<div>See also </div>
<div><a href="http://www.pmwiki.org/wiki/Cookbook/SecureAttachments">http://www.pmwiki.org/wiki/Cookbook/SecureAttachments</a></div>
<div><br> </div>
<div class="gmail_quote">2009/6/30 Sameer Kumar <span dir="ltr"><<a href="mailto:sameerkumar@gmail.com">sameerkumar@gmail.com</a>></span><br>
<blockquote class="gmail_quote" style="PADDING-LEFT: 1ex; MARGIN: 0px 0px 0px 0.8ex; BORDER-LEFT: #ccc 1px solid">I am using AuthUser to control access to my site and have a site-wide read and edit password as my wiki is a personal information management tool. I have the most recent version of Pmwiki running on my site.
<div><br></div>
<div>I have just discovered that my entire upload directory and every single uploaded file is accessible without a password if someone has a full URL. I have confirmed that AuthUser is working for all the groups, except for the Uploads folder... if i go to <a href="http://wiki.xxxx.com/uploads" target="_blank">wiki.xxxx.com/uploads</a>, the entire directory structure is visible.
<div><br></div>
<div>How can solve this problem and lock down my uploads folder?</div>
<div><br></div>
<div>Thanks for all the help.</div>
<div>Sameer</div></div><br>_______________________________________________<br>pmwiki-users mailing list<br><a href="mailto:pmwiki-users@pmichaud.com">pmwiki-users@pmichaud.com</a><br><a href="http://www.pmichaud.com/mailman/listinfo/pmwiki-users" target="_blank">http://www.pmichaud.com/mailman/listinfo/pmwiki-users</a><br>
<br></blockquote></div><br><br clear="all">
<div></div><br>-- <br>____<br><a href="http://kiwiwiki.co.nz">http://kiwiwiki.co.nz</a><br>