Page 1 of 1

How to protect files to download with FEU and CustomContent

Posted: Fri Sep 07, 2007 6:58 pm
by wapcamer
Hello,
I'm using FEU and CustomContent in order to password protect some area of the site.
This works great.
I would like to propose some files to download in these pages, but the problem is that anyone can access my downloadable files directory.
Is there a way to propose files that would be in the database rather than in a directory, so that only acces-granted people can downlad them ?

Thanks in advance.

Re: How to protect files to download with FEU and CustomContent

Posted: Fri Sep 07, 2007 7:00 pm
by calguy1000
The uploads module does this

Re: How to protect files to download with FEU and CustomContent

Posted: Fri Sep 07, 2007 9:53 pm
by wapcamer
thanks calguy.

I'll check that and let you know.

Re: How to protect files to download with FEU and CustomContent

Posted: Sat Sep 08, 2007 12:05 am
by wapcamer
Hey,
I have installed your extension but I'm not sure if it fits my need.

On the Add Category page, one required field is a path on the server.
As I said previously, I'd rather avoid using directories on the server if they are not protected.

Can you precise me whether the checkbox 'Files in this directory can be listed' applies itself to the directories (via .htaccess) or to the listing presented by the extension ?

Re: How to protect files to download with FEU and CustomContent

Posted: Sat Sep 08, 2007 12:08 am
by calguy1000
what I do is add a .htaccess file to each directory that only permits 127.0.0.1 access to that directory.  Then the webserver process is the only package that can access it.

Newer versions of Uploads will automatically allow you to create .htaccess files in each directory

Order Deny,Allow
Deny from all
Allow from 127.0.0.1/32

Re: How to protect files to download with FEU and CustomContent

Posted: Sat Sep 08, 2007 6:57 pm
by wapcamer
That's probably the best way to proceed.
Making it automatic in the further releases of the extension is pretty interesting (mandatory  ;)).

Thanks for the help.