![]() |
attachment filename as hash
hi, i needed to have the attachments on the file system, but this is now a problem cause the filenames are only increased, so if someone wants to download all attachments, hea has only to make donload all attachments from 1 to...
i would need somehow to create the filename as a hash, or random unique, somehow, is it possible? thx |
Each attachment already has a 32 digit filehash stored in the database. This is how vBulletin checks for duplicate attachments.
|
Quote:
i have path: /var/www/vbulletin/atatchments/ and there are all the attachments stored as: 1/1.attach, 1/2.attach... and if someone runs wget or any other downloader for 1-n he can download all the attachments, i would need something like: 1/hash.jpg if this is not done, it is a big security issue for those that have the files stored on fs |
Store you attachments in /var instead of /var/www/vbulletin/attachments. Or place an .htaccess deny from all in the attachments directory. Then someone won't be able to download them all.
|
Quote:
|
They are recalled via a PHP file so the browser doesn't access them directly.
|
your right, i ment that they are called directly, thx:)
|
All times are GMT. The time now is 09:42 AM. |
Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.
X vBulletin 3.8.12 by vBS Debug Information | |
---|---|
|
|
![]() |
|
Template Usage:
Phrase Groups Available:
|
Included Files:
Hooks Called:
|