Protected image access

Andros · Post by **Andros** » Mon Jun 19, 2023 12:26 am

I have a table with a "Photo" field where the user uploads an image. The image is uploaded to a public folder, and anyone with the link can view it. But now I need to make it available only to authenticated users. How can I do with ANM tools? Some idea?

MichaelG · Post by **MichaelG** » Mon Jun 19, 2023 7:38 am

Enable Tools -> Advanced Settings -> Encrypt file path.

Andros · Post by **Andros** » Tue Jun 20, 2023 5:20 pm

Ok thank you.
1)In practice what does this option?
2)Using ANM in VIEW page for UPLOAD TO FOLDER fields to view the image in the code there is an A HREF tag which points to "api/file/[token]", instead to point directly to the explicit folder and file name. Is there any ANM function to produce this piece of code in my custom pages also?

MichaelG · Post by **MichaelG** » Wed Jun 21, 2023 9:15 am

The Encrypt file path option encrypt the image url so that the user cannot inspect the image url in the browser and directly access it. It can be enabled in Tools -> Advanced Settings -> Encrypt file path.
For custom file, you need to encrypt and decrypt on your own (e.g. using the default Encrypt/Decrypt function).

Andros · Post by **Andros** » Wed Jun 21, 2023 6:55 pm

For the second point.
In my custom page I have a classic A tag to download my file
<a src="www.myapp.com/public/mydocs/mydoc123456.pdf">Download file</a>

How can I to use the encription?
Do I have to make the "public" folder not browsable?
Thanx

MichaelG · Post by **MichaelG** » Thu Jun 22, 2023 8:10 am

You need to create your own API action to server the file. Please read:
https://aspnetmaker.dev/docs/#/api.html ... api-action