clnewbill — 2009-10-09T16:13:13-04:00 — #1
Let's say I know the URL of a web page. Ordinary HTML web page. It's in a password-protected directory inside the /public_html/ directory, but I know the username and password and can get in using a browser. I don't have FTP access. Is there a way to download the file?
Back story: Client wants to post the answer key to a test online for a limited time and is very, very extremely over-the-top paranoid that someone is going to steal it. I can set up the directory and separate username/passwords for each person authorized to view the answers. I can lock the page so that right-click is disabled, View Source is disabled, Save Page As is disabled, and Print is disabled.
I've thought of two ways that the information could still be captured: PrtSc (can't be disabled in IE7) and pen and paper. I don't know of a way to stop either of those without a proctor being present, and since it's an online class, the students are scattered all over the place and proctoring is not possible.
So my underlying question is this: Is there another way to capture the information that I haven't thought of? I don't want the client's hypothetical 10-year-old son to figure out a way to hack into the file and sit back going neener-neener because I didn't know about it.
dan_grossman — 2009-10-09T16:18:51-04:00 — #2
Sorry, this is just not a realistic request. The answers have to be sent to the person's computer for them to be shown on the screen, and at that point it's too late to control that data.
clnewbill — 2009-10-09T16:22:42-04:00 — #3
It may not be possible to stop. I was really just brainstorming possible approaches and thought I would ask you guys.
Thanks for your answer!
dan_grossman — 2009-10-09T16:49:50-04:00 — #4
Even an AOLer (do they still exist?) can point their cell phone camera at the monitor and snap a picture of the answer key
felgall — 2009-10-09T17:11:39-04:00 — #5
Web browsers have to download web pages in order to display their content. By the time someone sees the web page it has already been downloaded to their computer. Once it is on their computer they can do whatever they want with it without your having any way to block them.
clnewbill — 2009-10-09T19:36:36-04:00 — #6
Thanks, Stephen! I knew that, of course, and tried to explain it to the client (who wasn't listening for anything except "yes, I can fix it so they can't download it.")
Dan: Perfect answer, and one that even this person might be able to understand.
And oh yes, AOLers still exist. My clients, for whatever reason, seem to attract them.