Files Upload

Files Upload

modyking55modyking55 Posts: 14Questions: 7Answers: 0

There is anyway to limit files retrieved from db used at that table because it's a big risk to make every user can know all file paths in the system

Replies

  • rf1234rf1234 Posts: 2,983Questions: 87Answers: 421

    yes, do it programmatically.

  • allanallan Posts: 63,455Questions: 1Answers: 10,465 Site admin

    By default Editor's Upload class will select all files (under the theory that the user can see them in the Ajax response anyway). If there is a different class of files in the table that the user shouldn't be able to see, they should be stored in a different table or use the Upload->where() method to limit access to certain files.

    Allan

This discussion has been closed.