blocks|key|275107|text|在保存文件时，必须为此创建有效的文件夹结构。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|275108|例如：如果使用userID+20052的用户登录并上载文件。则文件路径应为：|275109|Files/20052/3828392839.pdf|code-block|syntax|javascript|275110|在这里，我创建了与userid相同的foldername来保存上传的文件。|275111|打开文件时，您必须在userid中比较foldername，即20052和loggedin。|offset|length|style|CODE|275112|如果它们是相同的，则允许download该文件。|275113|entityMap^0|0|0|0|0|A|6|J|A|0|C|8|0^^$0|@$1|2|3|4|5|6|7|U|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|V|8|@]|9|@]|A|$]]|$1|D|3|E|5|F|7|W|8|@]|9|@]|A|$G|H]]|$1|I|3|J|5|6|7|X|8|@]|9|@]|A|$]]|$1|K|3|L|5|6|7|Y|8|@$M|Z|N|10|O|P]|$M|11|N|12|O|P]]|9|@]|A|$]]|$1|Q|3|R|5|6|7|13|8|@$M|14|N|15|O|P]]|9|@]|A|$]]|$1|S|3|-4|5|6|7|16|8|@]|9|@]|A|$]]]|T|$]]

You will have to create valid folder structure for this purpose while saving the file.

Eg. If user with userID 20052 logged in and uploads the file. Then file path should be:

<pre><code>Files/20052/3828392839.pdf
</code></pre>

Here i have created foldername same as userid to save the uploaded file.

While opening the file you will have to compare the <code>foldername</code> i.e. 20052 and loggedin <code>userid</code>.

If they are same then allow to <code>download</code> the file.

blocks|key|730995|text|您应该根据需要在asp.net站点中实现适当的身份验证和授权。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|730996|要了解更多信息，请访问此链接|730997|730998|ASP.Net+Authorization|unordered-list-item|offset|length|730999|ASP.Net+Authentication|731000|ASP.Net+Authentication+and+Authorization|731001|731002|entityMap|0|LINK|mutability|MUTABLE|url|http://msdn.microsoft.com/en-us/library/vstudio/wce3kxhd(v=vs.100).aspx|1|http://msdn.microsoft.com/en-us/library/vstudio/eeyk640h(v=vs.100).aspx|2|http://www.codeproject.com/Articles/98950/ASP-NET-authentication-and-authorization^0|0|0|0|0|L|0|0|0|M|1|0|0|14|2|0|0^^$0|@$1|2|3|4|5|6|7|10|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|11|8|@]|9|@]|A|$]]|$1|D|3|-4|5|6|7|12|8|@]|9|@]|A|$]]|$1|E|3|F|5|G|7|13|8|@]|9|@$H|14|I|15|1|16]]|A|$]]|$1|J|3|K|5|G|7|17|8|@]|9|@$H|18|I|19|1|1A]]|A|$]]|$1|L|3|M|5|G|7|1B|8|@]|9|@$H|1C|I|1D|1|1E]]|A|$]]|$1|N|3|-4|5|6|7|1F|8|@]|9|@]|A|$]]|$1|O|3|-4|5|6|7|1G|8|@]|9|@]|A|$]]]|P|$Q|$5|R|S|T|A|$U|V]]|W|$5|R|S|T|A|$U|X]]|Y|$5|R|S|T|A|$U|Z]]]]

You should implement proper authentication and authorization in asp.net site for your requirement.

To learn more go through this links

<ul>
<li><a href="http://msdn.microsoft.com/en-us/library/vstudio/wce3kxhd(v=vs.100).aspx" rel="nofollow">ASP.Net Authorization</a></li>
<li><a href="http://msdn.microsoft.com/en-us/library/vstudio/eeyk640h(v=vs.100).aspx" rel="nofollow">ASP.Net Authentication</a></li>
<li><a href="http://www.codeproject.com/Articles/98950/ASP-NET-authentication-and-authorization" rel="nofollow">ASP.Net Authentication and Authorization</a></li>
</ul>

blocks|key|275173|text|非常简单。创建一个普通的ASP.NET页面。按您想要的方式进行身份验证，如果它们通过了身份验证，则将文件发送到此处所述的响应...|type|unstyled|depth|inlineStyleRanges|entityRanges|data|275174|How+to+send+file+in+HttpResponse?|offset|length|275175|或者，如果它们没有通过身份验证，则不发送文件，而是使用类似于“访问被拒绝”之类的html进行响应|275176|entityMap|0|LINK|mutability|MUTABLE|url|https://stackoverflow.com/questions/5895684/how-to-send-file-in-httpresponse^0|0|0|X|0|0|0^^$0|@$1|2|3|4|5|6|7|P|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|Q|8|@]|9|@$D|R|E|S|1|T]]|A|$]]|$1|F|3|G|5|6|7|U|8|@]|9|@]|A|$]]|$1|H|3|-4|5|6|7|V|8|@]|9|@]|A|$]]]|I|$J|$5|K|L|M|A|$N|O]]]]

Pretty simple. Create a normal ASP.NET page. Do your authetnication however you want to do that, if they pass authentication, send the file to the response as described here...

