Hi all
I've almost come to the end of developing a web application. However I have just discovered that this application allows unauthenticated access to files which otherwise were only linked to, from within authenticated areas. This could allow an attacker to gain access to sensitive information without any access to accounts, sessions or other vulnerabilities.
How would I prevent an unautenticated user accessing these URL's directly e.g.: www.websitename.co.uk/membersArea/pdf/sample.pdf Go to the complete details ...