W3C home > Mailing lists > Public > www-html@w3.org > October 2000

RE: Download question

From: Dave J Woolley <david.woolley@bts.co.uk>
Date: Wed, 25 Oct 2000 11:50:44 +0100
Message-ID: <81E4A2BC03CED111845100104B62AFB5824B31@stagecoach.bts.co.uk>
To: "'www-html@w3.org'" <www-html@w3.org>
> From:	Pawel S. Veselov [SMTP:vps@phoenix.math.spbu.ru]
> You need a cgi script like that:
> This script can also determine whether the file should be sent or not
> and what file to send.
This only hides the locl file name.

My guess is that the questioner is trying to achieve
security by obscurity in terms of only allowing access
to a file to authorised users, or those who have 
completed a demographics forms.

It's also possible, but I suspect unlikely, that this is
being done because the file is large and they want to
benefit from public caching proxies.

What they probably don't want is people publishing deep
links to the actual file.

E.g. one travel company I know has PDF itineries, but 
expects one to provide name, address etc, before seeing them.
However, the filenames are derivable from the tour code and
once you know one, you can bypass the form for the others.
I suspect the questioner wants to stop this sort of thing

--------------------------- DISCLAIMER ---------------------------------
Any views expressed in this message are those of the individual sender,
except where the sender specifically states them to be the views of BTS.

Received on Wednesday, 25 October 2000 06:50:53 UTC

This archive was generated by hypermail 2.3.1 : Wednesday, 7 January 2015 15:05:55 UTC