Securing RoboHelp output files

[Darchele]

We have a client that is interested in making their RoboHelp output files available via their web site. However, they want to secure the files so that only their customers can gain access. We are their web site developers.

We reviewed the .Net API, however that is for integrating context sensitive help, which is not what we are trying to do.

Do you have any clients that are doing this and if so what is the recommended method?

Please advise.

[Captiv8r]

Hi Darchele

Since the RoboHelp output is nothing more than a collection of HTML files and scripts that run inside Framesets, you would secure them in the same manner as you would any other web page. Just password protect the folder they are in. With no credentials, the user shouldn't be able to see them, no?

I'm guessing that as Web developers, you haven't yet been tasked with this generically?

Cheers... Rick

[Darchele]

Unfortunatly, it's not that easy. Since the files are raw HTML, they don't go through the same processing as the standard .net pages and thus buy pass any application security that is built into .NET applications. If the RoboHelp files could be exported to .NET pages (such as .aspx) the problem would be solved and we could secure the pages without a problem, but it is my understanding that isn't an option.

We could make the files only accessible via FTP that requires a username/password, but that isn't what our client wants. They want them to be able to use the help files online.

Any other thoughts?

[Captiv8r]

Hi Darchele

I'm admittedly and blissfully .Net ignorant. As such, I had no idea that .Net behaved in an entirely different manner than normal web pages.

I'll have to defer to someone more versed in the black arts of .Net to assist!

Cheers... Rick

[HKabaker]

If the parent application is password protected, that's your first line of defense.

If they can make the WebHelp's location somewhat inscrutable, it would be difficult to get there without the help link from the app.

Harvey.

[HKabaker]

duplicate post.

[Darchele]

We thought of that, but the client isn't happy with that solution.

The main web site is a Content Management System, that does have password protected pages.

Other ideas?

[SSMI]

Hi - did you ever find a solution for this? We are looking to do the same thing. Thanks

[Darchele]

Sorry... we never found a solution we liked. However, you could write a handler to process all of the HTML pages and grant access, but then you would have to parse the html document for all images and other links to ensure they were secure too, which is why we didn't go with that solution.