Early Bird Registration for DrupalCon Portland 2024 is open! Register by 23:59 PST on 31 March 2024, to get $100 off your ticket.
Install
Works with Drupal: 7.xUsing Composer to manage Drupal site dependencies
Downloads
Download download_file-7.x-2.0.tar.gztar.gz
12.94 KB
MD5: d74294ccd3875e20d4a37bb567a693e8
SHA-1: 461f67d7eccb94e0ee5b45339e5628752955af4d
SHA-256: 80d3a8c52840208bc757e884e50856a59f04ee57ca3918d2d11b190655da5465
Download download_file-7.x-2.0.zipzip
14.76 KB
MD5: 46593e93ad731f2b078b1941680fc6d4
SHA-1: cf0858615b467827db45d7637c0dc5d31d70576a
SHA-256: da0ad7b6c3f7ee20fa57d4567b7600171cb8a63a58aa57b2961e6d40196361be
Release notes
Earlier module was not sufficiently protecting private files when user is having permission 'access direct download file' .
This vulnerability is mitigated by checking if the file is private or public. If it is private file, added Drupal access denied function.