Can All But One IP Address be Blocked?

Question

I have a website where customers will be paying for purchases
with a credit card via PayPal. After they complete their payment at
PayPal, they are returned to a specific page on my website. On this
page are Word files available for download. Is there a way to keep
anyone from viewing this page except users who have returned to the
site from PayPal? I am trying to prevent unauthorized downloads of
the Word files by non-paying customers. Even hiding part of the
code on the page unless the user comes from PayPal would work. I am
assuming this can be done with an Application.cfc file, but perhaps
I'm wrong. If I'm right, I haven't been able to figure out how.

Thanks in advance for your help.
Gwen H
CF Noob

Newsgroup_User · Accepted Answer

> > display this content> > display an error message> > Not all that secure as http_referer and any other header i.ecgi content is rather easily spoofed. I.E. it would not be hard for me touse my Firefox plugins to add 'paypal' to the referer and I'm inlike Flint.What type of paypal account do you have?When we had a membership section of our site, I had the typewhere paypal posted a response to my site from there. The actionpage on my site that received the post processed the results and tookappropiate action. If the transaction is correct and proper the userrecord in our database was updated allowing that user access to the membercontent.

c_wigginton · Answer

Move the files outside of a web accessible directory. Then use cfcontent to deliver the file. This will secure your content. You'll have to build the authentication/authorization framework. You could even limit how long the person would have access.

On the return trip, perform any authentication necessary and then retrieve the content. The code attached is a simple example. Note the getMimeType UDF. You can find the UDF on cflib.org

Regístrese

Social Login

Bienvenido

Social Login

Escaneando el archivo en busca de virus

Este archivo no se puede descargar