I am developing application where users will store their images on our web-application. I have to make sure that the users data can`t be viewed by any other users Anonymous/Authenticated users. Only the owner can see his/her images.
In general the images or other data stored on web-server are secure enough that other application can`t access those data. But when we display the image on webpage it gives the URL for that image. Having that URL any user can see/download that image.
Now I want an idea how to solve this issue. I have an rough idea that a session variable or cookie with user identification could make a trick but is this secure enough for this purpose? any other suggestion would be a good help?
...
Go to the complete details ...