I’m using Evo and I’ve got several PDFs I need to secure in a user-only area. My idea is this:
- create weblinks in a secured folder, each of which references one PDF
- create the users and groups via MODx security
I think this will work well, but the only problem is that each file is still accessible without logging in if you know the direct URL of each file. Has anyone found a way to secure file system resources using the MODx security model, like a plugin or snippet? I know Revo now includes file system objects as resources, but as I mentioned, I’m still on Evo.
-
MODX Staff
- 10,725 Posts
If you can’t use Static Resource in Revo, you’ll need to script a download snippet that can list and/or allow download of these files via PHP rather than directly from the web server. Of course, you’ll have to use your own security code for each file. I can’t think of an easier way atm.
No I haven’t. I’ll check it out.
FileDownloadPE might actually be a closer fit for what I’m looking for. Looks like the other FileDownload snippet/plugin doesn’t restrict file listing, only file downloading. I guess I could probably combine it with PHx to restrict display though.
☆ A M B ☆