<?xml version="1.0" encoding="UTF-8"?>
<!-- generator="bbPress/1.0.1" -->
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom">
	<channel>
		<title>Gravity Support Forums Topic: Securing file uploads?</title>
		<link>https://legacy.forums.gravityhelp.com/topic/securing-file-uploads</link>
		<description>Gravity Support Forums Topic: Securing file uploads?</description>
		<language>en-US</language>
		<pubDate>Sat, 04 Apr 2026 19:15:32 +0000</pubDate>
		<generator>http://bbpress.org/?v=1.0.1</generator>
		<textInput>
			<title><![CDATA[Search]]></title>
			<description><![CDATA[Search all topics from these forums.]]></description>
			<name>q</name>
			<link>https://legacy.forums.gravityhelp.com/search.php</link>
		</textInput>
		<atom:link href="https://legacy.forums.gravityhelp.com/rss/topic/securing-file-uploads" rel="self" type="application/rss+xml" />

		<item>
			<title>Jukka Karvonen on "Securing file uploads?"</title>
			<link>https://legacy.forums.gravityhelp.com/topic/securing-file-uploads#post-26471</link>
			<pubDate>Fri, 27 May 2011 12:51:05 +0000</pubDate>
			<dc:creator>Jukka Karvonen</dc:creator>
			<guid isPermaLink="false">26471@https://legacy.forums.gravityhelp.com/</guid>
			<description>&#60;p&#62;Good to know that you have plans for it.&#60;/p&#62;
&#60;p&#62;Some kind of download manager would allow direct access to be denied with htaccess. Now I just made it little more difficult to access uploaded files by checking login cookie if trying to load them.&#60;/p&#62;
&#60;p&#62;RewriteCond %{HTTP_COOKIE} !^.*wordpress_logged_in_.*$&#60;br /&#62;
RewriteRule ^(.*)files/gravity_forms(.*)$ &#60;a href=&#34;http://my.site/&#34; rel=&#34;nofollow&#34;&#62;http://my.site/&#60;/a&#62; [NC,R,L]
&#60;/p&#62;</description>
		</item>
		<item>
			<title>Carl Hancock on "Securing file uploads?"</title>
			<link>https://legacy.forums.gravityhelp.com/topic/securing-file-uploads#post-26464</link>
			<pubDate>Fri, 27 May 2011 11:41:54 +0000</pubDate>
			<dc:creator>Carl Hancock</dc:creator>
			<guid isPermaLink="false">26464@https://legacy.forums.gravityhelp.com/</guid>
			<description>&#60;p&#62;There is not currently a way to restrict attachment file downloading.  However, the links to these can only be accessed via the entry detail.  The URL's to the files are unlikely to be guessed due to the file folder structure.  In the future we would like to add more security, however that will require .htaccess modifications in order to implement.
&#60;/p&#62;</description>
		</item>
		<item>
			<title>Jukka Karvonen on "Securing file uploads?"</title>
			<link>https://legacy.forums.gravityhelp.com/topic/securing-file-uploads#post-26440</link>
			<pubDate>Fri, 27 May 2011 01:46:42 +0000</pubDate>
			<dc:creator>Jukka Karvonen</dc:creator>
			<guid isPermaLink="false">26440@https://legacy.forums.gravityhelp.com/</guid>
			<description>&#60;p&#62;I would also like to know if there is any way to restrict attachment file downloading to administrators and editors only.
&#60;/p&#62;</description>
		</item>
		<item>
			<title>frankp on "Securing file uploads?"</title>
			<link>https://legacy.forums.gravityhelp.com/topic/securing-file-uploads#post-16180</link>
			<pubDate>Thu, 13 Jan 2011 18:44:08 +0000</pubDate>
			<dc:creator>frankp</dc:creator>
			<guid isPermaLink="false">16180@https://legacy.forums.gravityhelp.com/</guid>
			<description>&#60;p&#62;Curently when someone uploads an attachment with a form it goes into the uploads folder and is browseable if someone knew the filename. While I know this is unlikely, is there a way to make file uploads more secure for peace of mind?&#60;/p&#62;
&#60;p&#62;Thanks!
&#60;/p&#62;</description>
		</item>

	</channel>
</rss>
