images acessible from public

  • I do not agree the plugin policy for to allow change upload folder in the pro version only. First because the images is accessible from public. Second because the images isn’t deleted with the post delete. Third because the uploads folder keeps a mess.
    Please a option to save images inside email or, if it is not possible, to allow change the folder. Keep in mind that an email server isn’t the same power (and storage) of a wordpress server. Could be a cost.

    I also didn’t understand what the plugin meant with “Enabling HTML option may lead to security issues. Resolving such issues are out of the scope of WSDesk plugin, hence we do not recommend this option.”

    Thank you, the plugin is amazing

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Author ELEXtensions

    (@elextensions)

    Hello @antonio24073,

    Thanks for trying our plugin and sharing the feedback.

    Your suggestion to add the custom folder feature in the basic version will be discussed with our product team. The option to delete the attachment link once the ticket has been deleted will be added in the future release of the plugin.

    Regarding the HTML warning, There were a few use cases where HTML tags in the spam emails created issues with the ticket scripting. That’s why we show warnings before enabling the HTML option.

    Hope that explains.

    Thread Starter Antonio Augusto

    (@antonio24073)

    Hi,
    I’m trying to block uploads folder from direct access without success

    
#ini allow uploads to my domain only
	location ^/wp\-content/uploads/$ { 
		valid_referers mysite.com www.mysite.com;
		if ($invalid_referer) {
			return 403;
		}
	}
# end

    Is it safe to keep these images exposed? Because I noticed that the images have a long “hash” preffix.

    Plugin Author ELEXtensions

    (@elextensions)

    Hello @antonio24073,

    Apologies for the delay.

    The code you have shared can be used. However, It might not be the correct solution. There are plugins available to restrict the uploaded files in WordPress. You may try one of them.
    If you would like to customize the feature, We can custom code it for you. You can reach out to us.

    Thanks,

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘images acessible from public’ is closed to new replies.