There could be security issues in the method you proposed.

I had a similar problem having to serve data files to the client in an authenticated session. If the files are free to download, an unauthorized user could get them guessing the filenames (and randomize filenames was not an option, because "regular" users wanted meaningful names).

In the end I used a Perl cgi script that serves the file provided that you ask it with name and md5 hash of its content. So in the authenticated pages I have a link containing both of them, but no one can guess the hash based on a (guessed) filename.

Rule One: "Do not act incautiously when confronting a little bald wrinkly smiling man."

In reply to Re^2: How to find a file using perl by psini
in thread How to find a file using perl by ITmajor

Title:
Use:  <p> text here (a paragraph) </p>
and:  <code> code here </code>
to format your post, it's "PerlMonks-approved HTML":


  • Posts are HTML formatted. Put <p> </p> tags around your paragraphs. Put <code> </code> tags around your code and data!
  • Titles consisting of a single word are discouraged, and in most cases are disallowed outright.
  • Read Where should I post X? if you're not absolutely sure you're posting in the right place.
  • Please read these before you post! —
  • Posts may use any of the Perl Monks Approved HTML tags:
    a, abbr, b, big, blockquote, br, caption, center, col, colgroup, dd, del, details, div, dl, dt, em, font, h1, h2, h3, h4, h5, h6, hr, i, ins, li, ol, p, pre, readmore, small, span, spoiler, strike, strong, sub, summary, sup, table, tbody, td, tfoot, th, thead, tr, tt, u, ul, wbr
  • You may need to use entities for some characters, as follows. (Exception: Within code tags, you can put the characters literally.)
            For:     Use:
    & &amp;
    < &lt;
    > &gt;
    [ &#91;
    ] &#93;
  • Link using PerlMonks shortcuts! What shortcuts can I use for linking?
  • See Writeup Formatting Tips and other pages linked from there for more info.