Please see http://pmwiki.org/wiki/PmWiki/UploadsAdmin you need to In local/config.php set $EnableDirectDownload<http://pmwiki.org/wiki/PmWiki/UploadVariables#EnableDirectDownload>=0;
see also http://pmwiki.org/wiki/PmWiki/Security cheers Simon 2009/6/30 Sameer Kumar <[email protected]> > I am using AuthUser to control access to my site and have a site-wide read > and edit password as my wiki is a personal information management tool. I > have the most recent version of Pmwiki running on my site. > I have just discovered that my entire upload directory and every single > uploaded file is accessible without a password if someone has a full URL. I > have confirmed that AuthUser is working for all the groups, except for the > Uploads folder... if i go to wiki.xxxx.com/uploads, the entire directory > structure is visible. > How can solve this problem and lock down my uploads folder? > > Thanks for all the help. > Sameer > > _______________________________________________ > pmwiki-users mailing list > [email protected] > http://www.pmichaud.com/mailman/listinfo/pmwiki-users > > -- ____ http://kiwiwiki.co.nz
_______________________________________________ pmwiki-users mailing list [email protected] http://www.pmichaud.com/mailman/listinfo/pmwiki-users
