Hi,

I'm currently testing wpforo that I really like.

I want to use it on our association site and want it to be private (only for members).

I use a membership plugin for the page where the wpforo shortcode is inserted and set all forums to "no access" for guests.

It seems to work, except that if happen to have an attachment url, you can access that file via a web browser.

I understand that one might have to guess the file name to access the attachment but still... what would be a way of securing this.

Thank you