ERROR: You Don't Have Permission to Access This File

  • Hi – love your plugin and use it to offer webinar playback in audio format. Our paid members, who are logged in, are getting errors when trying to download the audio files. We’ve established they are NOT on a mobile device, but on a computer. This has been an ongoing issue and they are quite frustrated. They’ve tried different browsers and it doesn’t seem to make a difference. The error is “sorry, you don’t have permission to access this file,” which leads me to believe the plugin doesn’t think they’re logged in. But they can only access the page with the audio if they are logged in.

    Appreciate your help!
    Maria

    https://www.ads-software.com/plugins/wp-miniaudioplayer/

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Author pupunzi

    (@pupunzi)

    Hi Maria,
    Does it happens to all your members?

    The download process has a security procedure that check if the download request came from the same origin via a session cookie. If the browser that is trying to download the audio file doesn’t accept cookies then you get the message.

    If that happens to all your members then there’s something that is blocking the writing of the session cookies on your web server.

    You can prevent this by commenting this two lines (11 and 12) in the map_download.php file:

    if(!isset($_SESSION['maphost']) || $_SESSION['maphost'] != $_SERVER['HTTP_HOST'])
  die ('<b>Something goes wrong, you don\'t have permission to use this page, sorry.</b>') ;

    But removing this two lines there’s a vulnerability issue…

    Bye,
    Matteo

    Thread Starter mpeagler

    (@mpeagler)

    Hi Matteo – thank you so much for your reply.

    We’re only hearing about this error with one user, and she’s tried multiple browsers.

    I appreciate the code modification suggestion, but don’t want to do anything that would compromise our site’s security.

    What do you suggest?

    Plugin Author pupunzi

    (@pupunzi)

    Sorry for the delay,
    the problem is probably due to the fact that your user browsers doesn’t accept cookies; if that is the case the download feature can’t work for him/her.

    Bye,
    M

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘ERROR: You Don't Have Permission to Access This File’ is closed to new replies.