TIP SecureDownloadPlugin is not installed on Foswiki.org.

SecureDownloadPlugin

Secure, temporary download links

This plugin is inspired by mod_secdownload of Lighttpd. It creates a secure download area only accessible via unique download URLs that only remain valid for a specified time. This is most convenient when protecting downloadable resources with a registration form that has to be filled out before access to them is granted.

Examples

You type:

%IMAGE{
   "zoology_nasc_bc.jpg" 
   topic="%SYSTEMWEB%.SecureDownloads" 
   size="200" 
   href="%SECURL{"zoology_nasc_bc.jpg"}%"
}%

You get:

%IMAGE{ "zoology_nasc_bc.jpg" topic="System.SecureDownloads" size="200" href="%SECURL{"zoology_nasc_bc.jpg"}%" }%

Installation Instructions

You do not need to install anything in the browser to use this extension. The following instructions are for the administrator who installs the extension on the server.

Open configure, and open the "Extensions" section. Use "Find More Extensions" to get a list of available extensions. Select "Install".

If you have any problems, or if the extension isn't available in configure, then you can still install manually from the command-line. See http://foswiki.org/Support/ManuallyInstallingExtensions for more help.

Before using this plugin make sure you properly configured it:

  1. Make sure your web-server has got the xsendfile protocol activated. See also Foswiki:Extensions/XSendFileContrib
  2. Specify a secure download area in Foswiki::cfg{SecureDownloadPlugin}{DownloadArea}
  3. make sure the download area is VIEW restricted
  4. Configure the timespan that a download url is valid in $Foswiki::cfg{SecureDownloadPlugin}{Timeout}
  5. Config a secret to be added to the download token in $Foswiki::cfg{SecureDownloadPlugin}{Secret}
  6. Optionally sepcify a topic or url in $Foswiki::cfg{SecureDownloadPlugin}{Redirect} to redirect to once a download token expired

Dependencies

NameVersionDescription
File::MMagic>0Required
Foswiki::Contrib::XSendFileContrib>0Optional

Change History

08 Jun 2016 initial release
Topic revision: r1 - 08 Jun 2016, MichaelDaum - This page was cached on 19 May 2017 - 00:22.

The copyright of the content on this website is held by the contributing authors, except where stated elsewhere. See Copyright Statement. Creative Commons License