通常想实现用户登录后，才可以下载某此文件，可以用cookies和session来解决用户是否登录，然后根据cookies和session里面记录的值来确定是否给予下载。但是这样做有一个缺点：如果别人知道那个文件的路径，在IE中直接输入路径地址就可以下载了，这样的结果并不是我们想要的。首先，我们要将保存文件的那个文件夹名字前加上#，为了防止从IE中下载此文件。index.html文件（用来提供下载）<a href="down.asp?u=789.rar">下载</a> down.asp<!--#include file="download.asp"--><%Dim uu=request.querystring("u")downloadFile "./#soft/123.rar", u%>download.asp<%'author : lael 2006-2-20function downloadFile(downfile, downname)on error resume next dlfile = server.MapPath(downfile) Response.Buffer = TrueResponse.Clear Set oStream = Server.CreateObject("ADODB.Stream")oStream.OpenoStream.Type = 1 Set fso = Server.CreateObject("Scripting.FileSystemObject")if not fso.FileExists(dlfile) then      set fso = nothing    oStream.Close      Set oStream = nothing    downloadFile = "error:1"   exit functionend ifSet ofile = fso.GetFile(dlfile)filesize = ofile.size oStream.LoadFromFile(dlfile)if err then     err.clear   set ofile = nothing      set fso = nothing   oStream.Close      Set oStream = nothing   downloadFile = "error:2"   exit functionend if Response.AddHeader "Content-Disposition", "attachment; filename=" & downnameResponse.AddHeader "Content-Length", filesizeResponse.CharSet="UTF-8"Response.ContentType="text/plain" Response.BinaryWrite oStream.ReadResponse.Flush set ofile = nothingset fso = nothingoStream.closeSet oStream = nothing downloadFile = "" end function '///////////////////// %>-------------------------转贴请注名出处------------------------------- 

评论