Protect file access for uploaded files

  • Resolved marcdegagnelob

    (@marcdegagnelob)


    1 year, 5 months ago

    Hello Formidable,

    When you have a form that as file uploads capabilities, files are stored in /wp-content/uploads/formidable/…

    On one customers web site, they use Formidable Forms for subscription and some documents can be uploaded through it.

    These files by default can be accessed by any users on frontend should they be able to guess the file names.

    I have tested the suggested limitations of permission suggested from this page : https://formidableforms.com/knowledgebase/file-upload/ and was still able to access the uploaded files directly in browser private mode. I limited the access to admins and subscribers only.

    Do you have suggestions on how to protect these files to only permit admin and the subscribed account users?

    Thanks

Viewing 4 replies - 1 through 4 (of 4 total)
  • Plugin Support Jonathan Martínez

    (@jonathanenlared)

    Hey @marcdegagnelob

    Thank you for reaching out to us today! We support the Lite version on the WordPress forums. Based on the details you shared, you’re using the Pro version. Could you create a new ticket on the following link?

    https://formidableforms.com/new-topic/

    We’ll be happy to assist you over there.

    Best,

    Thread Starter marcdegagnelob

    (@marcdegagnelob)

    Hello Jonathan,

    Thanks you for your answer.

    That would become a 100$ + question then!

    When I try to post a ticket, I get the rubbish of not being able to post a question and I am limited to pre sale questions because I am not the owner of the licence nor have an account with you.

    You see the customer is an NPO and the original developer/agency is now unreachable and the current holder and renewal of the licence is unknown.

    In the setting I have :
    CLé DE LICENCE
    Your license key provides access to new features and updates.
    You’re using Formidable Forms Lite. Enjoy! ??
    To?unlock more features?consider?upgrading to the Elite plan.
    And I do have the Pro extension installed and active as mentioned in the “Extensions” page of Formidable Forms menu.

    It make sens to me that where ever a licence is installed, no regards of being the purchaser, the site owner should have access to the support!
    When you get a computer, regardless of from whom you purchased it, you have access to the OS support!

    ??

    Plugin Support Jonathan Martínez

    (@jonathanenlared)

    Hey @marcdegagnelob,

    Support for Formidable Forms Pro features is limited to paid users. Our?Support Policy?specifies we only provide support to the license holder—the individual who purchased the license.

    I understand the owner of the licenses is unknown. We have seen many cases similar to yours. I recommend to your client to buy their own license. This way, they can have access to support without the need for third parties.

    Since the issue is related to the file upload field and permissions, the Basic Pro license should be enough.

    Best,

    @marcdegagnelob It is possible that this is a caching issue. You may wish to try checking your caching plugin or web hosting cache settings to exclude the uploads folder, a specific sub-folder, or a specific file type (such as PDFs) from being cached.

    The web hosting company I use provides this guidance.

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘Protect file access for uploaded files’ is closed to new replies.