Home/ Questions/Q 6873699
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-27T04:06:05+00:00

I am creating a recruitment site and have a folder called /CV/ where I

  • 0

I am creating a recruitment site and have a folder called /CV/ where I am storing resume files uploaded by the member.

Lets say a user saves their resume and its called 123.pdf and is stored in cv/123.pdf.
How can I prevent the pdf file from loading in the browser window or downloading to the users machine if they type in ‘http://mydomain.com/cv/123.pdf’?

I am using forms Authentication, Asp.Net Membership and Roles Providers, Asp.net 4 on an IIS6 server.

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team
    1. Create a folder that is outside of the hierarchy of the main www folder used by the site (so it cannot be directly accessed through url)
    2. Use an ashx handler to provide access to download the file. The logic within the ashx file can validate whether the user is authorized to download the file or not.

    ASHX references: 1, 2, 3

    • 0