DotNetNuke Folder Types Explained 

DotNetNuke includes 3 separate folder type options for portal administrators.  I have noticed recently that this is a function that not very many individuals were aware of; so I thought I would take the time to quickly explain the differences between the three and when you might use one over the other.  This article wil only cover what the different folder types are and their usage.  Not the actual implementation.

Via the DotNetNuke File Manager functionality the three options you are given for folder security are; standard file system, secure-file system, secure-database.  Below I will discuss each of these security levels in detail.  Please keep in mind that these values ONLY apply to specific folders inside your DNN folder structure they do not actually branch out and create any separate file structures.  You can see these options via file manager as in the image below.  (Taken from a DNN 4.6.2 install)

File Manager Folder Types

Standard File System

The standard file system is exactly what you might expect.  This is a method where you have a standard collection of files and folders and any files you upload will simply be available via the path to that folder.  This is the file system that most individuals are familiar with.  You would use this file system option when you are not concerned about access to your files, for example this is where you could place your logo file for your portal or a freely available image file.

Secure File System

A folder that is created as a "Secure File System" folder within DotNetNuke is a folder that will still store files in the logical file structure that you layout, however, the files within this directory will have .resources appended to the filename when it is saved.  This method prevents any person from linking directly to those files as ASP.NET will NOT serve .resources files to a remote browser.

Now, you can use this functionality to protect files that you don't want others to hotlink to.  You can utilize the DNN LinkClick.aspx file processor to actually serve the file up when it is needed which makes it possible for you to set the file view permissions to restrict the viewing to just authenticated users or any other selected role.  This provides a great means for you to protect your important data.

Secure Database

This final option is similar to the secure file system in that it provides a secure location for your files to be saved.  The difference is in where the actual files are stored.  With this option all files are actually stored in your sites' SQL Server database and are extracted and served to your users when needed.  Due to this I would only recommend using this option or HIGHLY secured files that you want to be 100% sure are embedded into your applications database.  If you are storing large files using this method you might notice that its performance is the slowest of all three options.

I hope that this has provided you with a helpful overview of each folder type available in DotNetNuke.

Posted by Mitchel on Thursday, December 06, 2007
 

Comments

Hello Mitchel,

This article is great, I always wondering what it was. But unfortunately (at least for me), it is not clear enough...
Fo Secure File System, I do not understand how to put an SWF video for example, and to link it into an HTML/Text module (so people can see it in myt website, but are not allowed to download it)....
You should add this kind of explanation. Because with the information provided, for me it is not usable and I did not manage to do anything with it. I just understood the purpose of it, not how to use it.

DV

By Déclic Vidéo FX on Friday, December 07, 2007 at 12:01 AM

DV,

In your case, you could link to the file using the LinkClick.aspx page. Using the file ID, then you can use that as the source for your SWF. People wouldn't be able to download it unless they have logged in.

If you want shoot me an e-mail and I'll give you a bit of guidance.

By mitchel.sellers@gmail.com on Saturday, December 08, 2007 at 7:42 AM

Great article! Many people will find that useful...

By Will on Tuesday, December 11, 2007 at 10:01 AM

Thanks for shedding light on this. I am trying to figure our another aspect of the secure folder; How do I set up PDF to PDF links within secure folders? I was able to park my files outside of DNN control on the server before, but that laid them open and unsecured. I'm using a summary PDF doc that links out to other PDFs, but I can't get the links to work.

By Fritz on Thursday, January 17, 2008 at 3:25 AM

Fritz,

To link to a document in a secured folder, you must link to the LinkClick.aspx page and pass the file id parameter to it. You cannot link directly to the file.

By mitchel.sellers@gmail.com on Thursday, January 17, 2008 at 3:30 AM

Nice one, I am glad that I came across this article..

By Nitin Pawar on Friday, February 08, 2008 at 8:26 AM

be aware, that you can specify folder type only when creating the folder, this cannot be changed afterwards.

By Hans Hallole on Thursday, March 06, 2008 at 10:22 AM

i have the same question with the swf files. I have a folder and it contains like 3 swf files,index.htm, js file etc. I can use the html module and link the index.htm file but the user can copy and paste the url and see the presentation even without logging in to the portal. When i tried the links module and linked to the index.htm file nothing happens.the page is blank. I want to show the presentation when the user is logged in. They cannot see the presentation when the user is looged off.
I created two folders one in secure and an the other in insecure and uploaded the files. using the links module to the index.htm file i was unsucessfull with secure and insecure folder.
Any help

By rajeev on Saturday, March 08, 2008 at 10:03 AM

Is there an example of passing values to the linkclick.aspx page? I tried to use linkclick.aspx?FileId=39 but it leads to nothing. I'd like to use the secured folders to protect all of my pdfs. thanks in advance.

By Jay Ro on Thursday, April 24, 2008 at 3:43 PM

Jay,

There is a specific method inside the DotNetNuke API that can be called to get the proper link...it is inside the DotNetNuke.Common namespace

By mitchel.sellers@gmail.com on Thursday, April 24, 2008 at 3:49 PM

I am using "Secure - File Transfer" to store my PDF documents. The problem i am having is I am not able to link to those document from the web page...I tried using "LinkClick.aspx"..but no luck with that..could someone throw light on how to use "linkclick.aspx" and do i need to pass "FileID" or the "ticketnumber"...Thanks in advance

By Mohamed on Thursday, July 03, 2008 at 10:37 AM

Mohamed,

The link I get is in the format /LinkClick.aspx?fileticket=xxxxxxxxx&tabid=xx&mid=xxx

I am experienceing the same problem, trying to store PDF in "secure file" and retrieve using "linkclick.aspx".

