direct file-access still possible - media folder

kerli81 / kirby-securedpages

Protect pages for authenticated users

MIT License

31 stars 1 forks source link

direct file-access still possible - media folder #5

Open demlak opened 4 years ago

demlak commented 4 years ago

if one has the direct url of any file inside protected sites, one is able to access it without login. Maybe it is possible to extend a controller or route or something to catch also the coresponding parts inside media-folder? (i'm not a coder :smile: )

kerli81 commented 4 years ago

I will have a look if it is possible to restrict also the media folder. Give me some time!

demlak commented 4 years ago

thx a lot.. maybe this helps? https://forum.getkirby.com/t/protect-files-media/16179 those two threads are also related: https://forum.getkirby.com/t/image-urls-how-to-remove-string/13153/6 https://forum.getkirby.com/t/disabling-media-generation-for-specific-files/13010

kerli81 commented 4 years ago

Kirby version 3.5.0 will have a nice new feature according to the roadmap. I will wait for it until i will further investigate this issue. new feature: https://github.com/getkirby/kirby/pull/2646

kerli81 commented 3 years ago

As the Feature is postponed to 3.6.0 i will wait fixing this issue