Don't know whether anyone can help. I am specifying my file system path below the drupal root for security reasons (I'm building an intranet site) as, from what I have read, this is safer than having the folder above the drupal root and using .htaccess.
If I do this I need to have Download method set to 'Private'.

However, the WebFM documentation says I must have Download method set to 'Public' as WebFM handles private files itself.

I'm pretty adament now that I want the file system path outside of the drupal installation but if I set Download method to 'public', core upload and other modules won't function properly.

Is it so important for WebFM to have Download method set as 'Public'? It seems to function ok when I select 'Private' but don't know whether I am risking problems appearing later.

Comments

robmilne’s picture

robmilne commented
Status: Active » Postponed

At some point during 6.x dev the 'public/private' setting in .../admin/settings/file-system became irrelevant to the module. My original intention was to place it outside of webroot for greater security but time constraints sidelined that effort. I may get around to it some day.

dleeward’s picture

dleeward commented

Does 5.x support private downloads yet?

nhck’s picture

nhck commented
Status: Postponed » Closed (fixed)

I am afraid we ceased support for webfm-5.x, however we are currently testing a patch to allow the download mode to be set to private: #591144: Implement hook_file_download