How to protect uploaded files?

[BruceX]

Hi, in my new file upload page, I wish to allow Users to view files online without downloading. This works very easily for PDF files by linking to a URL directly to the PDF or image file. Other files automatically download.

But this amounts to a security hole, that anyone can use a simple URL to access what maybe confidential uploaded files.

I have modified the .htaccess to stop (i thought) unauthorised access to files of the website, and that works mostly. Are there any suggestions on how to plug this hole?

Ideally, I would like the users to online view a PDF or image via a Wappler component, utilising Wappler’s security measures. Is there such a one?

[Teodor]

So you want to disable direct links to your site files? I.e. if someone enters htrps://mysite.com/files/file.pdf then they can’t see the file?
Is that what are you trying to achieve?

[BruceX]

Exactly, still to be able to view it via a wappler page somehow.

[Teodor]

This has been discussed a few times in our community already. For example:

Securing files in a folder so they can only be accessed by logging in

I need to make sure a folder containing files can only have its contents accessed by logged in users. I posted on another thread here: https://community.wappler.io/t/secure-file-download-from-a-path-outside-of-website-root/4765/49?u=sitestreet Can anyone help me achieve this the best way in Wappler?