Hi All,
I am using WWF 7.01. I have created a forum named "Downloads" from where users can download files. I allowed only one member group e.g; "Platinum Member" group to download files from this forum. No other group member can access this forum.
I upload files with generic names like computer_concepts.zip, visual_basic.zip etc. so if I change the member group from "Platinum Member" to any other group which is not allowed to acces the forum to download files. Now he has the idea about the file names and the directory where files were uploaded. He can access the files by typing the fully qualified URL like sitename/forum/uploads/file_name.zip
I want to know that how can I protect the "uploads" directory in such scnarios. My site is hosted at readyhosting.com and they offers a password protected directory. If I set the forum's "uploads" directory as password protected directory, will I need to add extra code in the upload_flies.asp file so that members can upload files too OR is there any other solution of my problem. Pls help.
Topic Options
Post Options
Thanks(0)
