Security issue with URL

Phoca Download - download manager
chrisluke1221
Phoca Newbie
Phoca Newbie
Posts: 1
Joined: 29 Nov 2012, 08:03

Security issue with URL

Post by chrisluke1221 »

:D Hi guys,

i am a new user for phoca download and i installed phoca dowlonad components and plugins, and i encounter a problem when i planned to only allow registered user to view and download the files . the problem is that a registered user can view and download the file (pdf), a new window opens up and displays the document. however, when i copy url for this new window to different browser and the document is still accessible (which should not be accessed since i restrict access to unregistered user to view and download the file).
for instance:
xxx/directory/document.pdf if unregistered user copies and pastes this url , the document should not accessible.

is there any way to resolve this problem?

thanks so much.
User avatar
Jan
Phoca Hero
Phoca Hero
Posts: 48595
Joined: 10 Nov 2007, 18:23
Location: Czech Republic
Contact:

Re: Security issue with URL

Post by Jan »

Hi, you can protect direct path to your documents by e.g. htaccess rules or similar tools or you can move your documents behind public_html to your folder - then they cannot be accessed by direct path.
If you find Phoca extensions useful, please support the project
Post Reply