New Foswiki release 2.1.6 is available with important security fixes.
Sourceforge foswiki email lists being discontinued. Subscribe to the new Foswiki announce and discuss lists at MailingLists
TIP SecureDownloadPlugin is not installed on


Secure, temporary download links

This plugin is inspired by mod_secdownload of Lighttpd. It creates a secure download area only accessible via unique download URLs that only remain valid for a specified time. This is most convenient when protecting downloadable resources with a registration form that has to be filled out before access to them is granted.


You type:


You get:

%IMAGE{ "zoology_nasc_bc.jpg" topic="System.SecureDownloads" size="200" href="%SECURL{"zoology_nasc_bc.jpg"}%" }%

Installation Instructions

You do not need to install anything in the browser to use this extension. The following instructions are for the administrator who installs the extension on the server.

Open configure, and open the "Extensions" section. Use "Find More Extensions" to get a list of available extensions. Select "Install".

If you have any problems, or if the extension isn't available in configure, then you can still install manually from the command-line. See for more help.

Before using this plugin make sure you properly configured it:

  1. Make sure your web-server has got the xsendfile protocol activated. See also Foswiki:Extensions/XSendFileContrib
  2. Specify a secure download area in Foswiki::cfg{SecureDownloadPlugin}{DownloadArea}
  3. make sure the download area is VIEW restricted
  4. Configure the timespan that a download url is valid in $Foswiki::cfg{SecureDownloadPlugin}{Timeout}
  5. Config a secret to be added to the download token in $Foswiki::cfg{SecureDownloadPlugin}{Secret}
  6. Optionally sepcify a topic or url in $Foswiki::cfg{SecureDownloadPlugin}{Redirect} to redirect to once a download token expired



Change History

08 Jun 2016 initial release
Topic revision: r1 - 08 Jun 2016, MichaelDaum - This page was cached on 21 Mar 2018 - 06:29.

The copyright of the content on this website is held by the contributing authors, except where stated elsewhere. See Copyright Statement. Creative Commons License