[TYPO3-dev] secure downloads - css_styled_content

Georg Schönweger georg.schoenweger at gmail.com
Wed Jul 6 15:21:21 CEST 2011


Hi Mathias,

Am 06.07.2011 14:49, schrieb Mathias Schreiber [wmdb]:
> Do you have your extension (or access to the install) at hand?
> I have an idea what might be going wrong, but it is too complex to
> describe.
here it is;
http://kick.susi2.it/fileadmin/T3X_sni_t3uploads-0_0_0-z-201107061516.t3x
it is just ext_tables.(php|sql) .. do you need something else?
>
>> To summarize again;
>> I don't want to .htaccess protect (deny from all) "uploads/media/"
>> (which is the uploadfolder for all CE's - including "File Links")
>> because i think this can have bad side-effects (?)
>> In my extension i created a new field "my_field" which i add to
>> tt_content (TCA and SQL). "my_field" is the substitution for the
>> original "media" field used by "File Links" content element. This way i
>> can define an uploadfolder for "my_field" which is ONLY for "File Links"
>> content element. I can deny access now to this uploadfolder by using
>> .htaccess without any side effects...
>
> Good idea and I will dig into this.
> Strange thing is that normaly when CSC is instantiated the whole TCA
> (incl. your stuff) should be there.
>
> If for some reason it is not, we will tackle the bug down and slap the
> right person :)
> cheers
> Mathias
>
thanks,
Georg




More information about the TYPO3-dev mailing list