PDA

View Full Version : need ideas (pdf security issue)


davidj
10-21-2005, 02:34 PM
ok i have built an application for a client who wants his staff to view their payslips online

i have output these as pdf

problem...

these PDF's cache on the machine which is what you would expect which then opens up a can of worms
this is a major security data protection breach and was thinking of a way around it.

There is no way you can auto delete temp internet files from the browser (yes?)

i have an option of password protecting the PDF but that has been deemed unaceptable

any ideas

i was pondering on encrypting the PDF and passing the key through the link but that is just science fiction (or is it ?)

the other option is scrap PDF and use dynamic data (which would set me back weeks and most probably a new job!!!!!!!)

ranjan
10-21-2005, 03:31 PM
Do not display this pdf page. Force a download and ask client to save

http://elouai.com/force-download.php ('http://elouai.com/force-download.php')

davidj
10-24-2005, 09:02 AM
Do not display this pdf page. Force a download and ask client to save

if you link to the PDF then you will get a OPEN & SAVE AS option

how can you just display the save as option

davidj
10-24-2005, 09:09 AM
Do not display this pdf page. Force a download and ask client to save

if you link to the PDF then you will get a OPEN & SAVE AS option

how can you just display the save as option
sorry this is no good either

the problem is that these client machines are on hot desks (others can use them) so if user 1 goes and downloads his payslip then user 2 could come along and see user1's details on the same machine. If the pdf is viewed then it is cached so if user2 had the skill he could browse the tmp files and see every payslip that had been downloaded

question

if you password protect a PDF can you pass the password through a link

<a href="pdfpage.php?pdfpassword=password">pdf link</a>