By amrit_b on

Hi,

I have a Content Type with file upload field (UNLIMITED).. When a normal authenticated user creates a new node with that content type, he uploads some files. then, without saving the content, he leaves the page and goes to the home page. But, in my server, i have those files uploaded without any real nodes.

I have enabled CAPTCHA, but still the users can upload the files without any real verification. How to control this?

thnaks

⋅ Categories: Drupal 6.x

Comments

chrispeat’s picture

chrispeat commented

Could you contact the user? It seems very odd that someone would do this but if I think about it, its probably a common scenario...

Guesses would be to create a rule of some description, or a clean up module that would periodically check attachments against nodes and delete them. Dangerous in a high traffic site but might be OK otherwise...

amrit_b’s picture

amrit_b commented

there is not a single solution to this??

cant i remove the "upload" button?

anyway, i will do this manually.... But, what i think is to make the files non-down-loadable by unauthenticated users.. then users wont upload rubbish content..

And i tried to make the download method to "private". and created a new folder in /home/amrit/files (and my drupla site is in /home/amrit/WWW/prefinal6). then changed the file system path and temporary path to /home/amrit/WWW/files and /home/amrit/WWW/files/temp respectively..

Then created a new content and uploaded the files.. those files are still down-loadable by authenticated and unauthenticated users..

i am using Ubuntu 9 with apache virtual hosts. i have configured the virtual host root to /home/amrit/WWW/prefinal6..

PLZ HELP!!

thanks

amrit_b’s picture

amrit_b commented

ok.
Finally the private thing is working with attachments. but not with CCK file fields.

i have created a content type with both attachment enabled and CCK file field (unchecked- "view" file field for unauthenticated users). This is the situation:

AUTHENTICATED USER:
can view node-YES
can view attachment-YES
can view cck file field- YES
can download attachment-YES
can download cck file field-YES

UN-AUTHENTICATED USER:
can view node-YES
can view attachment-NO
can view cck file field- NO
can download attachment-NO
can download cck file field-YES (by the url). <<<<<<<<--------------------------------------------------------- How can i make it"NO"

thnaks