WebsiteBaker Community Forum

WebsiteBaker Support (2.13.x) => General Help & Support => Topic started by: CodeALot on October 11, 2021, 02:32:53 PM

Title: Make MEDIA-folders/files for "Registered" pages inaccessible
Post by: CodeALot on October 11, 2021, 02:32:53 PM
Here's my problem:
I have a page in WB 2.13 that runs a OneForAll module. This page is accessible for logged in users only.
The images that are stored for that OneForAll module are in MEDIA/OneForAll
That folder under MEDIA is not protected by the "Registered" status of the page itself. So in theory, the files inside that Media-folder can be accessed from outside (if you know the URL or if Google for some odd reason indexed them - robots.txt isn't always a guaranteed solution...)

How do I prevent not-logged-in people from accessing /MEDIA/OneForAll/images/item1/example.jpg ?
Title: Re: Make MEDIA-folders/files for "Registered" pages inaccessible
Post by: crnogorac081 on October 11, 2021, 04:03:34 PM
Hello bro,

Take s look at this
https://forum.WebsiteBaker.org/index.php/topic,17482.msg173831.html#msg173831

You can adapt this to your needs.

Cheers
Title: Re: Make MEDIA-folders/files for "Registered" pages inaccessible
Post by: CodeALot on October 11, 2021, 04:30:27 PM
Thanks, I'll try to decode that, it's in an English section but because the topic switched to German very quickly it's very hard to read for non-German visitors. (I will keep fighting for a more international approach in this forum until the day I die, I guess :-) )
Also, from what I read and understood so far, this is not a definitive solution?
Title: Re: Make MEDIA-folders/files for "Registered" pages inaccessible
Post by: crnogorac081 on October 11, 2021, 04:35:49 PM
Bro Im english speaking and use google translate i think this is 5min job if you need help pm me