Forbid Guests to Download Certain Files

Aleksei

Hi
I've made this setting in the ACP: written all the file extensions that are forbidden for the guests, separated by commas:

But guests still can download the forbidden files. You can check it here: https://forum.c4d.space/topic/430/

For me it looks like a bug. Please, advice, what can be done to prevent those file formats from downloading by guests?

dunlix

@aleksei is this a built in forum feature or a plugin you’ve made?

Aleksei

If you're asking about the possibility to forbid certain file types for guest download, then it's a forum feature. It can be found in Uploads settings of the admin control panel.

PitaJ

Can you take a bigger screenshot of the ACP settings page including surrounding settings? I thought it was a whitelist, not a blacklist.

gotwf

@aleksei Iirc, there are separate knobs which make certain file extensions private while also outright forbidding others. Which are you tweaking in your screenshot?

<baris>

I think the settings to prevent guests from download files doesn't do anything if the files are served by nginx.

Aleksei

@gotwf said in Forbid Guests to Download Certain Files:

@aleksei Iirc, there are separate knobs which make certain file extensions private while also outright forbidding others. Which are you tweaking in your screenshot?

I tried all possible variants.

@baris, and how I can check it? If files are served is it possible to switch the setting via the control panel somewhere? And is it a good decision? Because I heard that serving files via NodeJS is slower than Nginx.

<baris>

If you look at the response headers in the network tab for the image it would show nginx or nodebb.

Aleksei

Yes, it appeared to be served by Nginx.

Aleksei

How can I change the files serving for NodeJS to handle it instead of Nginx? I couldn't find this option in ACP.

PitaJ

You have to remove our comment out the assets location block. It may be possible to just exclude uploads, but you'll need to research the nginx syntax for that yourself.