XF 1.4 Forum is private and not indexed

[flowerpot132]

Yet you can still get to images if you know the url.

So for example right click on a resource icon and you can copy the image url. Paste that into a browser and you can see the image, even when not logged into the forum.

Why is that? and how do you stop it please?

Thanks

 

[Chris D]

It's impossible to prevent.

The files for those are stored directly on the file system so if you know the URL, you can access them. This applies to attachment thumbnails too.

This is different to full size images and attachments: these are URLs which are accessed through PHP code which does check permissions.

 

[Paul B]

If the image has been uploaded to a post in a private forum, only those with permission to access the forum will be able to view it.

Resource icons are not permission protected.

 

[flowerpot132]

Ok thanks. Where else are images or icons not permission protected please?

Also, come to think of it, any else not permission protected? Eg resources files url links maybe?

 

[Chris D]

As mentioned above, it's generally just non-important stuff, e.g. avatars, attachment thumbnails and resource icons.

Everything else, resources, full size attachments etc. are not directly accessible on the file system and go through URLs which check permissions.

 

[flowerpot132]

non-important stuff, e.g. avatars, attachment thumbnails and resource icons.

It is important to me, sorry. What is the full list please?

 

[Chris D]

That is the full list.