Products

Solutions

Resources

Partners

Community

Blog

About

QA

Ideas Test

New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen

HomeHomeDNN Open Source...DNN Open Source...Module ForumsModule ForumsForm and ListForm and ListImages in a UDT and securityImages in a UDT and security
Previous
 
Next
New Post
5/1/2008 9:50 AM
 
Thanks Sebastian, that is an answer that makes sense to me and verified what I was hoping.
So if we where to use ambiguous file names for our images (e.g. GUIDs) then the only way the “public” would be able to retrieve the file would be via a link given to them by an authorized user who retrieved that link by viewing the html source while the row(s) was displayed in the table. It would simply be too difficult and time consuming to attempt some type of automated probing for file names.
Is my logic sound?
This seems analogous to a friend giving an unlisted phone number to a 3rd party. What can you do other than hold your friend accountable.
 
New Post
5/1/2008 10:42 AM
 

James Hall wrote

2 follow-up questions:
1)      Why aren’t images stored in a secure folder?

Sorry for jouning this thread so late. At the time of creation of the image and the URL datatype, secure file storage did simply not exist in side DotNetNuke. Both data types were used to store the path to files internally.

After "secure storage" was introduced, the UserDefinedTable project had been the first module that was able to support also secure folders as storage option..We did that by introducing the new datatype "Download". As there is no easy and reliable upgrade path from pathes to fileIds just by using Sql, the old types remained untouched. 

Even if we  knew a way, we would not recommend that and use it for images - it is a real performance brake.

Now here is the good news: If you need secure storage for your images, it is already possible! 

  1. Add a column "_Picture" of datatype download. disable visible for that column.
  2. Add a column "Picture" of datatype calculated column. Enter '<img src="'+[_Picture_UDT_Url] + '" />' as expression..

I hope that helps.

 
New Post
5/1/2008 10:53 AM
 

James Hall wrote

This seems analogous to a friend giving an unlisted phone number to a 3rd party. What can you do other than hold your friend accountable.

yes, while secure folders are like requesting a caller first to enter a security code to get connected to you. 


Cheers from Germany,
Sebastian Leupold

dnnWerk - The DotNetNuke Experts   German Spoken DotNetNuke User Group

Speed up your DNN Websites with TurboDNN
 
New Post
5/6/2008 12:40 AM
 
Stefan
I see what you’re getting at, but I don’t see exactly how the expression in the calculated column displays a graphic. Could I impose on you to explain a little more and provided an example of the result of the calculated column.
 
New Post
5/6/2008 12:49 AM
 

UDT generates some hidden columns following a naming convention. If you have a column XYZ with the datatype download, there will be a hidden column XYZ_UDT_Url containing only the url. Hidden columns are usefull inside calculated columns or in XSLT. There is a help link hidden columns inside manage udt which is available while you edit a column. Please refer also the documentation for more information.

 
Previous
 
Next
HomeHomeDNN Open Source...DNN Open Source...Module ForumsModule ForumsForm and ListForm and ListImages in a UDT and securityImages in a UDT and security


These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out