Hey,
I'm working on our company intranet. One of the features is 'Share via email', which is a simple mailto: link in an 'encrypted' format; a file id is passed to a download handler which queries a SQL db to offer up the actual file. This access is then logged
using their user id, which is also picked up from SQL using HttpContext.Current.User.Identity.Name.
The actual handler url is:
http://domainname.com/download.ashx?FileID=xxx
This works great for internal users because they're already authenticated by means of their domain user account and have access to the intranet url.
I would like to be able to open up the download handler to external, non-domain users. So we can use the 'share via email' feature to send files to clients as some of them have stupidly low email limits!
Some problems I see are:
1) As each file retrieval is logged using the d ...
Go to the complete details ...