Security question

[alexpr25]

I just create a form where is possible to upload clients applications in .pdf. there a way that we can restrict that document to be accessible only in the app created in wappler or something like that, in order to avoid that if someone type the all route in the browser gets the document.?
Thanks

[max_gb]

If you’re on apache you can set a .htaccess rule to prevent browsing in a directory. For example to secure a folder called ‘secure’…

RewriteEngine On
RewriteRule .*secure.* / [NC,F]

You can then use the file download feature within a server action to download the required files, you can also add the security restrict function too.

[Teodor]

Please check:

Securing files in a folder so they can only be accessed by logging in

@sitestreet You can disable directory listing and accessing the files via direct link using .htaccess so it will never be possible to access a file using its link even for logged in users. You then allow access to the files from your web server only. Then you can create a server action which dowloads the file(s) and protect it using security restrict, so only logged users can run it. Run in on button click.

[alexpr25]

Thanks so much. I will work on it and lets all to know is everything is ok
Thanks