[web2py] Let the web server stream your files, not response.download!

[Thadeus Burgess]

http://bit.ly/ar4k8X

--
Thadeus


--
Subscription settings: http://groups.google.com/group/web2py/subscribe?hl=en

[mdipierro]

Is this cherokee specific? Would it work on apache?

Just a comment. This will bypass db.table.field.authorize so auth
permissions on downloads will not be enforced.

Massimo

[Thadeus Burgess]

It works with apache, as long as you install the module.

Cherokee just has it enabled by default, and is the webserver I use currently.

The advantages of X-Sendfile is that you still get to have permissions
on downloads, its simply, if they are not authorized, do not set a
x-sendfile header. You can do any checks you wish on the web2py end.

--
Thadeus

[mdipierro]

I see. Than the current download function could be improved to take
advantage of this.

On Apr 18, 3:01 pm, Thadeus Burgess <thade...@thadeusb.com> wrote:
> It works with apache, as long as you install the module.
>
> Cherokee just has it enabled by default, and is the webserver I use currently.
>
> The advantages of X-Sendfile is that you still get to have permissions
> on downloads, its simply, if they are not authorized, do not set a
> x-sendfile header. You can do any checks you wish on the web2py end.
>
> --
> Thadeus
>

[Thadeus Burgess]

Precisely!