Protected PDFs Not Loading in Members PDF Viewer After Update

  • Resolved SusanU

    (@susanutley)


    7 months, 1 week ago

    Using Download Manager in combination with Ultimate Member to protect PDF files from being viewed by visitors who are not logged in. Until the most recent update, the Wonder PDF Plugin allowed logged-in users to view and download files within an iFrame. Files were viewable by members and protected from non-members. Since the update, PDFs no longer load. The following message generates in place of the PDF:

    PDF.js v2.12.313 (build: a2ae56f39) Message: Unexpected server response (500) while retrieving PDF

    Tested all plugins for conflicts. The only resolution was to disable Download Manager. Reverting to Version 3.2.89 resolved the issue. The 3.2.90 changelog states: “Fixed a security issue with protected media file download.” Is this related?

    Thank you!

Viewing 8 replies - 1 through 8 (of 8 total)
  • Plugin Contributor Shafaet Alam

    (@shafayat-alam)

    That should not affect you. However, please give me an URL to check.

    We’ve experienced the same problem. However, at least in our case the problem was only for site admins.

    Steps to reproduce:

    1. Apply restrictions to a pdf file in the Media Library such that it is only unrestricted for subscribers.
    2. Embed the pdf on a page.
    3. Go to the embedded pdf page.

    This will cause a “Failed to load resource: the server responded with a status of 500” error for site admins, whereas the pdf will be displayed normally for subscribers.

    Rolling back to v. 3.2.89 resolved the issue, so in all likelihood the latest security fix in v. 3.2.90 has indeed caused this issue as SusanU suggested.

    • This reply was modified 7 months, 1 week ago by miqi180. Reason: grammar
    • This reply was modified 7 months, 1 week ago by miqi180. Reason: grammar
    fiddla

    (@fiddla)

    Hi – I think I have a related problem. Using the latest version of Download Manager (3.2.90), all links to protected files (MP3s and PDFs) give an ‘Invalid file path!’ error, even if the user is a member of the group with access.

    Requesting the file URL gives the following errors. This is resolved by reverting to version 3.2.89 of the plugin.

    [24-Apr-2024 18:54:20 UTC] PHP Warning: Undefined array key “file” in /wp-content/plugins/download-manager/src/MediaLibrary/MediaAccessControl.php on line 143
    [24-Apr-2024 18:54:20 UTC] PHP Deprecated: basename(): Passing null to parameter #1 ($path) of type string is deprecated in /wp-content/plugins/download-manager/src/MediaLibrary/MediaAccessControl.php on line 143
    [24-Apr-2024 18:54:20 UTC] PHP Warning: Undefined array key “sizes” in /wp-content/plugins/download-manager/src/MediaLibrary/MediaAccessControl.php on line 144
    [24-Apr-2024 18:54:20 UTC] PHP Warning: foreach() argument must be of type array|object, null given in /wp-content/plugins/download-manager/src/MediaLibrary/MediaAccessControl.php on line 144
    [24-Apr-2024 18:54:20 UTC] PHP Warning: Undefined array key “file” in /wp-content/plugins/download-manager/src/MediaLibrary/MediaAccessControl.php on line 148
    [24-Apr-2024 18:54:20 UTC] PHP Deprecated: basename(): Passing null to parameter #1 ($path) of type string is deprecated in /wp-content/plugins/download-manager/src/MediaLibrary/MediaAccessControl.php on line 148
    [24-Apr-2024 18:54:20 UTC] PHP Warning: Undefined array key “file” in /wp-content/plugins/download-manager/src/MediaLibrary/MediaAccessControl.php on line 148
    [24-Apr-2024 18:54:20 UTC] PHP Deprecated: str_replace(): Passing null to parameter #3 ($subject) of type array|string is deprecated in /wp-content/plugins/download-manager/src/MediaLibrary/MediaAccessControl.php on line 148

    We are also using Ultimate Member, in case that’s useful, but the files are only protected with Download Manager.

    Many thanks.

    Thread Starter SusanU

    (@susanutley)

    Good morning. Sorry for the delay. The plugin is installed on a private members-only site. I have confirmed again that Download Manager version 3.2.90 is creating the problem. I disabled each plugin for testing and the issue only exists when Download Manager version 3.2.90 is activated. Deactivating version 3.2.90 or reinstalling version 3.2.89 removes the problem.

    When activated, version 3.2.90 also appears to be randomly corrupting image files within my media library. Protected images fail to load—not all, just some—and then must be replaced only to be damaged again. Deactivating version 3.2.90 fixes the problem.

    Thanks for you help!

    Plugin Contributor Shafaet Alam

    (@shafayat-alam)

    @fiddla , we have fixed the issue, update is coming tomorrow.

    @miqi180 , If you apply restrictions to a pdf file, you can’t embed it directly, you need to use the media shortcode instead. Ex: [wpdm_media id=12345]

    Hi Shafaet – thanks very much for sorting this. I will try the update over the weekend.

    All the best.

    Hi Shafaet.

    With all due respect, I have embedded hundreds of both restricted and unrestricted pdfs, so I know how that works with this plugin. Moreover, reverting back to v. 3.2.89 resolved the issue, so the method of embedding was definitely not the cause of the issue.

    Anyway, FYI the issue seems to be fixed in the latest version, 3.2.92.

    Thanks.

    Plugin Contributor Shafaet Alam

    (@shafayat-alam)

    Hello everyone,
    I’m delighted to hear that everything is running smoothly now! If you find yourself with a moment to spare, we would greatly appreciate it if you could share your positive experience by leaving a 5-star review for us here: https://www.ads-software.com/support/plugin/download-manager/reviews/?rate=5#new-post. Your feedback means a lot to us and serves as a great source of inspiration. Thank you for your support!

Viewing 8 replies - 1 through 8 (of 8 total)
  • The topic ‘Protected PDFs Not Loading in Members PDF Viewer After Update’ is closed to new replies.