Bug: files set to "registered" can be accessed in browser

[Suge1w]

Hello,

We're using version 2.1.9 within Joomla 2.5. Our files are set to "registered" but a user can guess the filename correctly in the browser, the file can be downloaded thus bypassing Phoca Download's access rights. How can this be resolved?

[Jan]

Hi, try to see:
https://www.phoca.cz/documents/17-phoca ... tml-folder

Jan

[Suge1w]

That worked. Very nice, thanks.

I'm interested to understand how this stops direct access to our files but maintains phoca download rights?

[Jan]

Hi, public visitors cannot access your server behind public_html but the php script can.

Jan