@Juanitou Thanks! That's a big help toward making this a polished module.

@UncleCheese It should do. As long as you can't see the file when you're not logged in, Google shouldn't be able to index it. As an additional precaution, make sure directory indexing is turned off (eg: Options -Indexes in your httpd.conf). I might add this to the htaccess rules, but it relies on the AllowOverrides directive to be on in httpd.conf so it isn't really a good idea for me to include it. Might add that to the installation docs.

Just a note - the way that we're serving files is memory intensive. Should be fine for things like Resumes and images though.

In trunk, I've sped up the 'normal' method and I'm experimenting with the mod_xsendfile apache module that uses sendfile headers to pass the request back to apache (or lighttpd which natively supports these headers). This should allow SecureFiles to provide access to any file that could normally be served - e.g streaming video, very large files etc, without impacting on your website performance.

According to SearchForm.php, results should be filtered by permission:

This is the same permission check performed by SecureFileController so yes, secured files shouldn't appear in search unless you have permission to view them.

That said, I haven't tested this - so make sure for yourself first

Nicely done. Attached you'll find the German translation.

Thank you a lot!

I have just recognized, that I have sent you the german translation encoded in UTF-8, while FR and ES translations are encoded in ISO-8859-1. I think, those should be converted to UTF-8, too.