I have a site with different roles able to access different content through the taxonomy_accesss module. I have enabled private downloads so archives are transfered by Drupal. I thought it was working fine till i tried to download a file directly from its link. Wich i have found is that you can download any file just knowing it name even if u have no rights to access the node the file belongs to.
Tracking the problem i have found this code in upload.module:
function upload_file_download($file) {
if (user_access('view uploaded files')) {
$file = file_create_path($file);
$result = db_query("SELECT f.* FROM {files} f WHERE filepath = '%s'", $file);
if ($file = db_fetch_object($result)) {
$node = node_load($file->nid);
if (node_access('view', $node)) {
$name = mime_header_encode($file->filename);
$type = mime_header_encode($file->filemime);
// Serve images and text inline for the browser to display rather than download.
$disposition = ereg('^(text/|image/)', $file->filemime) ? 'inline' : 'attachment';
return array(
'Content-Type: '. $type .'; name='. $name,
'Content-Length: '. $file->filesize,
'Content-Disposition: '. $disposition .'; filename='. $name
);
}
else {
return -1;
}
}
}
else {
return -1;
I'm very new to drupal and just trying to figure out how it works, bit by bit, so please try to bear with me :)
The page that I am hoping to create would have an intro-text (static text, for example welcoming user to the website), then some dynamic content (for example, latest posts to different categories).
Hi - I am a newbie to Drupal - and was recommended to use this software for a new site I am creating which is like a regional blog feed aggregator, I am starting off with 50 odd feeds, but the Aggregator module is too limited to offer any type of customization. I tried Aggregator2 module, like its detailed customization but when I try to add a feed this is the result I get
I've been playing around with the forums and deleted the forum vocab in the categories section as a result when i go to post i can't select the forum for the post to appear in
I have a structure like this
Forum Name (container)
--News(forum)
--Support(forum)
--Information(forum)
i'm trying to install the bluemarine_smarty theme. I've tried installing the smarty on my site at the root level as a test, and was able to get the php script that they supply in the quick install to work.
however, upon moving the smarty directory into the engines directory in drupal , and modifying the index.php doc to reflect the move, i'm unable to view the smarty based theme after uploading to the "themes" directory.
Here's what index.php look like. any suggestions would be greatly appreciated!!!! Thank you...
I have installed the gmap module without any problems but when I go to insert a new map there are no fields to insert a point/pin on the map. Can this be done in gmap for 4.6 or does it need version 7? Or is the filter not installed properly?