1
ebridge2001
A bug about modules 'mydownloads'

xoops 2.0.6

mydownloads 1.1

in mydownloads admin panel "preferences" about

Disallow direct download linking? (leeching)

is to not show direct download linking;

but "Request Download Modification" of "Download URL: " show the direct download linking

so "Disallow direct download linking" is invalidated

2
Herko
Re: A bug about modules 'mydownloads'
  • 2004/5/26 7:17

  • Herko

  • XOOPS is my life!

  • Posts: 4238

  • Since: 2002/2/4 1


no, this is an anti-leeching feature. Leeching is when people link to your files and downloads from other sites, so not via your own site. To prevent this, it has a built-in check to see where the download request originates. If that is not your own site, then the download is not allowed. That's what this feature is for

herko

3
intel352
Re: A bug about modules 'mydownloads'
  • 2004/5/26 12:10

  • intel352

  • Module Developer

  • Posts: 824

  • Since: 2003/11/23


herko, he's saying that when someone modifies a file, it shows them the true url location, so then they can direct-link to the file. same problem exists with many *nuke download modules, and at my suggestion, several download-module developers updated their modules to *only* show the file location to the original submitter. that prevents someone just randomly clicking on Modify to see the real location. same thing should be done for MyDownloads.

4
intel352
Re: A bug about modules 'mydownloads'
  • 2004/5/26 12:13

  • intel352

  • Module Developer

  • Posts: 824

  • Since: 2003/11/23


ebridge, search on .htaccess protection, you can use .htaccess to *only* allow downloads of your direct files by people that have your site as their referer. it still doesn't block all leeching, but catches most, and is more secure than depending on a script to protect your files.

just a suggestion

5
Herko
Re: A bug about modules 'mydownloads'
  • 2004/5/26 12:31

  • Herko

  • XOOPS is my life!

  • Posts: 4238

  • Since: 2002/2/4 1


My bad! bd_csmc, can you see if this is something we need to do with the 2.1 beta version as well?

Herko

6
intel352
Re: A bug about modules 'mydownloads'
  • 2004/5/26 12:41

  • intel352

  • Module Developer

  • Posts: 824

  • Since: 2003/11/23


sure, i'll check when i get home tonight, where can i get the 2.1 beta? (btw, if anyone has 2.1 beta installed, to check you just have to click on Modify Download as a non-admin to see if it reveals the file location to the user)

7
Catzwolf
Re: A bug about modules 'mydownloads'
  • 2004/5/26 13:28

  • Catzwolf

  • Home away from home

  • Posts: 1392

  • Since: 2007/9/30


Quote:

bd_csmc wrote:
sure, i'll check when i get home tonight, where can i get the 2.1 beta? (btw, if anyone has 2.1 beta installed, to check you just have to click on Modify Download as a non-admin to see if it reveals the file location to the user)


This will not happen with the next version of my_downloads, as the next version will deal with files differently as before.

8
intel352
Re: A bug about modules 'mydownloads'
  • 2004/5/26 13:31

  • intel352

  • Module Developer

  • Posts: 824

  • Since: 2003/11/23


cool, glad to hear it catz


oh, btw guys, if i'm not approved for the dev site, i guess there's no notification? (re-submitted my application the other day)

Login

Who's Online

152 user(s) are online (81 user(s) are browsing Support Forums)


Members: 0


Guests: 152


more...

Donat-O-Meter

Stats
Goal: $100.00
Due Date: May 31
Gross Amount: $0.00
Net Balance: $0.00
Left to go: $100.00
Make donations with PayPal!

Latest GitHub Commits