PhocaDownload-Component and security settings
Posted: 19 Aug 2009, 16:11
Hi
I'm using the current version of the Phoca Download-Component.
For security reasons I have protected the "administrator"-folder with .htaccess - as recommended.
With this protection of the "administrator"-folder, the download of documents in the frontend requires the username and the password. The input-form can be clicked-away without input of a username and/or password and then the documents can be downloaded. This makes no sense....
The documents are in the standard-folder of Phoca Download (not in the "administrator"-folder) , i.e. the download of documents should be possible without a username and password (in fact it is - but only after clicking-away the input-form for username and password...).
Is there something wrong in my configuration, or is it impossible to use PhocaDownload with security settings like password-protection of the "administrator"-folder?
P.S.: With the previous version of PhocaDownload this problem was not existing....
I'm using the current version of the Phoca Download-Component.
For security reasons I have protected the "administrator"-folder with .htaccess - as recommended.
With this protection of the "administrator"-folder, the download of documents in the frontend requires the username and the password. The input-form can be clicked-away without input of a username and/or password and then the documents can be downloaded. This makes no sense....

The documents are in the standard-folder of Phoca Download (not in the "administrator"-folder) , i.e. the download of documents should be possible without a username and password (in fact it is - but only after clicking-away the input-form for username and password...).
Is there something wrong in my configuration, or is it impossible to use PhocaDownload with security settings like password-protection of the "administrator"-folder?
P.S.: With the previous version of PhocaDownload this problem was not existing....