https://legacy.forums.gravityhelp.com/topic/ssl-certificate-upload-location-destination Gravity Support Forums Topic: SSL certificate, upload, location, destination, en-US Mon, 20 Apr 2026 03:26:01 +0000 http://bbpress.org/?v=1.0.1 q https://legacy.forums.gravityhelp.com/search.php https://legacy.forums.gravityhelp.com/topic/ssl-certificate-upload-location-destination#post-77029 Sun, 23 Sep 2012 21:44:11 +0000 Chris Hajer 77029@https://legacy.forums.gravityhelp.com/ <p>OK, thank you for the update. </p> https://legacy.forums.gravityhelp.com/topic/ssl-certificate-upload-location-destination#post-77004 Sun, 23 Sep 2012 17:37:19 +0000 Joseph 77004@https://legacy.forums.gravityhelp.com/ <p>As you suggested. Also placed a username password on the folder! </p> https://legacy.forums.gravityhelp.com/topic/ssl-certificate-upload-location-destination#post-76947 Sun, 23 Sep 2012 02:15:57 +0000 Chris Hajer 76947@https://legacy.forums.gravityhelp.com/ <p>How did you resolve the problem Joseph? </p> https://legacy.forums.gravityhelp.com/topic/ssl-certificate-upload-location-destination#post-76915 Sat, 22 Sep 2012 23:31:46 +0000 Joseph 76915@https://legacy.forums.gravityhelp.com/ <p>Just to say this is sorted now! </p> https://legacy.forums.gravityhelp.com/topic/ssl-certificate-upload-location-destination#post-75503 Sat, 15 Sep 2012 12:36:22 +0000 Chris Hajer 75503@https://legacy.forums.gravityhelp.com/ <p>The syntax looks OK. I would put your rules right where blank line 2 is in the default WordPress .htaccess file.</p> <p>It's possible your host does not support these overrides in an .htaccess file. You will need to contact your host or look at the Apache error logs to see what the problem is that is causing the 500 Internal Server error. </p> https://legacy.forums.gravityhelp.com/topic/ssl-certificate-upload-location-destination#post-75409 Fri, 14 Sep 2012 18:23:28 +0000 Joseph 75409@https://legacy.forums.gravityhelp.com/ <p>Hi Chris,</p> <p>I pasted...</p> <pre><code>RewriteEngine On RewriteCond %{SERVER_PORT} 80 RewriteCond %{REQUEST_URI} wp-content/uploads/gravity_forms RewriteRule ^(.*)$ &lt;a href=&quot;https://example.com/wp-content/uploads/gravity_forms/$1&quot; rel=&quot;nofollow&quot;&gt;https://example.com/wp-content/uploads/gravity_forms/$1&lt;/a&gt; [R,L]</code></pre> <p>but replacing the the URL with my domain and wordpress install folder.</p> <p>However I get an internal server error.</p> <p>this is currently what my .htaccess file looks like</p> <pre><code>DirectoryIndex index.php # BEGIN WordPress &lt;IfModule mod_rewrite.c&gt; RewriteEngine On RewriteBase / RewriteRule ^index\.php$ - [L] RewriteCond %{REQUEST_FILENAME} !-f RewriteCond %{REQUEST_FILENAME} !-d RewriteRule . /index.php [L] &lt;/IfModule&gt; # END WordPress</code></pre> <p>where exactly should it go so I so I don't get the internal error?</p> <p>I think I'm being lame here </p> https://legacy.forums.gravityhelp.com/topic/ssl-certificate-upload-location-destination#post-73693 Mon, 03 Sep 2012 16:53:29 +0000 Joseph 73693@https://legacy.forums.gravityhelp.com/ <p>cheers chris!</p> <p>i will have a go.... I'm doing too many things here</p> <p>(rolling of eyes) </p> https://legacy.forums.gravityhelp.com/topic/ssl-certificate-upload-location-destination#post-73682 Mon, 03 Sep 2012 16:17:00 +0000 Chris Hajer 73682@https://legacy.forums.gravityhelp.com/ <p>There is a lot to it, but I did it on an installation I have in about 30 minutes or so, including the form. So, for a competent systems administrator, it should not take too long. On shared hosting, it might take longer to accomplish, depending on the support you receive. </p> https://legacy.forums.gravityhelp.com/topic/ssl-certificate-upload-location-destination#post-73678 Mon, 03 Sep 2012 15:11:41 +0000 Joseph 73678@https://legacy.forums.gravityhelp.com/ <p>Will have a look and try. Phew thats a long one. </p> https://legacy.forums.gravityhelp.com/topic/ssl-certificate-upload-location-destination#post-73669 Mon, 03 Sep 2012 13:37:45 +0000 Chris Hajer 73669@https://legacy.forums.gravityhelp.com/ <p>Protecting the uploads is not part of Gravity Forms. However, you can do a couple things:</p> <p>1. You can force all access to the upload folder to be via https/SSL by adding this to your .htaccess file:</p> <pre><code>RewriteEngine On RewriteCond %{SERVER_PORT} 80 RewriteCond %{REQUEST_URI} wp-content/uploads/gravity_forms RewriteRule ^(.*)$ <a href="https://example.com/wp-content/uploads/gravity_forms/$1" rel="nofollow">https://example.com/wp-content/uploads/gravity_forms/$1</a> [R,L]</code></pre> <p>That will work if your host allows that type of override in an .htaccess file. That will force any access to that folder via http to be redirected over https. That protects the request during transit.</p> <p>2. You can change the upload directory with the gform_upload_path filter: <a href="http://www.gravityhelp.com/documentation/page/Gform_upload_path" rel="nofollow">http://www.gravityhelp.com/documentation/page/Gform_upload_path</a> That will put uploads into a new directory for you. If you do that, the information in item 1 above will need to be adjusted to the new location and URL.</p> <p>3. However, none of that will prevent someone with the URL from accessing the document directly. They would just be directed to a secure connection and the download would continue. You can however, protect the upload directory with Apache Basic Authentication, which will force the visitor to log in with a username and password before they can download the file. You can read more about Apache Basic Authentication here: <a href="http://www.rahul.net/howto/basicauth.html" rel="nofollow">http://www.rahul.net/howto/basicauth.html</a> There are a lot of tutorials online. There are two parts to it. Create the .htpasswd file, and create the .htaccess file. The .htaccess file will go in the upload directory for the form, and will look like this:</p> <pre><code>Options -Indexes AuthName &quot;Protected Upload Directory&quot; AuthType Basic AuthUserFile /path/on/server/to/file/htdocs/.htpasswd require valid-user</code></pre> <p>And then in the file /path/on/server/to/file/htdocs/.htpasswd you will store the authentication information.</p> <p>This basic auth does not interfere with the uploads, just the access over http (and https).</p> <p>It's a worthwhile customization but will take a bit of work and the help of your system administrator maybe. </p>