Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Author podpirate

    (@podpirate)

    Hi,
    the plugin does not protect the raw files in the wp-uploads/ directory (To do so would result in a vast webserver load increase, when every file request would have to go through an access gate, before its sent to the browser.)
    So having the who-can-read setting on attachments would be a kind of pointless in the first place and it would also give a false impression of safety.
    (BTW: If it’s just about images you can embed them as a data url.)
    cheers, j.

    Thread Starter kkarsten62

    (@kkarsten62)

    I was wondering because I saw similar funcs by another plugin. It’s restricting the read access by GUI. But when knowing the URL to the file it will show up with no considering to the set access right. So even no 100℅ safe func.

    So I will reach out for a dedicated file upload/download manager with role access funcs.

    And suggestion for a suitable file manager plugin?

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘I am missing read restriction for media’ is closed to new replies.