Request : Do Not Expose Exact File URL
-
Hi,
When user uploads file, they should be able to see it in cart and order details as it is a confirmation of correct information. Hence we keep the setting as such. Which is a good feature of this plugin.
However, exposing the file url is not good for security and privacy where users can just change the file name and read files of other users (even rookies can do it). Also, In our case we ask the user for a sample.xls file. So all users upload the same file which gets named sample-1 or sample-2 … sample-N after upload. In this case user gets confused as the file name is changed. Also, on changing N in sample-N.xls of the url, they can discover other users private content easily.
I request you to not expose the real file url in HTML. It can be just written as File-(Field Name) or something standard. OfCourse, on clicking the file the functionality remains the same.
I guess it is a small but very useful change which can save a lot of privacy concerns on any website. And also removes confusion for the user even if the file names is changed internally.
I hope you consider this in your coming updates 🙂
Looking Forward and Thanking you for a great plugin!
The topic ‘Request : Do Not Expose Exact File URL’ is closed to new replies.