Hello everyone, I have created a closed forum for registered users only. Everything seems to work, except for attachments. The attachments are reachable even if you are not registered in the forum. How can I block access to these files for unregistered users?
Can anyone help me? Thanks 🙂
Example link reachable without login:
https://forumcss.afmg.it/wp-content/uploads/wpforo/default_attachments/1732705816-testPDF-2576pages.pdf
Hi @sofy , thanks for your reply! 😀
I checked, there is no ‘Can view attached files’ permission for forum access.
However, I have noticed that all files in my forum's ‘Media Library’ folder can be accessed by unconnected users, and the attachments end up in that folder.
Could it be due to that? My site is private, in theory, unregistered users should not be able to reach these files... I'm definitely doing something wrong, but I don't understand what... 🤔
Elli
The image above is from wpForo version 1.x.x.
This has changed in the current version 2.x.x
This setting only blocks visibility in the forum.
If you know the direct link, you can still open the file, but this applies to the complete upload directory.
but you can test plugins that protect the files
for example
https://wordpress.org/plugins/prevent-direct-access/
@tutrix hi!
OK, everything is clearer to me now, thank you very much!
I definitely have to test these plugins, also for other problems...
Thanks 🙂
Hi @sofy,
Thank you, I did not know about this additional option in the wpForo Advanced Attachments addon. It might just be what I need (also to better manage attachments), have you had a chance to test it?
Thanks 🙂
You can check the option here: addons.wpforo.com/community/
Now the "Secure Attachment URLs" option is enabled.
@sofy sorry, I did not understand. 😰
The function is enabled, but links to attachments are displayed anyway, also because just reading the forum is also allowed for non-registered users... Or am I wrong?
For example, this one is accessible to logged-in users but not to guests: https://addons.wpforo.com/community/forofile/5bc46206c6a07314eb37a94059e49590/.
You can try checking it again.