How do you set your file areas so that a web user, who is not logged in, cannot access the file areas? Currently, both the "classic" and the Webv4 interface allow anyone to access them. I only want people who are registered and logged in to be able to view them on the web.

Thanks!
#

---
þ Synchronet þ CAPCITY2 * capcity2.synchro.net * Telnet/SSH:2022/Rlogin/HTTP

Re: Turn off File areas for web
By: Dumas Walker to All on Thu Jan 25 2024 12:51 pm

How do you set your file areas so that a web user, who is not logged in, cannot access the file areas? Currently, both the "classic" and the Webv4 interface allow anyone to access them. I only want people who are registered and logged in to be able to view them on the web.

Webv4 uses the "guest" account for unregistered users, so setting all your file libraries' access requirements to "Not guest" would achieve that. Or you can set them to "(prot not http and prot not https) or not guest" if you do want guest access to file areas when using other non-web protocols.
--
digital man (rob)

This Is Spinal Tap quote #10:
Dozens of people spontaneously combust each year... just not widely reported. Norco, CA WX: 61.6øF, 70.0% humidity, 3 mph WNW wind, 0.00 inches rain/24hrs ---
þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.net

Re: Turn off File areas for web
By: Dumas Walker to All on Thu Jan 25 2024 12:51 pm

How do you set your file areas so that a web user, who is not logged in, cannot access the file areas? Currently, both the "classic" and the Webv4 interface allow anyone to access them. I only want people who are registered and logged in to be able to view them on the web.

Thanks!

i think you do set the security level so it's not guest.
---
þ Synchronet þ ::: BBSES.info - free BBS services :::

On Thu, 25 Jan 2024 11:52:33 -0800
"Digital Man" (VERT) <VERT!Digital.Man@endofthelinebbs.com> wrote:

Re: Turn off File areas for web
By: Dumas Walker to All on Thu Jan 25 2024 12:51 pm

How do you set your file areas so that a web user, who is not
logged in, cannot access the file areas? Currently, both the
"classic" and the Webv4 interface allow anyone to access them. I
only want people who are registered and logged in to be able to
view them on the web.

Webv4 uses the "guest" account for unregistered users, so setting all
your file libraries' access requirements to "Not guest" would achieve
that. Or you can set them to "(prot not http and prot not https) or
not guest" if you do want guest access to file areas when using other
non-web protocols.

I think you can also edit /sbbs/webv4/pages/webctrl.ini and add

[*files.xjs]
AccessRequirements = NOT GUEST

I have something similar to stop non-guest users accessing games.
--
End Of The Line BBS - Plano, TX
telnet endofthelinebbs.com 23
---
þ Synchronet þ End Of The Line BBS - endofthelinebbs.com

Dumas Walker wrote to All <=-

How do you set your file areas so that a web user, who is not logged
in, cannot access the file areas? Currently, both the "classic" and
the Webv4 interface allow anyone to access them. I only want people
who are registered and logged in to be able to view them on the web.

Thanks!
#

---
þ Synchronet þ CAPCITY2 * capcity2.synchro.net * Telnet/SSH:2022/Rlogin/HTTP

Add a line to the \sbbs\webv4\pages\webctrl.ini file


[*files.xjs]
AccessRequirements = LEVEL XX AND REST NOT G

Where XX is the security level of your registered users

CJ


--- MultiMail/Win v0.52
þ Synchronet þ CJ's Place, Orange City, FL - cjsplace.thruhere.net

Add a line to the \sbbs\webv4\pages\webctrl.ini file

[*files.xjs]
AccessRequirements = LEVEL XX AND REST NOT G

Where XX is the security level of your registered users

Thanks!


* SLMR 2.1a * Do unto others BEFORE they do unto YOU.

---
þ Synchronet þ CAPCITY2 * capcity2.synchro.net * Telnet/SSH:2022/Rlogin/HTTP