Welcome to the LimeSurvey Community Forum

Ask the community, share ideas, and connect with other LimeSurvey users!

Protect access to resource file with survey's token

  • jeremyp
  • jeremyp's Avatar Topic Author
  • Offline
  • New Member
  • New Member
More
4 years 10 months ago #184949 by jeremyp
Hello,

The files positioned in resources are not visible from the other Survey but are accessible from the url if one knows the sid of the survey and the name of the file.
Is there a plugin able to limit access to these resources by asking first to re-enter the token used to launch the survey?

Or a similary concept to protect our uploaded files ?

Many thanks
The topic has been locked.
  • DenisChenu
  • DenisChenu's Avatar
  • Offline
  • LimeSurvey Community Team
  • LimeSurvey Community Team
More
4 years 10 months ago #184952 by DenisChenu
For apache :
github.com/LimeSurvey/LimeSurvey/commit/...eeb5941a0cc5c952fbdb

For nginx
Code:
location ~ ^/upload/surveys/.*/fu_[a-z0-9]*$ { 
    return 444;
  }

For IIS ?
Didn't know …

You can not currently use a plugin to disable access of a single file.


In fact : i think there are a featire request to use another directory for uploaded files (then can be out of web access).

Assistance on LimeSurvey forum and LimeSurvey core development are on my free time.
I'm not a LimeSurvey GmbH member, professional service on demand , plugin development .
I don't answer to private message.
The topic has been locked.

Lime-years ahead

Online-surveys for every purse and purpose