direct file-access still possible - media folder

[demlak]

if one has the direct url of any file inside protected sites, one is able to access it without login.
Maybe it is possible to extend a controller or route or something to catch also the coresponding parts inside media-folder? (i'm not a coder 😄 )

[kerli81]

I will have a look if it is possible to restrict also the media folder. Give me some time!

[demlak]

thx a lot..
maybe this helps?
https://forum.getkirby.com/t/protect-files-media/16179
those two threads are also related:
https://forum.getkirby.com/t/image-urls-how-to-remove-string/13153/6
https://forum.getkirby.com/t/disabling-media-generation-for-specific-files/13010

[kerli81]

Kirby version 3.5.0 will have a nice new feature according to the roadmap. I will wait for it until i will further investigate this issue.
new feature: getkirby/kirby#2646

[kerli81]

As the Feature is postponed to 3.6.0 i will wait fixing this issue