How do you set your file areas so that a web user, who is not logged in, cannot access the file areas? Currently, both the "classic" and the Webv4 interface allow anyone to access them. I only want people who are registered and logged in to be able to view them on the web.

Thanks!
#

---
■ Synchronet ■ CAPCITY2 * capcity2.synchro.net * Telnet/SSH:2022/Rlogin/HTTP

Re: Turn off File areas for web
By: Dumas Walker to All on Thu Jan 25 2024 12:51 pm

How do you set your file areas so that a web user, who is not logged in, cannot access the file areas? Currently, both the "classic" and the Webv4 interface allow anyone to access them. I only want people who are registered and logged in to be able to view them on the web.

Webv4 uses the "guest" account for unregistered users, so setting all your file libraries' access requirements to "Not guest" would achieve that. Or you can set them to "(prot not http and prot not https) or not guest" if you do want guest access to file areas when using other non-web protocols.
--
digital man (rob)

This Is Spinal Tap quote #10:
Dozens of people spontaneously combust each year... just not widely reported. Norco, CA WX: 61.6°F, 70.0% humidity, 3 mph WNW wind, 0.00 inches rain/24hrs ---
■ Synchronet ■ Vertrauen ■ Home of Synchronet ■ [vert/cvs/bbs].synchro.net

Re: Turn off File areas for web
By: Dumas Walker to All on Thu Jan 25 2024 12:51 pm

How do you set your file areas so that a web user, who is not logged in, cannot access the file areas? Currently, both the "classic" and the Webv4 interface allow anyone to access them. I only want people who are registered and logged in to be able to view them on the web.

Thanks!

i think you do set the security level so it's not guest.
---
■ Synchronet ■ ::: BBSES.info - free BBS services :::

On Thu, 25 Jan 2024 11:52:33 -0800
"Digital Man" (VERT) <VERT!Digital.Man@endofthelinebbs.com> wrote:

Re: Turn off File areas for web
By: Dumas Walker to All on Thu Jan 25 2024 12:51 pm

How do you set your file areas so that a web user, who is not
logged in, cannot access the file areas? Currently, both the
"classic" and the Webv4 interface allow anyone to access them. I
only want people who are registered and logged in to be able to
view them on the web.

Webv4 uses the "guest" account for unregistered users, so setting all
your file libraries' access requirements to "Not guest" would achieve
that. Or you can set them to "(prot not http and prot not https) or
not guest" if you do want guest access to file areas when using other
non-web protocols.

I think you can also edit /sbbs/webv4/pages/webctrl.ini and add

[*files.xjs]
AccessRequirements = NOT GUEST

I have something similar to stop non-guest users accessing games.
--
End Of The Line BBS - Plano, TX
telnet endofthelinebbs.com 23
---
■ Synchronet ■ End Of The Line BBS - endofthelinebbs.com

How do you set your file areas so that a web user, who is not logged in, cannot access the file areas? Currently, both the "classic" and the Webv4 interface allow anyone to access them. I only want people who are registered and logged in to be able to view them on the web.

Webv4 uses the "guest" account for unregistered users, so setting all your fil
libraries' access requirements to "Not guest" would achieve that. Or you can s
them to "(prot not http and prot not https) or not guest" if you do want gues
access to file areas when using other non-web protocols.

I just tested it on one library and it actually does not work. I set the access requirement to NOT GUEST in SCFG for the whole library. When I then surf to it, without being logged on, it still lets me access the library,
go to a file area, and download a file.

Nelgin's idea of putting it in the webctrl.ini file does seem to turn it completely off in Webv4, so I will use that.

I will play around with the other interface and see if I can figure out how
to turn it off there.


* SLMR 2.1a * Basic programmers never die, they gosub and don't return

---
■ Synchronet ■ CAPCITY2 * capcity2.synchro.net * Telnet/SSH:2022/Rlogin/HTTP

Dumas Walker wrote to All <=-

How do you set your file areas so that a web user, who is not logged
in, cannot access the file areas? Currently, both the "classic" and
the Webv4 interface allow anyone to access them. I only want people
who are registered and logged in to be able to view them on the web.

Thanks!
#

---
■ Synchronet ■ CAPCITY2 * capcity2.synchro.net * Telnet/SSH:2022/Rlogin/HTTP

Add a line to the \sbbs\webv4\pages\webctrl.ini file


[*files.xjs]
AccessRequirements = LEVEL XX AND REST NOT G

Where XX is the security level of your registered users

CJ


--- MultiMail/Win v0.52
■ Synchronet ■ CJ's Place, Orange City, FL - cjsplace.thruhere.net