<html><body><div style="color:#000; background-color:#fff; font-family:arial, helvetica, sans-serif;font-size:12pt"><div><span>The only files are in content and are visible anyway. I can't imagine any reason to protect them.</span></div><div> </div><div><font color="#ff007f" face="bookman old style, new york, times, serif" size="4"><i><strong>Nancy</strong></i></font></div> <div><font face="arial, helvetica, sans-serif">Injustice anywhere is a threat to justice everywhere. -- Dr. Martin L. King, Jr.</font></div><div><br><blockquote style="border-left: 2px solid rgb(16, 16, 255); margin-left: 5px; margin-top: 5px; padding-left: 5px;"> <div style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"> <div style="font-family: times new roman, new york, times, serif; font-size: 12pt;"> <div dir="ltr"> <font face="Arial" size="2"> <hr size="1"> <b><span style="font-weight:bold;">From:</span></b> "Metzler, David"
<metzlerd@evergreen.edu><br> <b><span style="font-weight: bold;">To:</span></b> support@drupal.org; Ms. Nancy Wichmann <nan_wich@bellsouth.net> <br> <b><span style="font-weight: bold;">Sent:</span></b> Thursday, March 15, 2012 7:33 PM<br> <b><span style="font-weight: bold;">Subject:</span></b> RE: [support] Changing File System<br> </font> </div> <br>
<div id="yiv1933976453">
<style>
<!--
#yiv1933976453
_filtered #yiv1933976453 {font-family:Tahoma;panose-1:2 11 6 4 3 5 4 4 2 4;}
_filtered #yiv1933976453 {font-family:"Bookman Old Style";panose-1:2 5 6 4 5 5 5 2 2 4;}
#yiv1933976453
#yiv1933976453 p.yiv1933976453MsoNormal, #yiv1933976453 li.yiv1933976453MsoNormal, #yiv1933976453 div.yiv1933976453MsoNormal
{margin:0in;margin-bottom:.0001pt;font-size:12.0pt;font-family:"Times New Roman";}
#yiv1933976453 a:link, #yiv1933976453 span.yiv1933976453MsoHyperlink
{color:blue;text-decoration:underline;}
#yiv1933976453 a:visited, #yiv1933976453 span.yiv1933976453MsoHyperlinkFollowed
{color:purple;text-decoration:underline;}
#yiv1933976453 span.yiv1933976453EmailStyle18
{font-family:Arial;color:navy;}
_filtered #yiv1933976453 {margin:1.0in 1.25in 1.0in 1.25in;}
#yiv1933976453 div.yiv1933976453Section1
{}
-->
</style>
<div>
<div class="yiv1933976453Section1">
<div class="yiv1933976453MsoNormal"><font color="navy" face="Arial" size="2"><span style="
font-size:10.0pt;font-family:Arial;color:navy;">Not normally. Just realize
that the files are no longer protected by the drupal login or access settings,
which means they could be accessed by the public via someone’s browser
history or by guessing the url to the file. That is, files are not really
protected from prying eyes. This would be a problem if they have
attachements on nodes that they are trying to protect.</span></font></div>
<div class="yiv1933976453MsoNormal"><font color="navy" face="Arial" size="2"><span style="
font-size:10.0pt;font-family:Arial;color:navy;"> </span></font></div>
<div class="yiv1933976453MsoNormal"><font color="navy" face="Arial" size="2"><span style="
font-size:10.0pt;font-family:Arial;color:navy;">When the file system is set to
private. Drupal’s php code is run to check access settings prior to
serving out files of any kind (whether they be .css or .pdf or .doc files). </span></font></div>
<div class="yiv1933976453MsoNormal"><font color="navy" face="Arial" size="2"><span style="
font-size:10.0pt;font-family:Arial;color:navy;"> </span></font></div>
<div class="yiv1933976453MsoNormal"><font color="navy" face="Arial" size="2"><span style="
font-size:10.0pt;font-family:Arial;color:navy;">Make sense? </span></font></div>
<div>
<div class="yiv1933976453MsoNormal" style="text-align:center;" align="center"><font face="Times New Roman" size="3"><span style="font-size:12.0pt;">
<hr tabindex="-1" align="center" size="2" width="100%">
</span></font></div>
<div class="yiv1933976453MsoNormal"><b><font face="Tahoma" size="2"><span style="font-size:10.0pt;font-family:Tahoma;font-weight:bold;">From:</span></font></b><font face="Tahoma" size="2"><span style="font-size:10.0pt;font-family:Tahoma;">
support-bounces@drupal.org [mailto:support-bounces@drupal.org] <b><span style="font-weight:bold;">On Behalf Of </span></b>Ms. Nancy Wichmann<br>
<b><span style="font-weight:bold;">Sent:</span></b> Thursday, March 15, 2012
3:56 PM<br>
<b><span style="font-weight:bold;">To:</span></b> support drupal<br>
<b><span style="font-weight:bold;">Subject:</span></b> [support] Changing File
System</span></font></div>
</div>
<div class="yiv1933976453MsoNormal"><font face="Times New Roman" size="3"><span style="
font-size:12.0pt;"> </span></font></div>
<div>
<div>
<div class="yiv1933976453MsoNormal" style="background:white;"><font color="black" face="Arial" size="3"><span style="font-size:12.0pt;font-family:Arial;color:black;">I just
discovered that one of the (D6) sites I occasionally work on has been set to
use the private file system. I'll admit that I am not terribly clear on the
differences, but I have never before used private - only public. Since this
prevents CSS compression and the site is rather sluggish, I'd like to change
it.</span></font></div>
</div>
<div>
<div class="yiv1933976453MsoNormal" style="background:white;"><font color="black" face="Arial" size="3"><span style="font-size:12.0pt;font-family:Arial;color:black;"> </span></font></div>
</div>
<div>
<div class="yiv1933976453MsoNormal" style="background:white;"><font color="black" face="Arial" size="3"><span style="font-size:12.0pt;font-family:Arial;color:black;">Is
there anything special that I have to do when I choose the public file system?</span></font></div>
</div>
<div>
<div class="yiv1933976453MsoNormal" style="background:white;"><font color="black" face="Arial" size="3"><span style="font-size:12.0pt;font-family:Arial;color:black;"> </span></font></div>
</div>
<div>
<div class="yiv1933976453MsoNormal" style="background:white;">
<b><b><i><font color="#ff007f" face="Bookman Old Style" size="4"><span class="yui_3_2_0_17_1331856717788189" style="font-size:13.5pt;font-family:"Bookman Old Style";color:#FF007F;font-style:italic;">Nancy</span></font></i></b></b><font color="black" face="Arial"><span style="font-family:Arial;color:black;"></span></font></div>
</div>
<div class="yiv1933976453MsoNormal" style="background:white;"><font color="black" face="Arial" size="3"><span style="font-size:12.0pt;font-family:Arial;color:black;"> </span></font></div>
<div>
<div class="yiv1933976453MsoNormal" style="background:white;"><font color="black" face="Arial" size="3"><span style="font-size:12.0pt;font-family:Arial;color:black;">Injustice
anywhere is a threat to justice everywhere. -- Dr. Martin L. King, Jr.</span></font></div>
</div>
</div>
</div>
</div>
</div><br><br> </div> </div> </blockquote></div> </div></body></html>