admin
Karma: 57
|
Re:Anti-Leach - 2005/08/22 21:41
Thanks, those are good suggestions. I have incorporated them into the code, so they will be included in the release of Remository 3.20.
I'd just like to emphasise, though, that I am strongly discouraging people from using the old anti-leach facility. Recent versions of Remository are designed to work in a way that means that complete security can be achieved without the messy business of prefixing file names with peculiar characters.
Two completely secure approaches are:
1) Place the file downloads directory outside the Apache document root, making the files wholly inaccessible via any URL, or
2) Use .htaccess to prohibit any Apache access to the downloads directory.
In Remository 3.40 a further mechanism will exist that will be wholly proof against leaching - the ability to store the files in the database.
Martin Brampton aka Counterpoint
http://black-sheep-research.com
http://mamboguru.com |
Forum
