• Resolved andrekliem

    (@andrekliem)


    Is there a security mechanism that ensures that a malicious user cannot download a backup from my uploads directory and uncompress it on their own site?

    For example, if they could guess the URL to the link, download it, are the contents safe or is it possible for them to get access to the entire backup?

Viewing 1 replies (of 1 total)
  • Plugin Author Backup Guard

    (@backupguard)

    Dear @andrekliem

    Yes, actually there is a mechanism.
    We create temporary symlinks, that allow you to download the real backup file.
    But direct access to the real backups is denied via URL.

Viewing 1 replies (of 1 total)
  • You must be logged in to reply to this topic.