Products

Solutions

Resources

Partners

Community

Blog

About

QA

Ideas Test

New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen

HomeHomeUsing DNN Platf...Using DNN Platf...Administration ...Administration ...flash training presentations secured in DNNflash training presentations secured in DNN
Previous
 
Next
New Post
11/9/2007 10:06 AM
 

I have flash presentation that I want in my portal that only registered users can access.  The flash presentations run in a simple html wrapper, and should open in a seperate window, without the dnn navigation.  Where do I store the flash presentations (and html wrapper) so that they are only accessable via DNN and only available for current registed users? (.swf)

Currently, I can store my flash presentations on a regular webserver and link to them from dotnetnuke, however a registered user could store the location on the other server and access it later after I have terminated their account.  Is their a location within the dotnetnuke portal that I can ftp the flash presentations that is secure? Essentially I am trying to build a simple LMS. NEED HELP!

 
New Post
11/9/2007 2:57 PM
 

I haven't done this before, but I would do it this way:

  1. As popup window, simpy use a DNN page with a special skin that has a content pane only - no other panes, no navigation skin object or any other skin objects. With that, you can use the DNN permission features to grant access to your users. If necessary, you can hide these pages from the main navigation.
  2. Store the flash files somewhere in the File Manager.
  3. To embed your flash into the popup window, take the Media module, or the Text/HTML module, if you want to use your own HTML wrapping code.
 
New Post
11/9/2007 11:53 PM
 

I have not experimented successfully enough to use this all the time, but I believe that is what the Admin/File Manager / settings are for  - you know there is a dropdown menu on the top left of the manager.

It's got Folders / Standar File System, Secure File System, Secure Database.  I was under the impression that this was to give further security as to how data was stored and secured.  I also remember locking myself, my users, me, the site, the whole thing up - rendering the site completely useless... but that was ok it was a test site.   And it was over 1 year ago, when it was just being introduced.

I see problems with external links that have nothing to do with DNN but simply when you use an externa link from any existing site, the path is exposed at some point, leaving your information vulnerable to being exploited, so whatever you can have kept within the server solution is worth the effort to find out about.

So you might want to create a local or dev build and experiment with the secure folders and ensuring your content is kept within the site.

Also, making sure the robots.txt file is kept updated is another small move towards protecting your information.

The pop up window is not a bad idea.

Nina Meiers
Lots of Free Skins...Preview them all


Nina Meiers My Little Website
If it's on DNN, I fix, build, deploy, support,skin, host, design, consult, implement, integrate and done since 2003.
Who am I? Just a city chic, having a crack at organic berry farming.. and creating awesome websites.
 
New Post
11/10/2007 1:01 AM
 

I guess, all these will not work. A little smart user, would be able to figure out the URL ( i.e. the location of .swf ) wether it is in your server or somewhere else.

The possible solution is to provide this .swf through Web Service ( that too, it should be streamed, may be in .flv format )

Further, the streaming should be full server streaming and not merely the progressive download. That way you can authenticate the User/Request before starting the stream

 
New Post
11/10/2007 7:12 AM
 

Nina Meiers wrote: ... I believe that is what the Admin/File Manager / settings are for  - you know there is a dropdown menu on the top left of the manager. It's got Folders / Standar File System, Secure File System, Secure Database...

I played around with the file manager's options a bit, so I'm not guessing any more (as in my post above):

Set one of the "secure" options when create the subdirectory for your .swf's, and grant access to it to registered users only (in the Folder Security Settings).

  • With the "Secure - File System" option, the uploaded files are stored with the additional ending ".resources". Files with this ending are never delivered when requesting them directly; instead, the IIS sends a "Bad request" page.
  • With the "Secure - Database" option, the file is stored in the DNN database, so there isn't a physical file any more.

If you include a secured file with the media module, the file's source is e. g.
http://www.your-site.com/LinkClick.aspx?link=your-subdirectory%2fyour-file.swf&tabid=88&mid=44.
When you request this URL directly as a non-registed user, DNN answers with "You Do Not Have Permission To View The Requested File".

Note that there seems to be no easy way to include secured files in the FCK editor (e. g. in the Text/HTML module): For some reason, the "Browse Server" dialog window shows non-secured files only! It does show the secured folders, but not the files in them. At least this is so in my DNN 4.5.5; I hope it's different in later versions.

 
Previous
 
Next
HomeHomeUsing DNN Platf...Using DNN Platf...Administration ...Administration ...flash training presentations secured in DNNflash training presentations secured in DNN


These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out