English 中文(简体)
通过认证向下文件文件
原标题:downfile file through authentification

我正在寻找解决这一需要的办法。我在www.mydomain.com上有一个网站。我想允许我的访客在www.otherdomain.com上下载一个文件,即www.otherdomain.com,使用一个基于 cookie 会话的账户用户/密码。事实上,下载文件www.otherdomain.com/files/doc.pdf,需要用用户/password进行认证。

我在我的网站上使用 CURL 登录到其他 Domain. com, 检索cookie 并下载文件,

此外,我不想让我的访客看到用户/密码:)

你有什么想法 做这种增强?

提前感谢。

问题回答

您可以在效率低下和不安全之间做出选择:

  • Only if you fetch the doc (e.g. via cURL) does the end user not need any credentials for the other domain
  • OTOH If you give the end user some sort of credentials, you lose control, what he does there.




相关问题
why the session in iis automatically log out?

I used iis6, and when i called a function Directory.delete(), the all the session relate this website will be logged out. and i debugged the website, i found no exception. any one have ideas on this ? ...

Check session from a view in CodeIgniter

What is the best way to check session from a view in CodeIgniter, it shows no way in their user guide, otherwise I will have to make two views on everything, which is kinda weird...still a newbie to ...

Can I get the size of a Session object in bytes in c#?

Is it possible to get the size(in bytes) of a Session object after storing something such as a datatable inside it? I want to get the size of a particular Session object, such as Session["table1"], ...

提供严格分类的出席会议物体

提供严格分类的与会机会的最佳方式是什么? 我正计划转而选择矩阵,这正在促使汇编者抱怨我的幻觉方案拟订方法......

PHP Session is not destroying after user logout

I m trying to create an authentication mechanism for my PHP Application and I m having difficulty destroying the session. I ve tried unsetting the authentication token which was previously set within ...

热门标签