Quite often clients for whom I build websites nowadays want a feature on their website to share documents privately. A kind of intranet functionality. Because it's only this relatively simple feature, it's not needed to build a complete intranet. You'd say that a basic upload/download feature, protected by a login they can share, would be enough. Not too difficult to build in PHP.
However, I wonder if there are better, more secure options. Building this on their public website, most often:
- the website itself runs on an open source cms with all it's potential security vulnerabilities
- website plugins, the same
- files will be on a shared server, more risks
- lost/stolen passwords
etc
Maybe something completely different would be better, like using GoogleDocs with documents set to private or something. What do you think?
Sharing files in a safe way
Moderator: General Moderators
-
alex.barylski
- DevNet Evangelist
- Posts: 6267
- Joined: Tue Dec 21, 2004 5:00 pm
- Location: Winnipeg
Re: Sharing files in a safe way
If they all reside within the same LAN, then why not shared folders/Samba?
If they need Internet access to shared folders, than consider maybe using WebDAV. Lastly if WebDAV is not possible, there are many file sharing services, such as DropBox which you might consider signing them up for - unsure about the password/ac though I think they just deliver a link in a very random way which is intended to be emailed to a single user - then again you should ask DropBox themselves what they offer i'm sure they could answer best.
Cheers,
Alex
If they need Internet access to shared folders, than consider maybe using WebDAV. Lastly if WebDAV is not possible, there are many file sharing services, such as DropBox which you might consider signing them up for - unsure about the password/ac though I think they just deliver a link in a very random way which is intended to be emailed to a single user - then again you should ask DropBox themselves what they offer i'm sure they could answer best.
Cheers,
Alex
-
Charles256
- DevNet Resident
- Posts: 1375
- Joined: Fri Sep 16, 2005 9:06 pm
Re: Sharing files in a safe way
If they don't mind shelling out a small monthly fee this is what I use: http://www.egnyte.com/corp/business_pla ... icing.html It allows us to share files with clients and restrict who sees what easily. We're on the $99 a month plan. Their customer support is absolutely horrible though so be sure to try the trial and make sure you feel comfortable because if you can't figure something out, tough. At least, that's been my experience. Thankfully, it's no harder than using Windows.
Re: Sharing files in a safe way
The best advice I can offer is to use client-side encryption so the files can't be read by anyone who isn't allowed. Steve Gibson calls it "Pre-Internet Encryption".
Re: Sharing files in a safe way
Thanks for all the tips so far. Lots of good things to look into.