Still not supporting downloads out of webroot

  • It’s a nice plugin, but it ONLY supports downloadable files that are accessible via a URL, not via a path that points to a folder OUTSIDE (=safe) of the webroot.

    Conclusion: nice plugin, but unsafe.

    Edit: it seems that there is an S3 extension… That will make downloadable files more protected against unauthorized access. But it’s still a missed chance that you cannot simply enter a file path to a file somewhere on the server (i.e. outside of the webroot)

    • This topic was modified 9 months, 3 weeks ago by mike2972. Reason: Edited after a comment from the dev
Viewing 4 replies - 1 through 4 (of 4 total)
  • Plugin Contributor mbrsolution

    (@mbrsolution)

    Thank you for taking the time to leave a 1 star review.

    but it ONLY supports downloadable files that are accessible via a URL, not via a path that points to a folder OUTSIDE (=safe) of the webroot.

    We currently offer the following addon to integrate with Amazon S3.

    https://simple-download-monitor.com/amazon-s3-integration-addon/

    Kind regards.

    Thread Starter mike2972

    (@mike2972)

    Now, that’s completely new to me. You should mention this on the page where you can download the plugin (or in the plugin itself). This info, as of this writing, is not on the page here: https://www.ads-software.com/plugins/simple-download-monitor/

    But it seems like a good extension. Thank you.

    Plugin Contributor mbrsolution

    (@mbrsolution)

    Thank you for changing your 1 star to 3 star rating ?? We appreciate this very much. In regards to your comment above, I have submitted a message to the developers to investigate further your request.

    Kind regards.

    Plugin Author mra13

    (@mra13)

    Hi, I’d like to provide additional context on the feature you’ve inquired about.

    The feature you are asking for requires PHP streaming. Which has it’s own set of challenges. Whether it will work or not highly depends on things such as the server environment, PHP configuration, the file size of the downloadable item. We offer the following paid addon which can handle that feature. The paid addon option helps to offer support for this when the users do face an issue with the PHP download option (due to the above mentioned variables):

    https://simple-download-monitor.com/hidden-downloads-for-simple-download-monitor/

    As far as I know, we don’t advertise this feature for the free plugin. If any part of the free plugin’s description gives an incorrect impression, please let me know and I will update it.

    The original intention of the plugin (based on my own personal requirement) was to keep it super simple that can track/count and log downloads of free downloads. Keeping it simple helps to keep it lightweight and minimize chance of conflicts. We try to avoid features to the this plugin that has a high likelihood of conflicts (either with the server setup or with another plugin or theme).

    We aim to add a file protection feature to our main plugin. Operating as a small team with limited revenue and overseeing several plugins, our resources are constrained. This means we develop new features gradually over time.

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘Still not supporting downloads out of webroot’ is closed to new replies.