Hi,
The end users of my website need to be able to upload their files (image/pdf/doc..ect) and view/download their updated files. But nobody can view /download other users' files.
I am thinking save the actual file into different directory for individual user, save other file info into database (like file name and path), and when the user view the I will generate a hyperlink to point to the file so that they can download. But how can I protect a users files is not be downloaded by another user? I am using database for authorization and it is not an intranet website.
If a file can be downloaded by one user does that mean it can be downloaded by all users?
Or should I need to save the actual file data into database and use my code to read the file from database and write to the browser?
thanks
-rockdale
...
Go to the complete details ...