I've been trying to block access to a directory inside of my files/ dir all morning with no success. This module seems to half-work; if I visit http://mysite.com/sites/default/files/private_folder/image.jpg, it redirects to http://mysite.com/system/files/private_folder/image.jpg and resolves the image. To my understanding, I should not be able to get to this image.

Is there something I am doing wrong? Before trying this module, I tried everything suggested on http://drupal.org/node/540754 (which did not work either).

There has got to be something very small that I am missing and it is driving me insane. Any help is greatly appreciated.

Thanks!

Comments

johnhanley’s picture

Category: bug » support

This module definitely works as advertised once you get things setup correctly. I'm going to assume you have everything configured correctly, but here's a couple of things to try:

1) Visit the configuration page and SAVE the settings (even if using the default configuration.)

2) Clear the browser cache when testing anonymous and authenticated access.

You might find another tip or two in some of the other closed support issues for this project, but honestly there isn't that much to it.

jh3’s picture

I gave it another go and things seem to be working now. I don't know what it was before.

In any case, thanks for the response!

jh3’s picture

Status: Active » Closed (fixed)
truyenle’s picture

My case is the same, I am still able to access the image although it is under private and all the setup is as instruct.

The weird thing is that when I log out and access
www.example.com/sites/default/files/private/test_download.txt

It doesn't change to this
www.example.com/system/files/private/test_download.txt

Any idea?
Thanks

johnhanley’s picture

This issue is closed. Please create a new one if the problem persists.

truyenle’s picture

I think i got it solved.

The root cause is that I did turn on AllowOverride under apache configure file of Ubuntu 10.04.
So I just turn it on by
AllowOverride All

Then restart the apache, uninstall the module and reinstall it again => Should work.
Thanks