Notifications
Clear all

Attachments visible to all in forum for registered users only

10 Posts
3 Users
2 Reactions
163 Views
Posts: 5
 Elli
Topic starter
(@spider24)
Active Member
Joined: 1 week ago

Hello everyone, I have created a closed forum for registered users only. Everything seems to work, except for attachments. The attachments are reachable even if you are not registered in the forum. How can I block access to these files for unregistered users?
Can anyone help me? Thanks πŸ™‚

Example link reachable without login:
https://forumcss.afmg.it/wp-content/uploads/wpforo/default_attachments/1732705816-testPDF-2576pages.pdf

Topic Tags
9 Replies
Sofy
Posts: 4872
 Sofy
Admin
(@sofy)
Support Team
Joined: 7 years ago

Please make sure the "Can view attached files" permission is unchecked for the certain forum access:

Reply
5 Replies
 Elli
(@spider24)
Joined: 1 week ago

Active Member
Posts: 5

Hi @sofy , thanks for your reply! 😀

I checked, there is no β€˜Can view attached files’ permission for forum access.
However, I have noticed that all files in my forum's β€˜Media Library’ folder can be accessed by unconnected users, and the attachments end up in that folder.
Could it be due to that? My site is private, in theory, unregistered users should not be able to reach these files... I'm definitely doing something wrong, but I don't understand what... 🤔Β 

Elli

Β 

Reply
Tutrix
(@tutrix)
Joined: 5 years ago

Noble Member
Posts: 1476

@spider24Β 

The image above is from wpForo version 1.x.x.
This has changed in the current version 2.x.x

Β 

Reply
 Elli
(@spider24)
Joined: 1 week ago

Active Member
Posts: 5

Hi @tutrix,

I tried that too, but it doesn't work...

Reply
Tutrix
(@tutrix)
Joined: 5 years ago

Noble Member
Posts: 1476

@spider24Β 

This setting only blocks visibility in the forum.
If you know the direct link, you can still open the file, but this applies to the complete upload directory.

but you can test plugins that protect the files

for example

https://wordpress.org/plugins/prevent-direct-access/

Reply
 Elli
(@spider24)
Joined: 1 week ago

Active Member
Posts: 5

@tutrix hi!
OK, everything is clearer to me now, thank you very much!
I definitely have to test these plugins, also for other problems...

Thanks πŸ™‚

Reply
Sofy
Posts: 4872
 Sofy
Admin
(@sofy)
Support Team
Joined: 7 years ago

If you're using the wpForo Advanced Attachments addon, you can enable the "Secure Attachment URLs" option.Β 

Reply
2 Replies
 Elli
(@spider24)
Joined: 1 week ago

Active Member
Posts: 5

Hi @sofy,
Thank you, I did not know about this additional option in the wpForo Advanced Attachments addon. It might just be what I need (also to better manage attachments), have you had a chance to test it?
Thanks πŸ™‚

Reply
Sofy
 Sofy
Admin
(@sofy)
Joined: 7 years ago

Support Team
Posts: 4872

@spider24Β 

You can check the option here: addons.wpforo.com/community/

Now the "Secure Attachment URLs" option is enabled.Β 

Reply