Comments on: ASP.Net file download protection through authentication

By: Mark

Mark — Thu, 26 Jul 2007 16:59:18 +0000

I had to undertake the same task as you did so I wrote an article on it. But my guide illustrates an example using php. :)

The example is at: http://www.marksanborn.net/php/download-files-through-authentication/

By: Adam

Adam — Sat, 03 Mar 2007 14:20:47 +0000

You are absolutely correct, thanks!

While testing your change I ran into a much simpler method of attaching the file (Response.TransmitFile). I’ve updated the post to use it instead since it removes the complexity and potential for errors.

By: Izzy

Izzy — Sat, 24 Feb 2007 11:40:02 +0000

Oops, I mean the mistake in (oh, the irony):
ReDim fbytes(fs.Length)
fs.Read(fbytes, 0, fs.Length)

Yea, we all copy and paste :-/

By: Izzy

Izzy — Sat, 24 Feb 2007 11:38:26 +0000

There is a mistake in:
ReDim fbytes(fs.Length - 1)
fs.Read(fbytes, 0, fs.Length - 1)

Should be:
ReDim fbytes(fs.Length - 1)
fs.Read(fbytes, 0, fs.Length - 1)

You are adding an extra byte to the end of the file without this -1 in the code. This is because arrays start counting elements at 0 and .Length starts counting at 1… This way you don’t corrupt your users data for sensitive files =)