WordPress.org

Ready to get started?Download WordPress

Forums

User Access Manager
File access not restricted (2 posts)

  1. RealPython.com
    Member
    Posted 1 year ago #

    I am trying to restrict the download of certain files to a custom user role that I created through Advanced Access Manager. The page that links to the files is being hidden/restricted correctly, but the files (which were automatically marked to have restricted access when I inserted them into the page) are not protected and can be downloaded by anyone with the address. I created the protected page and uploaded the files after installing UAM. I've tried both 'regular' and fopen modes.

    I thought that it had correctly restricted the files before, but perhaps my .htaccess is automatically getting overwritten? I'm also using Better WP Security.

    http://wordpress.org/extend/plugins/user-access-manager/

  2. RealPython.com
    Member
    Posted 1 year ago #

    I've done a bit more investigating - it looks like any file is properly restricted to a certain role *until* a single registered user downloads it, then it becomes available to anyone via the URL. The .htaccess and .htpasswd files for the uploaded content don't change, so it's a mystery how permissions could be changing in this way.

Topic Closed

This topic has been closed to new replies.

About this Plugin

About this Topic