Notifications
Clear all

Paid Addons Support Forum Only

Please note, that here we only support Paid Addons issues and questions.

gVectors Support staff works from 6am to 6pm (GMT+0)

All questions related to wpForo and wpDiscuz free plugins should be asked in the corresponding plugin support forum:

 

wpDiscuz Support Forum wpForo Support Forum

[Solved] Secure attachments


umar
Posts: 5
 umar
Topic starter
(@umar)
Active Member
Joined: 11 months ago

Hello,

"I want to know, is there any way to protect the attachments.

That's good only logged in users can download, but direct download link is visible for logged-in users. They can share/reuse.

How to protect attachments direct link visibility for logged in users.?  /Thanks"

Ask same question on WPforo: https://wpforo.com/community/how-to-and-troubleshooting-2/attachment-protection/

Now I purchased "Advanced attachment" addon, enabled "Secure Attachment URLs" this just changed url structure. Still unsafe, logged-in members can copy attachment url and reuse anywhere...

8 Replies
Tom
Posts: 3748
 Tom
Admin
(@tomson)
Support Team
Joined: 7 years ago

Hi @umar,

The secured attachment URL will not work for others. It only works for the usergroup you've enabled the "Front - Can access to attachments" permission.

wpForo restrict access to attachemnts

So if this permission is disabled for Guests usergroup, then a visitor cannot download the attachment.

umar
Posts: 5
 umar
Topic starter
(@umar)
Active Member
Joined: 11 months ago
Posted by: @umar

That's good only logged in users can download, but direct download link is visible for logged-in users. They can share/reuse.

How to protect attachments direct link visibility for logged in users.?

That's my Question!

Disabled for guest group, enabled for "Subscribers" group so logged-in users can download.

The issue is the direct link of attachment is visible for logged-in users they can download these attachments and also can copy attachments link and reuse anywhere. (Really not good for small business having shared hosting with limited resources).

6 Replies
Tom
 Tom
Admin
(@tomson)
Joined: 7 years ago

Support Team
Posts: 3748

@umar,

 they can download these attachments and also can copy attachments link and reuse anywhere

The link will not work for those who is not logged in and doesn't have the appropriate accesses. Again, having the link doesn't mean they can download it. The link is a PHP link, and it checks current user who try to download and doesn't allow.

umar
 umar
(@umar)
Joined: 11 months ago

Active Member
Posts: 5
Tom
 Tom
Admin
(@tomson)
Joined: 7 years ago

Support Team
Posts: 3748

@umar,

Please show me the Guest Usergroup permissions screenshot and the forum "Papers (Mid/Final)" permissions settings screenshot.

umar
 umar
(@umar)
Joined: 11 months ago

Active Member
Posts: 5

 

@tomson

usergroup "Guest" :

 

Guest usergroup

 

Permission for ZOO507 "Papers (Mid/Final)"

Permissions Papers (Mid Final) ZOO507

 

Tom
 Tom
Admin
(@tomson)
Joined: 7 years ago

Support Team
Posts: 3748

@umar,

So, I see, the "Can access to attachments" is enabled for Guests. What else do you want?? If you don't want them to use a direct link and download attachments you should disable this permission. How are you going to protect your attachments if you let them download?

umar
 umar
(@umar)
Joined: 11 months ago

Active Member
Posts: 5

@tomson

Now working fine... Thanks

Share:
Scroll to top