Zikula Community

• mesteele101
  
  

  • Rank: Helper
  • Registered: Sep 19, 2003
  • Last visit: May 25, 2010
  • Posts: 612

  Posted: Jul 09, 2011 - 01:04 PM

  I'm running Apache. I have some files that are made available for downloading using the Downloads module. What I'd like to do is block downloading unless they are actually on the site, and downloading from the links there, not from a link outside the website. Is there a way to do this?
  
  
  
  Edited by mesteele101 on Jul 09, 2011 - 08:14 PM.

  • 
  •  
• craigh
  
  

  • Rank: Developer
  • Registered: Jun 16, 2003
  • Last visit: May 29, 2010
  • Posts: 1966

  Posted: Jul 09, 2011 - 03:00 PM

  I think the Downloads module supports placing your downloadable files above the web root.

  • 
  •  
• mesteele101
  
  

  • Rank: Helper
  • Registered: Sep 19, 2003
  • Last visit: May 25, 2010
  • Posts: 612

  Posted: Jul 09, 2011 - 03:54 PM

  I've been through all the settings in Downloads v2.4 and I didn't see anything. I found this link that deals with this using WordPress. Is there a chance it will work with Zikula?
  
  Limit Downloading

  • 
  •  
• tfotis
  
  

  • Rank: Team Member
  • Registered: Dec 17, 2009
  • Last visit: Apr 06, 2010
  • Posts: 61

  Posted: Jul 09, 2011 - 09:01 PM

  maybe you can use something like this:
  
  

  Code

  RewriteEngine on
  RewriteCond %{HTTP_REFERER} !^http(s)?://(www\.)?mysite.com [NC]
  RewriteRule \.(zip|rar|doc|xls)$ http://www.mysite.com/accessdenied.gif [NC,R,L]

  
  
  Create an .htaccess file with the above code and place it in your downloads folder. Remember to change 'mysite.com' to your site domain and edit the list of allowed files also.
  
  The purpose is to prevent hotlinking by checking the referrer.
  
  If you google 'prevent hotlinking' you will find many articles regarding this topic

  • 
  •  
• mesteele101
  
  

  • Rank: Helper
  • Registered: Sep 19, 2003
  • Last visit: May 25, 2010
  • Posts: 612

  Posted: Jul 10, 2011 - 11:00 AM

  That worked. I thought there would be more to it then that. I bwas thinking that they used the URL from the downloads that they would bypass the check. However it does't seem to be a problem using the download module.
  
  Thanks...

  • 
  •  
•  
•  

Users on-line

• 0 users

This list is based on users active over the last 60 minutes.