Media library still accessible

  • Resolved doffine

    (@doffine)


    3 years, 1 month ago

    Hello @webfactory team,

    we just found that in spite of your activated Maintenance plugin all files in WordPress’ media library (/wp-content/uploads/…) are still accessible.

    In our eyes that is really no good idea. If we activate your plugin to take a website offline at least for a certain time we don’t want that all media (images, PDFs, etc.) are still accessible for everyone.

    These media count for the content of the website that shall be taken offline, too. Everyone who knows the old links (or simply googles them) can still access all of these files.

    Why don’t you block the complete media library, too? Is this a bug or a feature?

    If it is a “feature” – is there a way (using a filter or so via a snippet for example?) to really block all uploaded media content when your plugin is activated? If not, this would be a security/privacy problem in our eyes and a real show stopper in using your plugin.

    Greetings,
    -doffine

Viewing 1 replies (of 1 total)
  • Plugin Author WebFactory

    (@webfactory)

    Hi,
    We never had this request before. Most people use the maintenance mode when building a new site so they don’t have much to hide in terms of files. I’ve added your request to our to-do list and we’ll see if it’s doable for the next version.

Viewing 1 replies (of 1 total)
  • The topic ‘Media library still accessible’ is closed to new replies.