Question: Access on uploads  

  RSS

Christoph
New MemberCustomer
Joined:2 months  ago
Posts: 3
27/03/2017 12:44 pm  

Hey there, I like the management and uploading feature of this add-on - well done.

I have a quick question, though: Is it possible to restrict access to the public accessible files, so that only members to certain forums can access the files uploaded to topics in this forum?

At the moment even with individual folders, it seems the uploaded file is still public and can be accessed from anybody, who knows the link?!

Best, Chris


ReplyQuote
Tom
 Tom
Support TeamAdmin
Joined:2 years  ago
Posts: 1535
27/03/2017 11:10 pm  

Try, tisable "Can view attached files" permission in Forum Accesses for certain Usergroups.

More info in doc:

http://wpforo.com/docs/root/topics-posts/atatch-file-to-post/#access

wpDiscuz Documentation


ReplyQuote
Christoph
New MemberCustomer
Joined:2 months  ago
Posts: 3
28/03/2017 6:51 am  

We did disable this for guest users. They still are able to see the file if they have the direct link to the file. 🙁


ReplyQuote
Tom
 Tom
Support TeamAdmin
Joined:2 years  ago
Posts: 1535
28/03/2017 7:29 am  

Could you please let me know how they have direct link if they can't see the file?

wpDiscuz Documentation


ReplyQuote
Christoph
New MemberCustomer
Joined:2 months  ago
Posts: 3
28/03/2017 11:55 am  

Uploads Folder is generally visible to anybody and might be known by hackers or other people. But I understand, that we should use probably other means to protect the folder.


ReplyQuote
Tom
 Tom
Support TeamAdmin
Joined:2 years  ago
Posts: 1535
28/03/2017 10:27 pm  

There is no way to open the uploads folder in WordPress (it'll return 404 error), so visitors have no chance to find filename and download it.

Yes, I know there is better way to make it more secure, but it requires php file source. Wordpress doesn't like direct php file requests, it'll case lots of problems with different WP configurations.

wpDiscuz Documentation


ReplyQuote
  
Working

Please Login or Register