HackerOne users: Testing against this community violates our program's Terms of Service and will result in your bounty being denied.

how to prevent an unregistered user from downloading a file

How to prevent unregistered users from downloading a file from a discussion

Comments

  • LincLinc Detroit Admin

    Vanilla isn't set up to do that natively.

    You'd need to put the files in a private directory, then use a script to access them so you could check permissions. That adds processing overhead and makes it more challenging to use a CDN.

Sign In or Register to comment.