Home/ Questions/Q 8628983
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-06-12T08:41:25+00:00

I have some PDFs uploaded by the user and they are saved on hard

  • 0

I have some PDFs uploaded by the user and they are saved on hard drive. Those PDFs should actually only be visible by the user who uploaded. But at the moment it is not secure. If somebody guesses the name of the PDF, it can be viewed by anybody else too.

Eg: http://www.something.com/PDFs/abcghjiekm.PDF

This is a security threat. What I’d like to be able to do is have some kind of logic that processes the request to these PDFs and compare it with my DB to see if this PDF is actually belonging to the user who requested it. How can I do that?

Edit: I cannot use FileStream as my website is already up and running. I don’t want to change all of the codebase and go into each and every aspx page to hunt where the PDFs are accessed.

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    You could handle PDF through an special HttpHandler in IIS instead of the StaticFile-Handler and check for Access-Rights.

    IF you are using MVC a route like /PFDs/{file}.pdf with an Controller returning Content will do.

    • 0