[Pmwiki-users] Uploading and password proctecting

[Patrick R. Michaud]

On Tue, Jun 15, 2004 at 12:56:42PM -0400, J. Perkins wrote:
> Robin wrote:
> 
> I would like to see PmWiki control access to uploaded files at some 
> point. In the meantime, here is something else that I've been meaning to 
> add to the cookbook. It checks to make sure that you have read (or 
> whatever action specified by $AuthDownloadType) access to the page 
> containing the link to the download.

Ummm, how does this return the correct file type for .gif, .jpg, etc.?
Or does it always treat everything as being 'application/x-octet-stream'?
At the very least it goes against the grain of HTTP, and it seems
to me that it might cause things like 'Attach:image.gif' to not work
in some browsers.

The main reason I didn't interpose PmWiki into the attachment download
process is that I felt it was a bit much overhead and that it was
better to let the webserver negotiate the content types.  But if
we want PmWiki to do the content-type negotiation instead, I can 
certainly build it into the 2.0 code as an optional feature.
This would also mean that the uploads directory would no longer need
to be (or even should be) "web accessible", and the only web-accessible
directory would be "pub/".

Pm