Security issue: Allow access does not restrict.

  • vivek13

    (@vivek13)


    9 years, 2 months ago

    There is security issue as WPDM does not give option to edit Allow Access:
    I have used it earlier to upload files and here it gives option based on user role like subscriber, event contributor to restrict download. But now it stopped giving this option so file could be access by anyone directly.

    If there is no restriction of number/size of files, then any idea why this option could suddenly stop working?
    I have latest version of plugin and I have not uploaded or edited anything on site but it stopped working automatically.
    Please check I have uploaded image with issue, issue is Allow Access field doe not work. So now publicly accessible causing a big security issue.
    http://www.mercerdentalsociety.com/download/issue/

    https://wordpress.org/plugins/download-manager/

Viewing 6 replies - 1 through 6 (of 6 total)
  • grafis

    (@snackmaster)

    9 years, 2 months ago

    Just a note that the Allow Access field is working for me – latest plugin, latest WordPress. You could password protect your files as an option but passwords seem unstable on recent plugin versions (visitors may be able to download without the password since all password fields are now pre-populated).

    Thread Starter vivek13

    (@vivek13)

    9 years, 2 months ago

    Thanks for your post, it worked for me also for 50 files but then it stopped working, so I am wondering what could go wrong if there are no limits in plug-in. After uploading 53rd file I observed Allow access stopped working for me.
    So I am wondering what could go wrong ? Any insight how I can debug will be helpful.
    Setting password is not an option for me.

    Thread Starter vivek13

    (@vivek13)

    9 years, 2 months ago

    Anyone ? any idea how I can debug or fix this issue ? After I uploaded 53rd file, Allow access field stopped populating user role list.
    Plug-in claims it does not have any restriction. Upto 50 Files it worked great but then suddenly without any other changes it stopped working.

    Plugin Author Shahjada

    (@codename065)

    9 years, 2 months ago

    @vivek13, if you are not seeing allow access field, if could be a javascript conflict, try disabling recently installed plugins

    Thread Starter vivek13

    (@vivek13)

    9 years, 2 months ago

    Thanks Shaon for reply and great plugin, but I did not installed any plugins, I was uploading files, upto 50 it worked absolute charm, but after 53rd it suddenly stopped working.
    I thought there is some limitation but in forum I found there is no such limitation. If you can suggest any ways how I can debug or fix it will be great. I am kind of stuck right now.

    Plugin Author Shahjada

    (@codename065)

    9 years, 2 months ago

    @vivek13, in that case, we need to check it in your installation, please post here http://www.wpdownloadmanager.com/support/forum/download-manager-free/ if you want us to check it.

Viewing 6 replies - 1 through 6 (of 6 total)
  • The topic ‘Security issue: Allow access does not restrict.’ is closed to new replies.