1. Forum
  2. DOVE-Net
  3. Synchronet Discussion

  • Turn off File areas for web

    From Dumas Walker@CAPCITY2 to All on Thu Jan 25 12:51:19 2024
    How do you set your file areas so that a web user, who is not logged in, cannot access the file areas? Currently, both the "classic" and the Webv4 interface allow anyone to access them. I only want people who are registered and logged in to be able to view them on the web.

    Thanks!
    #

    ---
    ■ Synchronet ■ CAPCITY2 * capcity2.synchro.net * Telnet/SSH:2022/Rlogin/HTTP
  • From Digital Man to Dumas Walker on Thu Jan 25 11:52:33 2024
    Re: Turn off File areas for web
    By: Dumas Walker to All on Thu Jan 25 2024 12:51 pm

    How do you set your file areas so that a web user, who is not logged in, cannot access the file areas? Currently, both the "classic" and the Webv4 interface allow anyone to access them. I only want people who are registered and logged in to be able to view them on the web.

    Webv4 uses the "guest" account for unregistered users, so setting all your file libraries' access requirements to "Not guest" would achieve that. Or you can set them to "(prot not http and prot not https) or not guest" if you do want guest access to file areas when using other non-web protocols.
    --
    digital man (rob)

    This Is Spinal Tap quote #10:
    Dozens of people spontaneously combust each year... just not widely reported. Norco, CA WX: 61.6°F, 70.0% humidity, 3 mph WNW wind, 0.00 inches rain/24hrs
  • From MRO@BBSESINF to Dumas Walker on Thu Jan 25 13:24:52 2024
    Re: Turn off File areas for web
    By: Dumas Walker to All on Thu Jan 25 2024 12:51 pm

    How do you set your file areas so that a web user, who is not logged in, cannot access the file areas? Currently, both the "classic" and the Webv4 interface allow anyone to access them. I only want people who are registered and logged in to be able to view them on the web.

    Thanks!

    i think you do set the security level so it's not guest.
    ---
    ■ Synchronet ■ ::: BBSES.info - free BBS services :::
  • From nelgin@EOTLBBS to All on Thu Jan 25 14:22:56 2024
    On Thu, 25 Jan 2024 11:52:33 -0800
    "Digital Man" (VERT) <VERT!Digital.Man@endofthelinebbs.com> wrote:

    Re: Turn off File areas for web
    By: Dumas Walker to All on Thu Jan 25 2024 12:51 pm

    How do you set your file areas so that a web user, who is not
    logged in, cannot access the file areas? Currently, both the
    "classic" and the Webv4 interface allow anyone to access them. I
    only want people who are registered and logged in to be able to
    view them on the web.

    Webv4 uses the "guest" account for unregistered users, so setting all
    your file libraries' access requirements to "Not guest" would achieve
    that. Or you can set them to "(prot not http and prot not https) or
    not guest" if you do want guest access to file areas when using other
    non-web protocols.

    I think you can also edit /sbbs/webv4/pages/webctrl.ini and add

    [*files.xjs]
    AccessRequirements = NOT GUEST

    I have something similar to stop non-guest users accessing games.
    --
    End Of The Line BBS - Plano, TX
    telnet endofthelinebbs.com 23
    ---
    ■ Synchronet ■ End Of The Line BBS - endofthelinebbs.com
  • From Dumas Walker@CAPCITY2 to DIGITAL MAN on Fri Jan 26 09:42:00 2024
    How do you set your file areas so that a web user, who is not logged in, cannot access the file areas? Currently, both the "classic" and the Webv4 interface allow anyone to access them. I only want people who are registered and logged in to be able to view them on the web.

    Webv4 uses the "guest" account for unregistered users, so setting all your fil
    libraries' access requirements to "Not guest" would achieve that. Or you can s
    them to "(prot not http and prot not https) or not guest" if you do want gues
    access to file areas when using other non-web protocols.

    I just tested it on one library and it actually does not work. I set the access requirement to NOT GUEST in SCFG for the whole library. When I then surf to it, without being logged on, it still lets me access the library,
    go to a file area, and download a file.

    Nelgin's idea of putting it in the webctrl.ini file does seem to turn it completely off in Webv4, so I will use that.

    I will play around with the other interface and see if I can figure out how
    to turn it off there.


    * SLMR 2.1a * Basic programmers never die, they gosub and don't return

    ---
    ■ Synchronet ■ CAPCITY2 * capcity2.synchro.net * Telnet/SSH:2022/Rlogin/HTTP
  • From CJ@CJSPLACE to Dumas Walker on Fri Jan 26 13:39:00 2024
    Dumas Walker wrote to All <=-

    How do you set your file areas so that a web user, who is not logged
    in, cannot access the file areas? Currently, both the "classic" and
    the Webv4 interface allow anyone to access them. I only want people
    who are registered and logged in to be able to view them on the web.

    Thanks!
    #

    ---
    ■ Synchronet ■ CAPCITY2 * capcity2.synchro.net * Telnet/SSH:2022/Rlogin/HTTP


    Add a line to the \sbbs\webv4\pages\webctrl.ini file


    [*files.xjs]
    AccessRequirements = LEVEL XX AND REST NOT G

    Where XX is the security level of your registered users

    CJ


    --- MultiMail/Win v0.52
    ■ Synchronet ■ CJ's Place, Orange City, FL - cjsplace.thruhere.net