acces to images and other docs even when protected

  • When I use a direct link to an image or other document that is stored in the Media library, I have acces to this image of other document, even when the global UM setting is that acces to Media is restricted. Even when I set an individual document to ‘access restricted’, I still can open it with a direct link.
    Am I doing something wrong, or is this a bug?

    The page I need help with: [log in to see the link]

Viewing 5 replies - 1 through 5 (of 5 total)

  • @marionfw

    You can read these guides about how to prevent hotlinking.

    https://kinsta.com/blog/hotlinking/

    https://themeisle.com/blog/prevent-image-hotlinking-in-wordpress/

    Thread Starter MarionFW

    (@marionfw)

    Hi Missveronica,

    Thanks for you reply. However I don’t think the solutions you suggested give the answer I’m looking for. My site is a members only site (except for a few public pages), so when I send a link to our members (for a post, document or other), I want them to login before having acces. For documents in the Media Library, that is not the case right now: anyone with the link has access, although in the UM settings general and the settings for an individual document it should be members-only access. So it seems more likely to me that this might be a bug.

    Plugin Support andrewshu

    (@andrewshu)

    Hello @marionfw

    I can’t reproduce this issue. Try to do a conflict test – https://docs.ultimatemember.com/article/96-how-to-do-a-plugin-theme-conflict-test.

    Regards.

    Plugin Support andrewshu

    (@andrewshu)

    Hi @marionfw

    This thread has been inactive for a while so we’re going to go ahead and mark it Resolved.

    Please feel free to re-open this thread if any other questions come up and we’d be happy to help. ??

    Regards

    Thread Starter MarionFW

    (@marionfw)

    Hi Andrew,

    Sorry for the delay in answering.

    I’ve set my site to maintenance mode and even then, I can view documents or pictures if I use the link. I’ve tried several browsers, there was no difference.

    I then disables almost all other plugins, except for the ‘under construction’ plugin, the UM plugins and 3 others that -as I have experienced before-, make a mess of my site when disabled and then enabled again. These 3 are quite common plugins, so I don’t expect these to be the cause of the problem.

    I tried the following with an image:

    • Set to UM accessible to all (that is: only logged-in users, as my site is members only, except for a small number of pages)
    • Set UM accessible to logged in users without specifying a role
    • Set UM accessible to logged in users only for admin

    No effect whatsoever, in all cases images and pdf’s still open with the link.

    Would this help to solve the issue?

Viewing 5 replies - 1 through 5 (of 5 total)
  • The topic ‘acces to images and other docs even when protected’ is closed to new replies.