Protect files from other users?

  • Resolved carsononline

    (@carsononline)


    10 years, 7 months ago

    Is there any way to use this in conjunction with another plugin to make a page that shows only the logged in users files?

    I have set the directory to be the users name. That works perfect! (check)

    BUT if I change the URL in the browser to another valid user name, I see their files.

    Any suggestions?

    Side note: BIG thanks for getting subdirectories going!

    https://www.ads-software.com/plugins/file-away/

Viewing 10 replies - 1 through 10 (of 10 total)
  • Plugin Author thomstark

    (@thomstark)

    When you say you change the url, are you talking about modifying the ?drawer=username request? If so, for the time being you can try using the iframes option and they won’t see the url request that way. Otherwise, I’m unclear exactly what you’re asking.

    Thread Starter carsononline

    (@carsononline)

    Sorry to be unclear. Yes. That’s it.

    If I hover over the breadcrumb you can see the drawer name, and if I copy that and paste it to the address bar and change it, I can access others files.

    Plugin Author thomstark

    (@thomstark)

    Right. I’ll work on something for that, but in the meantime, you can avoid that by using the iframe option. Thanks for pointing this out.

    Plugin Author thomstark

    (@thomstark)

    Hang on a couple minutes. I’m working on something. Are you comfortable editing one of my core files to test it out?

    Thread Starter carsononline

    (@carsononline)

    Not sure if those files are ever “safe” from prying eyes until some htaccess stuff is there, or another way of authenticating per directory, but that gets a little outside of this plugin I think. ??

    Basic inaccessibility would be good for most. i.e. cant specify a url and get their files. ??

    Thread Starter carsononline

    (@carsononline)

    Thanks..

    Plugin Author thomstark

    (@thomstark)

    got it. thanks. will email you shortly.

    Plugin Author thomstark

    (@thomstark)

    Email sent.

    Plugin Author thomstark

    (@thomstark)

    Thanks for testing that for me. It will be included in the next update, so you’ll be able to update with no worries.

    Plugin Author thomstark

    (@thomstark)

    Just needed to let you know that a much more robust version of this fix is now included in version 1.8, for manager mode as well. I do recommend you update. Thanks for pointing this out to me.

Viewing 10 replies - 1 through 10 (of 10 total)
  • The topic ‘Protect files from other users?’ is closed to new replies.