I've created a password protected section with MODX Web Access Permissions. The resources within this section are only visible to logged in web users and I'm happy this is working correctly.
Each child resource within the section contains a TV. The TV allows admins to link to PDF. I then list these PDF files to logged in web users only via a Ditto call.
My problem is that the PDF files are still web accessible to non logged in users. Is there a simple solution to protect them using MODX?
Many thanks
You can protect files by using a file download snippet (search the extras) that won't show the real path to the person downloading the file.
But if the file is stored in a public folder anyone who knows the path can view the file.
There are different ways of dealing with this. Everything from creating new files on dowload or store files in the database...
My suggestion is to htpsswd-protect the folder. The browser will prompt your users with a login box on download. Add info with the credentials and explain your website's commitment to web security.
Thanks mrhaw. Really appreciate your help ;-)
