Install

Works with Drupal: 7.x

Using Composer to manage Drupal site dependencies

Downloads

Download download_file-7.x-2.0.tar.gztar.gz 12.94 KB
MD5: d74294ccd3875e20d4a37bb567a693e8
SHA-1: 461f67d7eccb94e0ee5b45339e5628752955af4d
SHA-256: 80d3a8c52840208bc757e884e50856a59f04ee57ca3918d2d11b190655da5465
Download download_file-7.x-2.0.zipzip 14.76 KB
MD5: 46593e93ad731f2b078b1941680fc6d4
SHA-1: cf0858615b467827db45d7637c0dc5d31d70576a
SHA-256: da0ad7b6c3f7ee20fa57d4567b7600171cb8a63a58aa57b2961e6d40196361be

Release notes

Earlier module was not sufficiently protecting private files when user is having permission 'access direct download file' .

This vulnerability is mitigated by checking if the file is private or public. If it is private file, added Drupal access denied function.

Created by: neerajskydiver
Created on: 27 Mar 2015 at 09:01 UTC
Last updated: 2 Aug 2018 at 04:56 UTC
Insecure

Other releases