Request: Uploads in a custom folder

Hi @sbct

I hope you’re well today and thank you for your question!

Currently you can decide whether to show uploaded files in Media Library or not. You can do it by changing “Show files in media library” option in “settings” section of the “upload field” while editing the form.

However, even switching it off will not let you choose custom target folder. We’ve got some improvements planned for uploads to be added to plugin in future – an option for Forminator to create separate upload folders specific to the forms and an option to let you manage all uploaded files directly in Forminator but for now changing upload folder would require additional custom code.

This might help:

https://gist.github.com/wpmudev-sls/a22b51fa5448c2d8f1eea4f49dd5e981

Best regards,
Adam

Thanks Adam!
With that option selected would it still be possible for someone who has the image url to access it? I ask for security reasons as I’d like to use the form for important documents upload and I don’t want that anyone except me can access it.

Thanks,
Andrea

Hi @sbct

That depends mostly on permissions of the folder. If your hosting is Apache-powered you’re already using .htaccess file so you could e.g. limit access to specific folders/files in folders e.g. by IP, e.g. like this:

https://serverpilot.io/docs/how-to-allow-ip-addresses-with-an-htaccess-file/

Best regards,
Adam

Thanks!
I’ve already have rules on the uploads folder but with the exact link (eg. website.com/wp-uploads/file.pdf) you can still look at the file.

isn’t there a way to prevent this?

Thanks!

Hi @sbct,

Did you place the .htacess file to folder in question?

You could also check some of the possible solutions provided here:
https://stackoverflow.com/questions/19118482/deny-access-to-one-specific-folder-in-htaccess

Or you can ask your hosting provider to setup specific rules for you as they should be able to do it fairly quickly after checking your setup.

Cheers,
Predrag

Hello @sbct

I am going to mark this thread as resolved as it’s inactive for some time now.
You can still post your feedback so we can carry on here.

Thank you,
Dimitris