[drupal-devel] restricting access to file downloads with flexinode

Gerhard Killesreiter killesreiter at physik.uni-freiburg.de
Tue Aug 2 18:19:00 UTC 2005



On Tue, 2 Aug 2005, David Cohen wrote:

> My problem is the uploaded files.  By default, anyone can download the
> files uploaded via flexinode.  I never show an anonymous user the link
> to a flash file, but if they type "system/files?file=private-file.swf"
> in the URL, they'll be able to download it anyway.

IIRC this was fixed a while ago.

> My second problem is that lots of files will be uploaded, and eventually
> the files directory will be a real mess.  So I want to control where
> each of these files goes.  For instance, the previews could all go to
> 'files/preview_images' and the movies to 'files/videos'.

Sure, look at image.module.

> I've address both of these problems in the attached patch to flexinode.
> I'd appreciate it if some experienced drupal coders would check my work.
>  I'd like to see something like this checked into the code base.  I hope

Flexinode is maintained by Jonathan Chaffer who seems to be burried under
a real lot of work. Your best bet is to create an issue and attach
patches.

Cheers,
	Gerhard



More information about the drupal-devel mailing list