Visibility of files in WP File Manager PRO

[Angelo]

Hi, I bought the WP File Manager PRO plugin and the Addon User Specific.

The files uploaded by users should be private but I noticed that they are visible from all user from the wordpress dashboard (Media Library) and if I enter their url in the browser they are even visible to everyone (even to non-logged in users).
Is there any configuration to do to avoid this?
Shouldn’t the plugin provide it directly?

Thanks

[nmedia]

Hi Angelo,

there is setting in the backend which I think is enabled on your site so make all files public. Please review the settings again.

[Angelo]

HI,
all WordPress attachments uploaded to the wp-content/uploads folder are public.
It seems that the plugin uses sub directories of the upload folder.
I have not found any options in the plugin settings that avoid this.
Can you tell me where this setting is?

Thank you

[nmedia]

Ok I see, you can hide public access via following steps:

create .htaccess file inside uploads/order_files/
paste following code in this file:

order allow,deny
<Files ~ "\.(jpg|jpeg|png|gif)$">
   allow from all
</Files>

[Angelo]

I have user_uploads subfolder (not order_files).
I inserted the created .htaccess file with the suggested code but not saw any change.
The files are visibile with a direct link in the browser from anyone.

If i change ‘allow from all’ with ‘deny from all’ then the files aren’t visible with direct link from the browser but:
– I see Thumbnails files error in frontend user area;
– Logged user continue to see all uploads (of any user) in WordPress Dashboard Media.

I do not want that :
– a logged user view any files of other users in backend Media of Wp;
– anyone see any file with direct browser link.

In current situation privacy is not garanted.
What is the solution?

Thanks

[Angelo]

I bought the plugin and the addon less than 10 days ago and if it is not possible to remedy the bugs found I would like to request a refund.

[nmedia]

Angelo,

We have updated the code in .htaccess, please use the following rules:

RewriteEngine on
RewriteRule !thumbs - [F]

And also make sure you don’t have direct download enabled: https://drive.google.com/file/d/1DE6C_lI-AJU_TPGDjIRf8MM9DrW2hO7n/view?usp=sharing

[Angelo]

Okay, it looks better.
Although with this method the icons are not visible to anyone in the Wp Media back-end (not even to the owner). Thank you.

In the meantime I tried a script that requires authentication to access the wp-content / uploads folder and I used a free plugin to show users only its files in the Wp Media section.

Let me suggest this change. The plugin would benefit.
Regards

[nmedia]

Thanks, please send/share the solution.

[Angelo]

Hello,

I disabled the possibility for the user to view the files owned by other users with the free Wp User Media plugin.
To allow direct access to files only to logged in users:
wordpress.stackexchange.com/questions/37144/how-to-protect-uploads-if-user-is-not-logged-in. (hakre solution)
A code update was made by: gist.github.com/nathanp (view dl-file.htaccess and dl-file.php)

what do you think about it?

[nmedia]

Hi,

Thanks for this, will try this.

[Paolo]

I am having great difficulty using this plugin purchased yesterday.

1- when I install it on a page the loading slows down terribly.

2-I need to upload different files to rooms other than unregistered users.

3-how can I make the files uploaded by user X appear only on a specific page Y?

Thank you in advance
Paul

[Jane Brian]

Hi
It has been a long while for this topic, so we are closing this.

[Author]

Posts