Hi, I have recently found an issue on my DNN portal. My scenario as below.

1. I created a page which only allow to access by Registered user. All my contents including images and file was uploaded to a folder in my DNN site. This folder was granted view permission to Registered user only.

2. I tested a scenario to copy the URL of my image on this page and paste on a browser after I logout from my website. However, I still able to view the image eventhough I'm not login. However, if I copy URL of a file link from this page, I not manage to view it without login.

So, now the question is, is there anyway for us to block unauthenticated user to view the images which stored in a folder which only granted view permission to Registered user only? 

Kindly advise. FYI, my version not updated, it was version 5.0.1

Regards,
Tan

DNN file system comes with 3 default folder providers: unsecure (default), Secure and database. files in unsecure folders may be retrieved by using the URL, they are delivered by the webserver without DNN involved. files in secure and database folders are accessed via LinkClick.aspx handler only after performing a permission check.

---

Cheers from Germany,
Sebastian Leupold

   

Speed up your DNN Websites with TurboDNN

If it's an issue for TEXT/HTML module image gallery to read images from secured file system, is there any workaround solution which allow us to configure or display image from the secured folder?

Other than that, is there any idea whether we can control the file access from the server instead of putting the images into the secured file system?

Hope to get your reply a.s.a.p. Thanks.