Bulk download without login

Hi Daryl,

when we’ve implemented the plugin, we wanted to make it as secure as possible. As usually, only users with the capability to view Gravity Forms entries can view or download files, we have set this as the requirement for downloading files.

I couldn’t think of a way to allow downloading all files for an entry without breaking this important security measure. As the downloads could have sensitive personal data and anyone with the link would otherwise with the link could download all files. And given the fact that the bulk download link contains the gf_form_id and gf_entry_id as plain integer numbers, anyone would be able to download files for any entry.

I would suggest to just attach the files to the notification you send to the clients. Alternatively, you can add the links to the individual files using the “merge tags” of the file upload fields. This would not allow a “bulk download” but the client could still review all the files – even in the browser without the need of a download, if the file type can be opened in a browser tab.

Would any of this solutions work for your usecase?

Bernhard

Bernhard,

First, thank you for the rapid response.

All salient points. And, yes, your suggested solutions have been implemented in the past and each deemed successful in their own right.

One problem with attaching our files directly to an email is they can be very large, larger than 5 MB maximum I consider reliable through email.

In light of security, we can send a notification under separate cover with temporary credentials.

Thanks for being part of the WordPress community,
Daryl Pittman
Laser Image Printing & Marketing

Hi Daryl,

can you elaborate a bit on your workflow? Are you using a GF form to send files to clients to they can review them? If so, do you upload individual files using multiple upload fields or a multiupload field?

If this is the case, could you ZIP the files on your end and then upload only this one file and sending the link to this one file using a merge tag?

There is also always the possibility to adjust the capability checks using filters, but it would still have the securty issue of enabling anyone to bulk download any files.

But your request gave me an idea on how we could have something like this in a future release, we just have to make sure it would be as secure as possible.

Sure thing, Berhard.

We are a printer and send files to clients as proofs. The File Upload for Gravity Forms has a short code which can be passed with a notification. The problem I found is with a multiple file upload the File Upload short code passed with a notification is one single link which, in the end, does not link to or allow download of any file even though the URL looks as if it should link to at least one of the files.

My current workflow is to ZIP multiple files as you suggest. I was simply looking for a solution for our folks who may find compressing files onerous and allow multiple file upload with multiple clicks, one at a time. While the upload in this situation works multiple file download does not work as I desire.

This is the point where I found Bulk Download for Gravity Forms.

I am glad to have sparked a new idea!

Daryl Pittman
Laser Image Printing & Marketing

Furthermore, sure we could use Google Drive and or Dropbox. I feel the more of our own branding we have the better. We have this tool, our website, why not use it to its fullest potential.

OK, I can see your workflow now. So as of the current state of the plugin, I don’t see a solution work to your needs. I would probably use the workflow to just use a single upload field, ask your team to ZIP all files (which should be quite easy with any operating system) and then send a notification email with the URL. This URL can also be linked when the merge tag is used in an anchor tag as well, like this (in text mode):

<a href="{Single File:3}">{Single File:3}</a>

If by any chance we get your requested feature in one of your future versions, I’ll let you know.

Bernhard, thanks for all the suggestions!

Y’all keep security on the front burner.

See you on the flip side,
Daryl Pittman
Laser Image Printing & Marketing

-30-