Downloading files with "protection"
Permalink
Hi,
I've created a C5 site only accessable for employees. On the site I provide some documents that the employees can download (a simple link in a content block).
The website is only shown to "registered users", so you have to login in order to get to the document links.
When I view the page, I see links like "/download_file/3/151/" that works ok, the full path to the file is not seen on screen. But when I right click the download link and choose to open in a new tab, I get the full path to the document. I copy the url and I log out.
In a new browser window, I enter the full path to the document and I can download it without a login.
Is this the way it should work?
SnefIT
I've created a C5 site only accessable for employees. On the site I provide some documents that the employees can download (a simple link in a content block).
The website is only shown to "registered users", so you have to login in order to get to the document links.
When I view the page, I see links like "/download_file/3/151/" that works ok, the full path to the file is not seen on screen. But when I right click the download link and choose to open in a new tab, I get the full path to the document. I copy the url and I log out.
In a new browser window, I enter the full path to the document and I can download it without a login.
Is this the way it should work?
SnefIT
I believe that is the way it works for view permissions and password protected file permissions.
Here are a few How-To's on other methods.
https://www.concrete5.org/documentation/how-tos/developers/protect-f...
http://www.concrete5.org/documentation/how-tos/developers/protect-f...
There are additional ways to protect directories and files, but I am not sure how they would work when using concrete5.
An example being using alternate File Storage Locations and .htpasswd.
https://wiki.apache.org/httpd/PasswordBasicAuth...
http://davidwalsh.name/password-protect-directory-using-htaccess...
(this method uses MD5, which is not appropriate for truly important things)