In the download settings say: “PHP Dispatching keeps the download URL hidden.”
What a bullshit! Really a user deception!
The browser receives the original URL, where the file is stored. Hot linking is very easy, even for not loged-in users.
This plugin does not what is says! A really security risk. Never ever use it with sensible documents!
- The topic ‘PHP Dispatch does send the original URL to the browser!’ is closed to new replies.