<a href="https://stackoverflow.com/questions/5895684/how-to-send-file-in-httpresponse">How to send file in HttpResponse?</a>

Alternatively if they do not pass authentication, don't send the file instead respond with some html like "Access Denied"

blocks|key|738780|text|您可以通过创建对documents文件夹的权限来保护它。这意味着您需要权限才能上传文件和下载文件。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|738781|对于简单的windows身份验证:将读取器和写入器角色创建为本地用户/组。对于基本身份验证:最好是对角色使用数据库身份验证。|738782|如果您使用的是IIS7.0，则需要检查IIS应用程序池是否配置正确|738783|entityMap^0|0|0|0^^$0|@$1|2|3|4|5|6|7|H|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|I|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|J|8|@]|9|@]|A|$]]|$1|F|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|G|$]]

You can secure this by creating permissions to documents folder. This means you need permission to upload files and to download as well.

For Simple windows authentication: Create reader and writer roles as local user/group.
For Basic Authentication: Best is to use database authentication for roles.

You need to check IIS apppool is configured correctly if you are using IIS7.0

blocks|key|2642839|text|如果你使用的是IIS+7%2B，请看这个问题：How+do+I+protect+static+files+with+ASP.NET+form+authentication+on+IIS+7.5?。|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|2642840|对于IIS6，您可以将文件放在app_data文件夹中，并且需要创建一个处理程序来处理这些文件。|2642841|entityMap|0|LINK|mutability|MUTABLE|url|https://stackoverflow.com/questions/2903292/how-do-i-protect-static-files-with-asp-net-form-auhentication-on-iis-7-5^0|L|22|0|0|0^^$0|@$1|2|3|4|5|6|7|N|8|@]|9|@$A|O|B|P|1|Q]]|C|$]]|$1|D|3|E|5|6|7|R|8|@]|9|@]|C|$]]|$1|F|3|-4|5|6|7|S|8|@]|9|@]|C|$]]]|G|$H|$5|I|J|K|C|$L|M]]]]

If your are using IIS 7+ see this question :
<a href="https://stackoverflow.com/questions/2903292/how-do-i-protect-static-files-with-asp-net-form-auhentication-on-iis-7-5">How do I protect static files with ASP.NET form authentication on IIS 7.5?</a> .

For IIS 6 you can put the files in app_data folder and you need to make a handler to serve the files .

I am uploading documents such as excel, pdf, word, ppt in asp.net. How can I make it secure. 

Suppose I have a website www.example.com and I have uploaded docs in "Files" folder in root directory. the name of a file I have uploaded is 3828392839.pdf and if enter "www.example.com/Files/3828392839.pdf" url in address bar then it allows to open and download docs. I need If there is a valid logged in user then it allows to open or download the files.

How to secure uploaded files in ASP.Net

翻译质量差，导致语言生硬或混乱。

没有提供实际的解决方法或示例。

解答不清晰，无法理解或解决问题。

页面排版不美观，阅读体验差。

文章

问答

视频

学习中心

腾讯云实验室

直播

竞赛

腾讯云代码分析专区

腾讯iOA零信任安全管理系统专区

腾讯云架构师技术同盟交流圈

腾讯云数据库专区

腾讯云顾问专区

腾讯云原生专区

腾讯混元专区

腾讯云TCE专区

腾讯云Lighthouse专区

腾讯云HAI专区

腾讯云Edgeone专区

腾讯云存储专区

腾讯云智能专区

腾讯轻联专区 

腾讯云开发专区

TAPD专区

腾讯轻量云游戏服专区

腾讯云最具价值专家

腾讯云架构师技术同盟

腾讯云创作之星

腾讯云开发者先锋

腾讯云代码助手

云原生构建

TAPD 敏捷项目管理

Cloud Studio

SDK中心

API中心

命令行工具

涵盖代码开发、场景应用、自动测试全流程，助你从零构建专属AI助手

一站式MCP教程库，解锁AI应用新玩法

我正在上传的文件，如excel，pdf，word，ppt在asp.net。我怎样才能保证它的安全。假设我有一个网站www.example.com，并且我已经在根目录下的"Files“文件夹中上传了文档。我上传的一个文件的名称是3828392839.pdf，如果在地址栏中输入"www.example.com/Files/3828392839.pdf“url，则可以打开和下载文档。我需要如果有一个有效

问如何在ASP.Net中保护上传的文件
EN

回答 5

Stack Overflow用户

Stack Overflow用户

Stack Overflow用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问如何在ASP.Net中保护上传的文件EN

回答 5

Stack Overflow用户

Stack Overflow用户

Stack Overflow用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问如何在ASP.Net中保护上传的文件
EN