Hello Mitchel,

This article is great, I always wondering what it was. But unfortunately (at least for me), it is not clear enough...
Fo Secure File System, I do not understand how to put an SWF video for example, and to link it into an HTML/Text module (so people can see it in myt website, but are not allowed to download it)....
You should add this kind of explanation. Because with the information provided, for me it is not usable and I did not manage to do anything with it. I just understood the purpose of it, not how to use it.

DV

DV,

In your case, you could link to the file using the LinkClick.aspx page. Using the file ID, then you can use that as the source for your SWF. People wouldn't be able to download it unless they have logged in.

If you want shoot me an e-mail and I'll give you a bit of guidance.

Great article! Many people will find that useful...

Thanks for shedding light on this. I am trying to figure our another aspect of the secure folder; How do I set up PDF to PDF links within secure folders? I was able to park my files outside of DNN control on the server before, but that laid them open and unsecured. I'm using a summary PDF doc that links out to other PDFs, but I can't get the links to work.

Fritz,

To link to a document in a secured folder, you must link to the LinkClick.aspx page and pass the file id parameter to it. You cannot link directly to the file.

Nice one, I am glad that I came across this article..

be aware, that you can specify folder type only when creating the folder, this cannot be changed afterwards.

i have the same question with the swf files. I have a folder and it contains like 3 swf files,index.htm, js file etc. I can use the html module and link the index.htm file but the user can copy and paste the url and see the presentation even without logging in to the portal. When i tried the links module and linked to the index.htm file nothing happens.the page is blank. I want to show the presentation when the user is logged in. They cannot see the presentation when the user is looged off.
I created two folders one in secure and an the other in insecure and uploaded the files. using the links module to the index.htm file i was unsucessfull with secure and insecure folder.
Any help

Is there an example of passing values to the linkclick.aspx page? I tried to use linkclick.aspx?FileId=39 but it leads to nothing. I'd like to use the secured folders to protect all of my pdfs. thanks in advance.

Jay,

There is a specific method inside the DotNetNuke API that can be called to get the proper link...it is inside the DotNetNuke.Common namespace

I am using "Secure - File Transfer" to store my PDF documents. The problem i am having is I am not able to link to those document from the web page...I tried using "LinkClick.aspx"..but no luck with that..could someone throw light on how to use "linkclick.aspx" and do i need to pass "FileID" or the "ticketnumber"...Thanks in advance

Mohamed,

The link I get is in the format /LinkClick.aspx?fileticket=xxxxxxxxx&tabid=xx&mid=xxx

I am experienceing the same problem, trying to store PDF in "secure file" and retrieve using "linkclick.aspx".

I manage to find out the link by adding a "Link" module and point to the file, then copy the link.

But I think there got to be another way...text/html module (03.03.00) don't work, but maybe its just outdated.

Mitchel, do you have a specific URL example you can give us?

Dax

Dax,

The comment above has the format, if you have more questions, please post to the forum.

I would like to provide search capability to the users ONLY in ONE SPECIFIC FOLDER in my site. not in the whole of it. how can i do it through search module??

I've been told that the following is possible:

1. Various bots (google etc), should be able to find and index the entire contents of a pdf which exists in a folder within the DNN system.

2. When seen by a bot for indexing, a partial "listing" of the find is delivered to google as the text which will be displayed when an organic search finds _any_ text contained in the pdf.

3. When the user clicks on the link presented by google, the user is directed to a page within the DNN portal but that "page" is not necessarily the pdf itself.

4. The folder which contains the pdf remains "secure" in that a user, even if they know the fully qualified URL to the pdf, will not be able to access without going through some portal-specified process such as requiring them to provide an email address.

Is this possible? If so, what is required to make it work?

Thanks,

Ken Florian
www.corgenius.com

If a file is secured by a role, it will NOT be searched by Google, as the bot will not have access to the content.

If you have further questions please use the forum for discussion.

