[wp-edu] Making media library files private

[Slade, Mark]

David,

This is correct - our ACL plugin generates .htaccess files for ACL'd media.  However I should point out that this works in our case because we also bypass ms-files.php for serving uploads, and let Apache serve files directly.  If your uploads are coming from ms-files.php (typical behavior), I don't think this approach would work without a new hook in ms-files.php to test access to the file being requested.

Mark

> -----Original Message-----
> From: wp-edu-bounces at lists.automattic.com [mailto:wp-edu-
> bounces at lists.automattic.com] On Behalf Of Bill Dennen
> Sent: Monday, March 05, 2012 9:31 AM
> To: wp-edu at lists.automattic.com
> Subject: Re: [wp-edu] Making media library files private
> 
> <snip> 
> Boston University has written some custom code to do this -- I believe it
> writes htaccess files to protect media uploads. You can see their
> documentation (but not their code), here for some ideas:
> 
> http://www.bu.edu/tech/web/departments/wordpress/management/acce
> ss/content-protection/
> 
> -Bill
> 
> 
> On Mon, Mar 5, 2012 at 9:24 AM, Grogan, David <David.Grogan at tufts.edu>
> wrote:
> > Hello all,
> >
> > We have a large multi-site instance of WP 3.3.1 and although you can make
> your WordPress site private to individual named accounts (e.g. try accessing
> http://sites.tufts.edu/dgtest) it's really only the posts and pages content that
> is private. Any content uploaded to the sites Media Library (e.g. documents,
> images, audio etc) is still publicly accessible (e.g. try accessing:
> http://sites.tufts.edu/dgtest/wp-
> content/blogs.dir/856/files/2012/03/FCKeditor.png).
> >
> > Has anyone come across a solution that will provide privacy to the media
> library files?
> >
> > David
> >
> > --------------------------------------------------------------
> > David Grogan
> > Senior Solutions Specialist
> > Educational & Scholarly Technology Services (ESTS) University
> > Information Technology (UIT) Tufts University
> > 108 Bromfield Rd
> > Somerville, MA  02144
> >
> > Phone: 617.627.2859
> > Fax: 617.627.3082
> >
> > http://uit.tufts.edu/at/
> > http://sites.tufts.edu/davidgrogan
> >
> >
> >
> >
> > _______________________________________________
> > wp-edu mailing list
> > wp-edu at lists.automattic.com
> > http://lists.automattic.com/mailman/listinfo/wp-edu
> _______________________________________________
> wp-edu mailing list
> wp-edu at lists.automattic.com
> http://lists.automattic.com/mailman/listinfo/wp-edu