[AndrewD]

Originally Posted by sduckie2k5

Want to thank you first of all, have been running this for quite sometime and have enjoyed your work.

Secondly, I noticed today when upgrading to 2.2.8 besides the obvious reported bug that if I goto the directory where the downloads reside, I can access it and the index of the downloads publicly, is there anyway I can shut this down, in the event that someone finds out its location, i.e should I chmod it? If so, to what or what might I do that only registered users can gain access, thru the proper channels?

Thanks D*

Several points.

You can place all the LDM files outside the web server directories using the local_file_root and local_file_root_prefix settings. That will completely stop anyone being able to get at the files by guessing the location. This is explained in http://www.eirma.org/wikis/index.php...nd_Server_Load

In addition, you should block your web server from allowing production of directory listings when someone just enters the directory name. An easy way to do this is to put an empty index.html file in that directory. A better way is to tell the server not to provide directory listings. With Apache, you can also configure the server to prevent directory listings, using the Options commands within the httpd.conf file.