Posted by Zoe Brown on 05/11/07 15:16

Hello all.

I have a client who wants to be able to restrict access to a PDF file to a
specific user. They want a control panel where they can create a user with
username/password and upload the PDF. So far so good.

But what is the best way to restrict access to the PDF ? I was thinking of
storing it above the root so that it was not in the public domain, when the
user requests it, prompt for username/password and then copy the file with a
random filename to a public place. Then delete is straight afterwards.

There has to be a better way though ?

thanks

Zoe

[Back to original message]