search

Leuchtfeuer / typo3-secure-downloads

Secure your assets and data from unwanted download. Apply TYPO3 access rights to ALL file assets (PDFs, TGZs or JPGs etc. - configurable) - protect them from direct access.
https://www.Leuchtfeuer.com
GNU General Public License v2.0
21 stars 35 forks source link

Link generation different for files from securedDirs and secured FileStorage #185

Closed npoggenburg closed 1 year ago

npoggenburg commented 1 year ago

Describe the bug When using FileStorage and securedDirs, both methods work different.

A file linked from fileadmin: https://www.my-domain.com.local/securedl/sdl-eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE2OTc0NTA0NjAsImV4cCI6MTY5NzU0MDQ1OSwidXNlciI6MCwiZ3JvdXBzIjpbMCwtMV0sImZpbGUiOiJmaWxlYWRtaW4vX19pbXBvcnRlZC9zaXRlcy9jb3Jwb3JhdGUvX2ludGVybmF0aW9uYWwvdXNlcl91cGxvYWQvY29udGluZW50YWxfcHBfYWdyaWN1bHR1cmU0LmpwZyIsInBhZ2UiOjE2NjY4fQ.2IydHf6r3NNBFNk84Ch3I3nNY8GhhFQJQG_BQVOm3ew/my-image.jpg

A file linked from FileStorage: https://www.my-domain.com.local/index.php?eID=dumpFile&t=f&f=64537&token=71b62f6737de54d0069f923a6513da7eaa22b9a6

To Reproduce Steps to reproduce the behavior:

  1. set securedDirs to fileadmin
  2. set createFileStorage to 1
  3. add a file to secured fileadmin
  4. add a file to secured File Storage
  5. create a text content element and link to both files

Expected behavior Both links do have the same format. No eID script is visible.

Environment (please complete the following information):

balasch commented 1 year ago

Fixed in https://github.com/Leuchtfeuer/typo3-secure-downloads/releases/tag/v5.0.3