I have a folder on my site that allows authenticated users to upload/download certain types of files. The authentication is handled with my custom code, not using the ASP.NET membership/roles, and works just fine. The only thing is that if I know the directory structure and filename, I can type that into the address bar and get the file anyway. While it is unlikely in the extreme that anyone could reproduce this, it's an irritant. Is there a way to secure my files, so that they cannot be directly browsed to, but only received through my web interface?
...
Go to the complete details ...