My company produces confidential documents in pdf form that they email
to customers such as contracts and purchase orders. All these
documents gets store in a directory tree that has all the files for
each customer or vendor grouped in a directory.

I have been asked to make it so that they can download the documents
themselves. For security purposes, the root of the tree is not under
the web root directory.

All users must log in and their unique ID is stored as a session
variable.

Using the filesystem object I can do a directory listing on
documentroot\<their unique id> and get a list of the files. Since it
is not in the web path I cannot just simply create a hyperlink to the
document. Therefore, I would like to make each listing a clickable
link to an ASP page called getdocument.asp that will then retrieve
that document and send it to the user.

It is not clear to me how I can do an include of a document in this
manner. Can anyone help me out on this?

TIA

Re: How can I send a file NOT in the web path? by Tom

Tom
Fri Feb 06 12:37:30 CST 2004

"Matthew Speed" <mspeed@mspeed.net> wrote in message
news:p6j720pv0t50otvqingebqb5ahqjlajm3p@4ax.com...
> My company produces confidential documents in pdf form that they email
> to customers such as contracts and purchase orders. All these
> documents gets store in a directory tree that has all the files for
> each customer or vendor grouped in a directory.
>
> I have been asked to make it so that they can download the documents
> themselves. For security purposes, the root of the tree is not under
> the web root directory.
>
> All users must log in and their unique ID is stored as a session
> variable.
>
> Using the filesystem object I can do a directory listing on
> documentroot\<their unique id> and get a list of the files. Since it
> is not in the web path I cannot just simply create a hyperlink to the
> document. Therefore, I would like to make each listing a clickable
> link to an ASP page called getdocument.asp that will then retrieve
> that document and send it to the user.
>
> It is not clear to me how I can do an include of a document in this
> manner. Can anyone help me out on this?

Use this technique:
http://support.microsoft.com/?kbid=276488

--
Tom Kaminski IIS MVP
http://www.iistoolshed.com/ - tools, scripts, and utilities for running IIS
http://mvp.support.microsoft.com/
http://www.microsoft.com/windowsserver2003/community/centers/iis/




Re: How can I send a file NOT in the web path? by Matthew

Matthew
Fri Feb 06 14:36:32 CST 2004

Thanks. It worked great