Im designing a site where registered users can upload their own images that should be displayed to any visitor. However the images have to be approved by an admin. So when the images are aproved they will show in an image gallery.
My problem is how to protevct the images from browsing. I dont want anyone to be able to just write in the folder url and broswe through all the images.
My questions:
1. If i store the images in the app_data folder they will be proteceted from browsing directly. But they cant be used in an webpage that is public either, correct?
2. If i store them in a public folder the images can be used to display on a public page, but even the images that are not aproved will be accesible if one knows the url to the folder or the image itself, correct?
3. It wont help if i secure the image folder with roles cause then the images will only be accesible by the user that is logged in and is in the proper role.
So how can thi ...
Go to the complete details ...