[support] Restricting access to images directory
    Shai Gluskin 
    shai at content2zero.com
       
    Sat Mar 19 07:13:57 UTC 2011
    
    
  
Marco,
Here are the specific instructions:
http://drupal.org/node/540754
Shai
On Mar 18, 2011, at 8:40 PM, camro15 <camro15 at gmx.de> wrote:
> Hello, I have setup a private image gallery using modules image, image_gallery_access, acl and views.  Access control is working well for nodes. But... Knowing the url to the image files of a "private" gallery, it is possible to access images directly, ignoring any rules for node access! This is undermining my efforts to secure private content. What would be the best way to deny access to the files/images directory? I suppose the directory should contain a .htaccess file, but how about its content? TIA Marco
> -- 
> [ Drupal support list | http://lists.drupal.org/ ]
    
    
More information about the support
mailing list