Password protect file download

net-carver · 2010-10-27 00:54:37

The solution seems to be really quite simple — and it doesn’t have to involve any paid-for software and can be done in Txp with one, existing, plugin.

Here’s how you do it…

Gocom was correct to suggest using a folder outside your site root. So, create your folder … let’s call it ‘myfiles’ outside your site root.
Go to admin > prefs > advanced and change the absolute path Txp is going to use for your files in File directory path to point to the ‘myfiles’ directory you just created. Files can no longer be directly downloaded from mysite.tld\files so no .htaccess tricks needed. mysite.tld\file_download is now the only way to get the files and we are about to add a lock to that door…
Grab, install and enable the ign_password_protect plugin. Switch it over to using its own tables and don’t let it authenticate against the Txp user table.
Upload all your files through the Txp files tab as usual — but notice with ign_password_protect you can now assign each file a permission. In Leo’s case he’d want to assign public files the permission called None and just one of the non-zero ‘Levels’ to be his ‘Board Only’ permissions before he saves anything that is for their eyes only.
All ‘eyes-only’ files should be added to a file category that you need to create called ‘Board-Only.’
Create logins for all the board members¹ and assign them privs to access the single ‘Board only’ permission you are using for their files.
Create a section called ‘Board-Only’, give it a whole page template if you want or just add a corresponding if_section conditional into the default page template.
Inside that section add the ign_password_protect tags that require board-members to login. See the plugin documentation for help with this.
Within the login tags, create your list of file download links that are of file category ‘Board-Only’

Tada! Legit board members should now be able to login to their private section and see the links to all files of category ‘board-only’. ign_password_protect should allow them to download the files via the links. Other, non-board visitors, even if they guess a board-only link, should no longer be able to download the file.

Here endeth the theory. I’ve checked out most of this but not everything suggested here — I leave that as homework for interested parties.

¹ Actually, Leo, I think you could probably get away with a single ‘Board’ login that all board members can share if you never need to make any further distinction between what different board members can download. This would simplify user management a little if there are a lot of folks on the board.

alanfluff · 2010-10-27 14:30:22

Steve, you are a gentleman and a scholar!

THANK you :D

Cheers, -Alan

net-carver · 2010-10-31 23:14:36

Leo, Alan

Did this work out for either of you? Please let me know if anything breaks down for you or if all goes well.

alanfluff · 2010-11-01 13:58:30

Hi Steve,

Sorry no f/b yet — the requirement is still in the offing, but not happened yet, but as soon as I have feedback I will certainly let you know.

Cheers, -Alan

phuture303 · 2012-08-12 09:22:22

net-carver schrieb:

The solution seems to be really quite simple — and it doesn’t have to involve any paid-for software and can be done in Txp with one, existing, plugin.

Well, this is what I’ve been searching for – a client wants exactly THIS, and it works perfectly. Many thanks!

Textpattern CMS

Textpattern CMS support forum

#13 2010-10-27 00:54:37

Re: Password protect file download

#14 2010-10-27 14:30:22

Re: Password protect file download

#15 2010-10-31 23:14:36

Re: Password protect file download

#16 2010-11-01 13:58:30

Re: Password protect file download

#17 2012-08-12 09:22:22

Re: Password protect file download

Board footer