This is a little off topic, but I'm sure you will know the answer to this: When I click to change a file name in the file manager, what do the R H S A check boxes that pop up do?

Thanks!

Fritz,

Those values relate to standard windows file permissions, I'd have to go dig up the actual definitions of each, but they are just links to standard windows permissions.

Thanks!
I found the secret code:

R - Read Only
H - Hidden
S - Indexing Service
A - Archive

Just for the record.

Hi, i'm trying to set up the secure file system, and seems to work fine.
Except: when i add a file to a secure folder via Windows Fileexplorer (ex. test.jpg.resources) , i cant find it in the dotnetnuke filemanager (while i'm the host). Refreshing, synchronising... nothing helps, the new file do not apear.
I made my own module with the statement Directory.GetFiles() , this returns me all files (so not only the ones managed from within DNN, but also my own files)

Any Ideas? Thanks!

Its getting even worse, i thought the this was caused by the owner of a file, but this is not the case:
i had a file in the dnn filemanager, test1.jpg.resources
then i renamed it (outside dnn) to test2.jpg.resources
and it's gone in the dnn filemanager, and the owner of the file is still IUSR

Technically FTP'ing files to a secure directory is not something that is supported.

I would think that a File Sync would grab the new files....but it might just skip the secure folders.

that would explain a lot. anyway, i used the code in the source of dnn, to make my own "retrieve secured file" function.
But this could be a point of discussion? Why would you not synchronise secured folders???

I am trying to change the file manager to secure - file system. However, the change will not save. How do I change the file manager to secure instead of standard. It seems there are some restrictions placed on making the change to secure?

Thanks!

Jen,

The type selection can ONLY be defined on NEW folders. You cannot change existing ones.

mitch, we have a dnn portal. it provides for both public and restricted access. when we host files in the application for download the user must authenticate themselves. the links are http links and it is possible that the user can send the target http link to someone we dont want to have access to the file. when they plug the url into their browser, the download is successful. what are we missing?
thanks in advance
marc

mitch, we have a dnn portal. it provides for both public and restricted access. when we host files in the application for download the user must authenticate themselves. the links are http links and it is possible that the user can send the target http link to someone we dont want to have access to the file. when they plug the url into their browser, the download is successful. what are we missing?
thanks in advance
marc

Marc,

You must use a "Secure" folder type to get this type of setup.

The link should then be to the LinkClick.aspx page, which then validates security.

Hi Mitch,

I am trying to create a custom module to list documents available to a user according to folder permissions. Some documents are protected and visible only to certain roles while others are available to All Users. How would you query the database to find all the folders the user has permission to view INCLUDING those visible to All Users. My trouble seems to be that there is not a Role for "All Users" this is what I have so far...

SELECT Replace(FolderPath, '/', '\') as UNCPath, FolderPath
FROM Folders
WHERE FolderID IN (
SELECT
FolderID
FROM FolderPermission
WHERE RoleID IN (
SELECT
RoleID
FROM UserRoles
WHERE UserID = (SELECT UserID FROM Users WHERE Username = @UserName)
AND (EffectiveDate IS NULL OR EffectiveDate <= GETDATE())
AND (ExpiryDate IS NULL OR ExpiryDate >= GETDATE())
AND PermissionID = 5))

Any help much appreciated.

Hi Mitchel, this is a great pleasure to talk with a Author whose books are in my library.
Mitchel I'm currently only using DNN. The problem which i observed is:
When I set security forbidden for annyoun user and create a link to that file on a page. when annoyn user clicks on the link it display error LinkClick.aspx not found (some like this). If I set allowed access to that file than it is downloadable. Actually I want annoyn user must login before downloading the file.
While DNN prompt for error instead of redirect it to login page. please help.

Muhammad, this is a known issue:

http://support.dotnetnuke.com/issue/ViewIssue.aspx?ID=12050&PROJID=2

It appears users get a 404 error if they aren't already signed in and try to navigate to a secure file through a link. It'd be much more ideal if this took them to a login page with a redirect back to the download after successful login.