Zikula Community

• uheweb
  
  

  • Rank: Helper
  • Registered: Sep 16, 2004
  • Last visit: Oct 21, 2009
  • Posts: 731

  Posted: Aug 08, 2007 - 07:30 AM

  I see that .8 has htaccess rules for the module directory allowing only certain filetypes.
  
  What would be best practices for user uploads in modules? Say, a project module which needed some pdf or .ods files uploaded?
  
  Should those be stored in the module tree, or another folder? pnTemp isn't an option for us, as we take that out of the root and need to serve direct links to these files (security by obscurity with random namings, disallow index, etc which is good enough. Critical docs are served via PHP to control access more)
  
  Just wondering, going forward, what others do or have done in this area to keep PN, modules and future upgrades happy.
  
  Seems to me there should be a /content folder in the PN root, with sub-folders for the modules that want to put it there. This keeps it free of the PN folder tree, yet makes it consistent and easy for users to identify what it is.
  
  Module developers could specify the filetypes allowed, and postnuke generates a htaccess similar to the one in the modules directory, only allowing those types, thus keeping it secure still to some extent.
  
  Further down the road, a generic uploader to hook into would be great - uploads according to the schema supplied by the module, returns the location to the module, module then saves the location and finishes off its routine to save the data.
  
  Thoughts? Should I suggest that as a feature request for future postnuke core inclusion?
  
  I'm going to start working on something to accomplish this, but would like to do so towards a common standard rather than ad-hoc. I also need to create it so users can upload and save a few files (with limits) and provide temporary password access/link to them. So, a users extension (rather than module only) is planned, too.
  
  With the state of current uploading modules (downloads 2.1, updownload, etc), do any of them allow hooks or API calls from other modules? Or, follow some standard for file locations?
  
  Thanks to anyone with some experience using these other modules.
  
  NCM
  UHEweb

  • 
  •  
•  
•  

Users on-line

• mesteele101

This list is based on users active over the last 60 minutes.