UBB.Developers Forums UBB.threads 7 Development How Do I? Upload feature in threads v6.x

Not sure if there is a way to secure file attachments in threads. Are there other methods one can use should a user know the filename and webfolder where attachments are uploaded to? Can the upload folder be placed outside the web tree and still work with threads... or has there been a feature added to the current version to handle this?

The upload folder has to be within the web document tree. I agree that it should be possible to locate it anywhere.

Would it be possible to modify the attachment.php file... have it tweaked to work similar to the session function since its able to store files outside of the web document tree? Sounds easy in writing but has anyone attempt this or is there another method?

Storing the uploaded file outside the web document tree would be the easy part. That shouldn't require any changes to the script.

download.php would have to be changed to read the attachment file, and then output it to the browser. This would be a simple change. It might not work on all servers, since PHP might not be configured to be able to read files outside the script directory. And to get it to work with all browsers, you might have to explicitly specify some of the headers, such as the MIME type.

Dave_L,

I am not sure I understand you about the MIME type. Would you enlighten me with an example please...

Thanks.