Okay
  Public Ticket #1430019
File Away - Direct access to files
Closed

Comments

  •  6
    gcacciola started the conversation

    Hello, how are you? 

    I still love wOffice, cant say how much it helps me.

    I have a question, I have just started making some tests with file away, but I think I am facing some security issues.

    What I want to do is print QR codes to the specific file away folder and access it through a browser. While running these tests, I noticed that when giving the link to a folder, required the user to log in to woffice to access the folder contents through file away, but if I give the user a link directly to a file, anyone with the link can download it without logging in. 

    Am I doing something wrong or that is the expected behavior?

    Thanks!

  •  211
    Marcos replied

    Hello,

    Thank you for getting in touch. You can try this plugin https://wordpress.org/plugins/protect-uploads/ it will make sure your wp-content folder is not directly accessed. Please, let me know if it helps. Have a nice day.

    Kind Regards,

    Marcos 

    Want feedback on your awesome Intranet? Get yourself a beta access on Feedier.com.

    Keen on Woffice ? Please take a few seconds to give us a 5-star review on ThemeForest.

  •  6
    gcacciola replied

    Hello Marcos, how are you? Thanks for the very quick answer.

    Quick question, your name sounds Brazilian, are you? It is just curiosity because we are from Brazil.

    Regarding your answer, I thought that it would be a good solution, but it didn't help at all, actually at their support, they say exactly that at the comments.

    https://www.alticreation.com/en/plugin/protect-uploads/

    Sorry about bothering you, any other ideas? They say something about hotlink protection.

    Best regards.

    Giacomo


  •  510
    François replied

    Hello, 

    Yes, he is 

    Well, it's depends on your server configuration. File Away is just uploading files to your upload folder. On your server. 

    The access to that directory, however is controlled by your server's permissions and not by File Away. So you can restrict the access to this directory with some Unix permissions. Your host can likely help you on that. 

    Kind Regards,

    Fran├žois 

    Want feedback on your awesome site? Get yourself a beta access on our new product Feedier.com here: https://feedier.com/

  •  6
    gcacciola replied

    Wow, it is nice to have a Brazilian on the team as well. Your support already rocks, now it will be even better.

    Fran├žois, thanks for the reply, I am already looking into it with the host. Here is my possible solution:

    https://top-frog.com/2010/07/01/a-simple-way-to-limit-file-downloads-to-only-logged-in-users-in-wordpress/

    Thanks

  •  211
    Marcos replied

    Hello,

    Glad it you have managed on how to solve it and for your kind words regarding our support service. If you prefer support in portuguese language, just let me know and we will proceed this way. Have a nice day.

    Kind Regards,

    Marcos 

    Want feedback on your awesome Intranet? Get yourself a beta access on Feedier.com.

    Keen on Woffice ? Please take a few seconds to give us a 5-star review on ThemeForest.

  •  6
    gcacciola replied

    Hello Marcos, thank you for the followup.

    I managed to have all the access permissions correctly adjusted with the help of a developer from our ERP software who was here this week. 

    Dont worry about portuguese support, it is better to keep it in english as it its universal and can be searchable and helpful to others. Let's use it only if we face some kind of communication issues.

    Have a nice day as well.

    Regards

  •  211
    Marcos replied

    Hello,

    Thank you for the updates. Feel free to count on us whenever it is needed. Have a nice day.

    Kind Regards,

    Marcos 

    Want feedback on your awesome Intranet? Get yourself a beta access on Feedier.com.

    Keen on Woffice ? Please take a few seconds to give us a 5-star review on ThemeForest.