Securing and Accessing XML Files

[crjunk]

I’m not very experienced with security on a web server, so what I’m asking
might be really stupid.

I have an application that is creating XML files in the C:\temp folder on
our DMZ. I want to create an aspx page that will pull a user’s XML file from
the C:\temp folder and populate a Crystal Report. The data in the XML file
is somewhat sensitive, so I don’t want the whole world to see it. The aspx
page will verify that the user is who they say they are by connecting to the
SQL Sever and verifying their user name and password in my user table. A
routine will run periodically everyday and delete any XML files that are over
1 day old.

1. Will I be able to pull information from the C:\temp folder from my web
form, if it is located in another directory?

2. Is there a big security risk involved with storing the data as an XML
file in the C:\temp folder?

Thanks!
crjunk

 

[Patrick Olurotimi Ige]

In ur case i don't know if the preferred solution is to implement NTFS
permission in the folder where the XML reside or on the file itself...
Pulling the XML from another Directory would work or even from a
URL..(Try posting the same question to XML forum)
Patrick.
** If anymore Questions post it**