Project

General

Profile

Actions

Feature proposal #4236

closed

Upgrade file field to restrict direct access to file paths using htaccess

Added by krileon about 11 years ago. Updated about 10 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Start date:
06 September 2013
Due date:
% Done:

100%

Estimated time:

Description

Currently if you know the exact path to a file you can directly open it. Htaccess protection should be added so direct access is impossible so only the system can send the file via php using headers.

Actions #1

Updated by krileon about 11 years ago

  • Status changed from Assigned to Resolved
  • % Done changed from 0 to 100

Now creates an htaccess file to deny all access when uploading a file field.

Actions #2

Updated by beat about 10 years ago

  • Status changed from Resolved to Closed
Actions

Also available in: Atom PDF