Solution to protect files

[denkstream]

Hey everyone,

I’ve implemented this solution to protect pages, it works very well. But the files are still accessible if you have a URL.

What would be the best way to implement file protection so that only logged in users can access them?

This is how the pages where the files are stored look like (simplified structure):

- home
- datenbank
-- urlaubsantrag
--- document.txt
--- urlaubsantrag.docx
-- zwischenbericht
--- document.txt
--- zwischenbericht.docx
-- abschlussbericht
--- document.txt
--- abschlussberich.docx

[texnixe]

See Protecting files behind a firewall | Kirby CMS

[denkstream]

This is the first thing I tried, but then I noticed that there are no templates assigned to files. For example, in the cookbook, files with template protected are filtered.

I have about 900+ files that are grandfathered from Kirby 2 and therefore have no file template attached to them.

The strucutre is one subpage with page template document, and file linked in field, this is how document.txt file looks like for this folder:

...
-- urlaubsantrag
--- document.txt
--- urlaubsantrag.docx

// document.txt content

Title: Urlaubsantrag
----
Documentselect: urlaubsantrag.docx

[denkstream]

I read this topic:

How to block access to files

The problem here is that you want to apply the protected files to all pages, not a specific page like in the recipe. Therefore, you need something in your file route, that let’s you differentiate between a page and a file. The easiest way to achieve this, is to use a string between the page id and the filename in the file url: Kirby::plugin('cookbook/files-firewall', [ 'components' => [ 'file::url' => function ($kirby, $file) { return $kirby->url() . '/' . $file->parent()->id() . …

and this helped definitely