Jump to:

10993 Posts in 2727 Topics by 1818 members

All other Modules

SilverStripe Forums » All other Modules » SecureFiles 0.21 Released - Testers + Translations please!

Discuss all other Modules here.

Moderators: martimiz, Sean, biapar, Willr, Ingo, swaiba, simon_w

Page: 1 2 3 4 5 6
Go to End
Author Topic: 5774 Views
  • UncleCheese
    Avatar
    4085 Posts

    Re: SecureFiles 0.21 Released - Testers + Translations please! Link to this post

    One more thing.. will this hide my secured files from site search?

  • Hamish
    Avatar
    Community Member
    712 Posts

    Re: SecureFiles 0.21 Released - Testers + Translations please! Link to this post

    @Juanitou Thanks! That's a big help toward making this a polished module.

    @UncleCheese It should do. As long as you can't see the file when you're not logged in, Google shouldn't be able to index it. As an additional precaution, make sure directory indexing is turned off (eg: Options -Indexes in your httpd.conf). I might add this to the htaccess rules, but it relies on the AllowOverrides directive to be on in httpd.conf so it isn't really a good idea for me to include it. Might add that to the installation docs.

    Just a note - the way that we're serving files is memory intensive. Should be fine for things like Resumes and images though.

    In trunk, I've sped up the 'normal' method and I'm experimenting with the mod_xsendfile apache module that uses sendfile headers to pass the request back to apache (or lighttpd which natively supports these headers). This should allow SecureFiles to provide access to any file that could normally be served - e.g streaming video, very large files etc, without impacting on your website performance.

  • UncleCheese
    Avatar
    4085 Posts

    Re: SecureFiles 0.21 Released - Testers + Translations please! Link to this post

    Thanks, Hamish. I guess I'm not so much concerned with Google search as I am with the Silvertripe native search, since it uses the database, not a spider. Can you comment on that?

  • Hamish
    Avatar
    Community Member
    712 Posts

    Re: SecureFiles 0.21 Released - Testers + Translations please! Link to this post

    According to SearchForm.php, results should be filtered by permission:

    // filter by permission
    if($results) foreach($results as $result) {
       if(!$result->canView()) $results->remove($result);
    }

    This is the same permission check performed by SecureFileController so yes, secured files shouldn't appear in search unless you have permission to view them.

    That said, I haven't tested this - so make sure for yourself first

  • UncleCheese
    Avatar
    4085 Posts

    Re: SecureFiles 0.21 Released - Testers + Translations please! Link to this post

    Love it! Thanks.

  • weberho
    Avatar
    Community Member
    15 Posts

    Re: SecureFiles 0.21 Released - Testers + Translations please! Link to this post

    Nicely done. Attached you'll find the German translation.

    Thank you a lot!

    Attached Files
  • Hamish
    Avatar
    Community Member
    712 Posts
  • weberho
    Avatar
    Community Member
    15 Posts

    Re: SecureFiles 0.21 Released - Testers + Translations please! Link to this post

    I have just recognized, that I have sent you the german translation encoded in UTF-8, while FR and ES translations are encoded in ISO-8859-1. I think, those should be converted to UTF-8, too.

    5774 Views
Page: 1 2 3 4 5 6
Go to Top

Want to know more about the company that brought you SilverStripe? Then check out SilverStripe.com

Comments on this website? Please give feedback.