Registration Bypass
Posted: 17 Apr 2009, 03:51
Hi,
Currently i have downloads that are restricted to registered users and everyone(public) can see these downloads. If they click on the download they are taken to the a login screen (probably cause of no session). All this is fine and works perfectly. However if someone knows my file directory eg.... httpL//example.edu.au/phocadownloads/filename.pdf and type that in... they can download the file without any security.
I was wondering... have i set something up wrong? and if so how can i fix?
Many thanks!
Currently i have downloads that are restricted to registered users and everyone(public) can see these downloads. If they click on the download they are taken to the a login screen (probably cause of no session). All this is fine and works perfectly. However if someone knows my file directory eg.... httpL//example.edu.au/phocadownloads/filename.pdf and type that in... they can download the file without any security.
I was wondering... have i set something up wrong? and if so how can i fix?
Many thanks!