Protecting Download Links
Can anyone think of a way to protect a download link so that people cannot see where the download is coming from? We think that people are using a direct link to download our software. (thus bypassing the registration page) We would like to change the link and add some more protection. We have a IIS 5 box.
I have already looked at some protection through a third party (anti-leech.com) but want to keep my options open if anyone has any ideas.
Thanks in advance.
Here's a test site to verify that the source is masked
http://www12.brinkster.com/bluebeard96/formproc.asp
This page will prompt a download of a text file... the file name to save will be savedfile.txt, but the original file is named something else (open the txt file after downloading to find out what!)
:)
Thanks all... this has been an educational and fun one to play with.
There's one way to find out
And unfortunately I'm moving today... so I won't be able to test until later tonight.
Let me as one thing though. I'f we're going to be throwing a seed in a session variable, why don't we just tell form.asp to set a session variable and use an if/then in formproc to check for existence of the session variable. I don't really see this as less secure than the suggestion you proposed, as the session variable I suggest and the session variable (encryption key) you suggest would have the equal vulnerability.
That's my initial thoughts, at leats. I might be changing my mind after I get into it tonight.