Support » Plugin: Download Shortcode » [Plugin: Download Shortcode] Security issue

Viewing 6 replies - 1 through 6 (of 6 total)
  • The force-download.php should be in the root folder. To the plugin creator: you might want to encrypt the file path (md5?)

    Plugin Author Drew Jaynes

    (@drewapicture)

    Docs Czar

    This issue was addressed and (in my testing) handled in v0.2.

    Is this issue has been fixed? Feel insecure to use this plugin

    Plugin Author Drew Jaynes

    (@drewapicture)

    Docs Czar

    Hi Devplus,

    Version 1.0 which was just released adds more robust security for protecting against things like directory traversal and unauthorized file access. It also introduced URL rewrites which have the ability to completely mask the endpoint.

    Hi, please help, all did as you wrote, but jpg file opened in new window…
    http://www.barior.com/?p=1715

    Plugin Author Drew Jaynes

    (@drewapicture)

    Docs Czar

    Kariko1975: Please create your own topic so I can better help you solve your issue. Also, I’m receiving a 404 at the URL you supplied.

Viewing 6 replies - 1 through 6 (of 6 total)
  • The topic ‘[Plugin: Download Shortcode] Security issue’ is closed to new replies.