We are working with graphics and we have security issue here. When we try to save a graph as a GIF, it is saved on a folder on the reporting server.

When the user tries to access a report with a GIF in it, instead of going through the client, the request is redirected directly to the Reporting server which diplays the complete URL with the server name to the user.

Looks like this is against the architecture rules and a basic security issue. Can someone suggest how to handle this so that the request is manipulated by the Client istead of redirecting to the server.

Thanks and Regards,

well, Bandi, i can tell you i do it.[In a selfserv system, not an MRE system..i don't know which you have]
i make GIFs (and output HTML tables as well)
and my creating fex will filedef them to the webserver (under the inetpub/wwwroot directory, not under ibi directory).
Then when my calling fex or html page needs them, i refer to them using an image tag, which i define:
DEFINE FILE CAR
PICTURE/A100=
'< IMG SRC="http://servername/IMAGES/GIFNAME.GIF>';
END
and of course gifname could be made to refer to a variable, or some &var, or whatever you need.
and with output htm tables, you can filedef them the same way and reference them with !IBI.FIL.filename; in a fex or a server-side include
< !-- #include path\filename --> in an .asp page
Any help, or have i completely misunderstood your question, Bandi??