I manage to find out the link by adding a "Link" module and point to the file, then copy the link.

But I think there got to be another way...text/html module (03.03.00) don't work, but maybe its just outdated.

By shuang on Tuesday, August 12, 2008 at 6:59 PM

Mitchel, do you have a specific URL example you can give us?

Dax

By Dax Davis on Thursday, September 11, 2008 at 12:08 PM

Dax,

The comment above has the format, if you have more questions, please post to the forum.

By Mitchel Sellers on Thursday, September 11, 2008 at 12:23 PM

I would like to provide search capability to the users ONLY in ONE SPECIFIC FOLDER in my site. not in the whole of it. how can i do it through search module??

By Jim on Thursday, October 02, 2008 at 8:38 AM

I've been told that the following is possible:

1. Various bots (google etc), should be able to find and index the entire contents of a pdf which exists in a folder within the DNN system.

2. When seen by a bot for indexing, a partial "listing" of the find is delivered to google as the text which will be displayed when an organic search finds _any_ text contained in the pdf.

3. When the user clicks on the link presented by google, the user is directed to a page within the DNN portal but that "page" is not necessarily the pdf itself.

4. The folder which contains the pdf remains "secure" in that a user, even if they know the fully qualified URL to the pdf, will not be able to access without going through some portal-specified process such as requiring them to provide an email address.

Is this possible? If so, what is required to make it work?

Thanks,

Ken Florian
www.corgenius.com

By kflorian on Thursday, October 02, 2008 at 8:07 PM

If a file is secured by a role, it will NOT be searched by Google, as the bot will not have access to the content.

If you have further questions please use the forum for discussion.

By mitchel.sellers@gmail.com on Friday, October 03, 2008 at 3:46 AM

This is a little off topic, but I'm sure you will know the answer to this: When I click to change a file name in the file manager, what do the R H S A check boxes that pop up do?

Thanks!

By Fritz on Wednesday, November 12, 2008 at 8:05 AM

Fritz,

Those values relate to standard windows file permissions, I'd have to go dig up the actual definitions of each, but they are just links to standard windows permissions.

By mitchel.sellers@gmail.com on Thursday, November 13, 2008 at 6:47 AM

Thanks!
I found the secret code:

R - Read Only
H - Hidden
S - Indexing Service
A - Archive

Just for the record.

By Fritz on Friday, November 14, 2008 at 10:25 AM

Hi, i'm trying to set up the secure file system, and seems to work fine.
Except: when i add a file to a secure folder via Windows Fileexplorer (ex. test.jpg.resources) , i cant find it in the dotnetnuke filemanager (while i'm the host). Refreshing, synchronising... nothing helps, the new file do not apear.
I made my own module with the statement Directory.GetFiles() , this returns me all files (so not only the ones managed from within DNN, but also my own files)

Any Ideas? Thanks!

By Jooris Olivier on Wednesday, January 28, 2009 at 4:09 AM

Its getting even worse, i thought the this was caused by the owner of a file, but this is not the case:
i had a file in the dnn filemanager, test1.jpg.resources
then i renamed it (outside dnn) to test2.jpg.resources
and it's gone in the dnn filemanager, and the owner of the file is still IUSR

By Jooris Olivier on Wednesday, January 28, 2009 at 9:56 PM

Technically FTP'ing files to a secure directory is not something that is supported.

I would think that a File Sync would grab the new files....but it might just skip the secure folders.

By mitchel.sellers@gmail.com on Thursday, January 29, 2009 at 3:55 AM

that would explain a lot. anyway, i used the code in the source of dnn, to make my own "retrieve secured file" function.
But this could be a point of discussion? Why would you not synchronise secured folders???

By Olivier Jooris on Thursday, January 29, 2009 at 9:38 PM

I am trying to change the file manager to secure - file system. However, the change will not save. How do I change the file manager to secure instead of standard. It seems there are some restrictions placed on making the change to secure?

Thanks!

By Jen on Wednesday, January 13, 2010 at 4:35 AM

Jen,

The type selection can ONLY be defined on NEW folders. You cannot change existing ones.

By mitchel.sellers@gmail.com on Wednesday, January 13, 2010 at 4:38 AM

mitch, we have a dnn portal. it provides for both public and restricted access. when we host files in the application for download the user must authenticate themselves. the links are http links and it is possible that the user can send the target http link to someone we dont want to have access to the file. when they plug the url into their browser, the download is successful. what are we missing?
thanks in advance
marc

By marc on Wednesday, February 24, 2010 at 7:31 AM

mitch, we have a dnn portal. it provides for both public and restricted access. when we host files in the application for download the user must authenticate themselves. the links are http links and it is possible that the user can send the target http link to someone we dont want to have access to the file. when they plug the url into their browser, the download is successful. what are we missing?
thanks in advance
marc

By marc on Wednesday, February 24, 2010 at 7:31 AM

Marc,

You must use a "Secure" folder type to get this type of setup.

The link should then be to the LinkClick.aspx page, which then validates security.

By mitchel.sellers@gmail.com on Wednesday, February 24, 2010 at 7:45 AM
Click here to post a comment

Disclaimer