Welcome! Log In Create A New Profile

Advanced

Re: Prevent direct access to files but allow download from site

March 13, 2020 09:20AM
I managed to solve using cookies, but as you said, it is not secure. Although I have no experience, I managed to bypass the control.
Maybe it's not the safest way like I did, in any case it is not recommended to proceed in this way.

I have experience with auth_basic, but using the terminal to create user and password and to grant access.

Too many different information in this topic that I have opened, my fault, I want to simplify it.

I know I previously said I wanted to avoid using Curl, but
I would like to understand the mechanism.

Imagine that the user logs in and i provide him an url, for example:

curl -u {{user.id}}:{{unique_value}} https://domain.com/assets/file/test.txt

Or

curl -O https://domain.com/assets/file/test.txt?param={{unique_value}}

How can I find out with Nginx if the username and password are real or that the user/unique_value is still active?
Should I somehow access the database or am I wrong?
Subject Author Posted

Prevent direct access to files but allow download from site

MAXMAXarena March 11, 2020 06:36PM

Re: Prevent direct access to files but allow download from site

Ralph Seichter March 11, 2020 06:58PM

Re: Prevent direct access to files but allow download from site

gariac March 11, 2020 08:46PM

Re: Prevent direct access to files but allow download from site

MAXMAXarena March 11, 2020 09:23PM

Re: Prevent direct access to files but allow download from site

gariac March 11, 2020 10:20PM

Re: Prevent direct access to files but allow download from site

MAXMAXarena March 12, 2020 05:49AM

Re: Prevent direct access to files but allow download from site

Ralph Seichter March 11, 2020 10:22PM

Re: Prevent direct access to files but allow download from site

MAXMAXarena March 12, 2020 05:47AM

Re: Prevent direct access to files but allow download from site

j94305 March 11, 2020 10:36PM

Re: Prevent direct access to files but allow download from site

MAXMAXarena March 12, 2020 07:42AM

Re: Prevent direct access to files but allow download from site

j94305 March 12, 2020 06:03PM

Re: Prevent direct access to files but allow download from site

MAXMAXarena March 13, 2020 09:20AM

Re: Prevent direct access to files but allow download from site

lsces April 05, 2020 11:42AM

Re: Prevent direct access to files but allow download from site

J.R. March 12, 2020 12:02PM

Re: Prevent direct access to files but allow download from site

MAXMAXarena March 12, 2020 01:12PM

RE: Prevent direct access to files but allow download from site

Reinis Rozitis March 12, 2020 06:32PM

Re: Prevent direct access to files but allow download from site

Ralph Seichter March 12, 2020 08:18PM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 97
Record Number of Users: 6 on February 13, 2018
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready