shuizhongyueming / flexicontent

Automatically exported from code.google.com/p/flexicontent
0 stars 0 forks source link

Make secure download more secure #398

Open GoogleCodeExporter opened 9 years ago

GoogleCodeExporter commented 9 years ago
The download field plugin:
(a) checks access level of the user before it allows downloading, and
(b) also does not reveal the location of the file (it can reveal the filename 
if you allow),

So you can do these:

1. change secure folder in Global config
2. rename folder via ftp
3. -optionally- you could also add an .htaccess file with password inside the 
folder

you are done,
people will never know the real location of the file, and if they do find URL 
in some way, they will not be able to download it, because it is protected by 
the web server.

I guess we could automate the above 3 steps, randomizing the folder name and 
adding an .htaccess in the folder with some random password (will work for 
apache servers only)

Relevant forum post 
http://www.flexicontent.org/forum/index.php?f=20&t=1874&p=23701&rb_v=viewtopic#p
23701

Original issue reported on code.google.com by ggp...@gmail.com on 23 Mar 2012 at 10:01