[pmwiki-users] Upload protection not working

Simon nzskiwi at gmail.com
Mon Jun 6 14:53:37 CDT 2016


did you protect the download action
<http://www.pmwiki.org/wiki/PmWiki/AvailableActions>?
(you will have seen $EnableDirectDownload
<http://www.pmwiki.org/wiki/PmWiki/UploadVariables#EnableDirectDownload>)

____
http://kiwiwiki.nz

On 7 June 2016 at 07:44, <ccox at endlessnow.com> wrote:

> Consider the following url.  I have direct downloads disable and htaccess
> is blocking the uploads area.  So, attachments to get translated like so:
>
> https://www.example.com/Test/Directors?action=download&upname=directors.jpg
>
> However, I have protected read, edit, attr and upload for the page
> Test/Directors.. and I can still get to the content.
>
> Do I have to protect the group instead?  Perhaps I need to go to per page
> uploads? Would that fix things?
>
>
>
> _______________________________________________
> pmwiki-users mailing list
> pmwiki-users at pmichaud.com
> http://www.pmichaud.com/mailman/listinfo/pmwiki-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.pmichaud.com/pipermail/pmwiki-users/attachments/20160607/30bc7c29/attachment.html>


More information about the pmwiki-users mailing list