Security question

  • hydroplane

    (@hydroplane)


    11 years, 7 months ago

    How secure is the ‘members only’ download protection?

    I’m building a childcare website, I want to upload photos to zip files and let only logged-in parents download them.

    Is there any way a non registered user could detect the file location and download those files?

    Also, is it possible to see who (among the registered users) downloaded what?

    https://ww.wp.xz.cn/plugins/delightful-downloads/

Viewing 1 replies (of 1 total)
  • Plugin Author A5hleyRich

    (@a5hleyrich)

    11 years, 7 months ago

    If you enable folder protection in the Delightful Downloads settings, this will stop users from accessing the files directly. To test that this is working, visit domain.com/wp-content/uploads/delightful-downloads in the browser and you should receive a 403 forbidden error. This assumes your running on an Apache web server.

    All downloads are logged. You can see who downloaded the file if they were logged in, or the ip address if a guest user downloaded the file.

    Ashley

Viewing 1 replies (of 1 total)

The topic ‘Security question’ is closed to new replies.