Attached support files are publicly viewable.

The link above is to a file I uploaded through the support panel as another user.

This is default WordPress behaviour, media is directly accessible with a URL.

You can block access in various ways, such as .htaccess, or there are also plugins that block direct access to files, and you can probably even specify file-types.

But yeah this is the same case even for very popular e-commerce plugins, such as Easy Digital Downloads.
Purchasable items are publicly downloadable by URL, by anyone who has a URL.

Regarding indexing, you can again use plugins to prevent indexing the support_uploads folder, or the uploads folder all-together.

• This reply was modified 7 years, 1 month ago by smartcat.

Is there a way to change the folder these files go into so one could protect just that folder and not block access to the entire uploads directory?

EDD uses a special folder and blocks it with .htaccess

https://docs.easydigitaldownloads.com/article/194-are-download-files-protected

Nice plugin. I want to buy the upgrade, but need to make sure it’s going to work for my purposes.

Thanks for all of your responses.

~ Corey

ill definitely look into file protection. My thought was not to meddle with people’s server config, as each plugin user has different use and requirements. however yeah it would be a nice option to give, i probably wouldn’t force protection by default, but perhaps have an option in the settings allowing users to turn on file protection.

For the time being, the approach would be for the user to add the rules to their server, ill add a knowledge base article about that.

thanks!

Thanks. Will keep an eye out in case you implement this.

Blocking all media isn’t an option for me. Would be terrible for SEO.

Thanks again.

~ Corey

Can you not just block access to only the uCare uploads folder ?
/wp-content/uploads/support_uploads/

FYI: https://github.com/smartcatdev/support-system/issues/314

Ha! Yeah, that shouldn’t be a problem. Should have looked to see if you had a special folder via FTP. I didn’t do that. Saw it show up in my media library and thought it was just going into normal upload folders.

You can see I was misguided in my question from above

Is there a way to change the folder these files go into so one could protect just that folder and not block access to the entire uploads directory?

This should work just fine.

Thanks!

~ Corey

• This reply was modified 7 years, 1 month ago by Corey Kretsinger.