I have an Internet website running on IIS/Windows configured as follows:
- The website is publicly accessible for visitors to browse.
- A user can login and upload files.
- The user will be able to see their files, but not another user's files.
- After the files are uploaded they are stored in a directory in the website.
If someone has the full Url to the file e.g.
http://website.com/files/13212132.jpg how can I prevent the file from being accessed by people other then the user who uploaded the file?
Any insights will be appreciated.