russell
 Mark Johnson wrote:
 > I belive that sendRedirect performs a client side rediret, not a server
 > side redirect.
 >
 > Guy Tal <[email protected]> wrote in message
 > news:[email protected]...
 > > public void doGet(HttpServletRequest req, HttpServletResponse res) ...
 > > ...
 > > res.sendRedirect("http://destination");
 > > ...
 > >
 > > Guy
 > >
 > > Mark Johnson <[email protected]> wrote:
 > >
 > > > Is it possible to have a servlet running under WL 4.5.1 to perform a
 > server
 > > > side redirect ala CGI?
 > >
 > > > Here's my config:
 > > > web server: Netscape Enterprise Server 3.6 on solaris, with weblogic
 > > > plugin
 > > > servlet runner: WL 4.5.1 on different host from ES.
 > >
 > > > Here's what I want to happen:
 > > > 1) HTTP GET from browser to enterprise server
 > > > 2) forwarded by plugin to servlet
 > > > 3) servlet logs some activity to an application log file, and sends
 > a
 > > > server side redirect to enterprise server
 > > > 4) Enterprise server returns the file identified by the rediect
 > directly
 > > > to the client.
 > >
 > > > This is possible with enterprise server and CGI, because the ES CGI code
 > > > checks the return stream from the CGI program for "Location: <some
 > url>". If
 > > > it see's that, it tries to locally resolve that URL as the client had
 > asked
 > > > directly for that URL. I think this would only be possible with WL if
 > the WL
 > > > NSAPI plug in supported a server side redirect feature. Anyone know
 > status
 > > > of that? Or might ES support something like this depending on the order
 > of
 > > > the objects in obj.conf?
 > >
 > > > Here's what I've tried in the servlet:
 > > > res.setHeader("Location:", location);
 > > > res.setContentType("magnus-internal/redirect");
 > > > res.setStatus(302);
 > >
 > > > This just sends an HTTP tempoary new location to the client for a client
 > > > side redirect. Client side redirect is not desirable because it doubles
 > the
 > > > HTTP traffic.
 > >
 > > > Another option would be to read the file I want to redirect to from
 > inside
 > > > the servlet and return it from the servlet, but that is not desirable
 > > > because I want to have ES serve the file - thats it's job, it caches,
 > less
 > > > network traffic (between our servers), etc.
 > >
 > > > Server side redirect is very useful feature and not that uncommon for
 > web
 > > > applications, so if WL does not support it now, I will probably put in a
 > new
 > > > feature request.
 > >
 > >
 > > > Thanks for your help
 > >
 > > > Mark Johnson.
 > >
 > >
 > >
 > >
 > >
 > >
 > >
 > >
 Russell Castagnaro
 Chief Mentor
 SyncTank Solutions
 http://www.synctank.com
 Earth is the cradle of mankind; one does not remain in the cradle forever
 -Tsiolkovsky

Protect a document while allowing insertion of data in a table and points on a chart.

I have created a Word document that includes a table and a chart. Can I protect the document but allow entry of data into the table and allow points to be placed on the chart using Adobe?

Hi brianh89327665,
While you can apply a permissions password to a PDF to prevent things such as printing and changing the document, you can't apply it selectively to parts of the PDF.
Best,
Sara

Copy and paste images in server side folder

Hi ,
I want to copy & paste the images in server side folder .
Have you any idea than please send me.
Thanks.
Have a nice day

Client side: Reading/Sending file contents
FileInputStream in = new FileInputStream(filePath+"\\"+fileName);
int size = in.available();
byte data[] = new byte[size];
in.read(data,0,size);
in.close();
//calling remote method for sending file
uploadFile(fileName,data);
Server side method
public boolean uploadFile(String fileName,byte []data) throws IOException, ServerNotActiveException {
        FileOutputStream out = new FileOutputStream(fileName);
        out.write(data);
     out.close();
}

The value should be set for Base image URL and Image file directory

Hi experts
Now customer has the following issue.
XML Publisher concurrent request, using RTF layout template with LOGO, does not generate the LOGO for Excel output.
but in output formats PDF, it is shown normally.
from the debug log, we can found the following error message
======
[051812_054716051][][ERROR] Could not create an image. Set html-image-dir and html-image-base-uri correctly.
======
so I tell the customer to do the following action plan.
1. in XML Publisher Administrator resp > Administration expand the HTML Output section.
2a. enter a value for 'Base image URI'
2b. enter a value for 'Image file directory'
Customer set the value as following and retest this issue,but he found the issue is not solved.
Base image URI: /u01/r12/ebssnd/apps/apps_st/comn/java/classes/oracle/apps/media/XXSLI_SONY_LIFE_LOGO.gif
Image file directory: /u01/r12/ebssnd/apps/apps_st/comn/java/classes/oracle/apps/media
I verified 'Base image URI' and 'Image file directory' settings:
1) Change output type to HTML.
2) Click the Preview.
but the image is correctly displayed on HTML, so I think the issue is caused by user's uncorrectly setting of the base image URL and/or image file directory
but could anyone give me some advice on which value should be set for Base image URL and Image file directory
Regards
shuangfei

First thing to do is to edit the post and use some tags to format the code as it is unreadable and too much!
Read the FAQ (https://forums.oracle.com/forums/help.jspa) to find out how to do this.
Next we need to know the jdev version you are using!
As the code is generated I would first try to generate it again after the db change.
Timo

Web services server side uses C dll (native calls)

Hi,
I developed a web service using JAX-RPC. My implementation class uses native c function calls. Dose anybody know where I should put my C dlls and their dependentcy files on Web service server side (tomcat)? If they should be in the .war file, what kind of path in the war would be?
I have an exception ocurred, like this
[java] java.rmi.ServerException: Missing port information
[java] at com.sun.xml.rpc.client.StreamingSender._raiseFault (StreamingSender.java:357)
[java] at com.sun.xml.rpc.client.StreamingSender._send(StreamingSender.java:228)
I think probably it is because of native call problem, since I could get something back if not using native call.
Anybody has similar experience when developing web service using JAX-RPC and calling native c api functions on server side?
Thanx in advance!

Yes, I just tried it again (comment all native call out and just call the method that doesn't use native call, it works).
So your web service application using jax-rpc and c native dlls works already?
Can you tell me where you put all the native C DLLs and where I can set java.library.path in tomcat?
Thank you!

Protecting files directory, but allow server side access

Similar Messages

Maybe you are looking for