Atozed Forums
Session and temp files - Printable Version

+- Atozed Forums (https://www.atozed.com/forums)
+-- Forum: Atozed Software Products (https://www.atozed.com/forums/forum-1.html)
+--- Forum: IntraWeb (https://www.atozed.com/forums/forum-3.html)
+---- Forum: English (https://www.atozed.com/forums/forum-16.html)
+----- Forum: IntraWeb General Discussion (https://www.atozed.com/forums/forum-4.html)
+----- Thread: Session and temp files (/thread-1727.html)



Session and temp files - joel - 06-15-2020

Is there a way to require a valid session_id before any item in the cache (/$/temp/........somefile) can be accessed?


RE: Session and temp files - Alexandre Machado - 06-20-2020

In ServerController, there is an event (in newer IW 15.x at least) that is made for that:


Code:
procedure TIWServerController.IWServerControllerBaseValidateCacheFileAccess(const aUrlPath: string; var vFileAccess: TIWCacheFileAccess);
begin
  
end;

Set variable vFileAccess to one of these values:

TIWCacheFileAccess = (faGrant, faDeny, faRequireSession);

aURLPath contains the requested URL (including the file name).

You can grant, deny or require the user session to be established. In faRequireSession case, the file will only be served if the user has already a valid session.