WP Photo Seller – How to deny access to photo files

[arquip01]

When I go to the photo detail page, I can see the file name, for example, I can see “photo123” for the file “photo123.jpg”.

If I got to “mydomanin.com/photo123” the browser go to the following address: mydomain.com/wp-content/uploads/wp_photo_seller/16/9dw5zgy44j/photo123.jpg and show the photo with full resolution and without watermark. From here you can download the photo with no problem.

I tried to deny access to jpg files using the “.htaccess” file in the “wp_photo_seller” folder. using the following code:

Order deny,allow

Deny from all

<Files ~ “.(xml|css|js|jpeg|png|gif|pdf|zip|rar)$”>

Allow from all

</Files>

However, after this, the images in the galleries do not show, so I delete this code.

Then I try the following code in the same file:

Options All -Indexes

Now, I cannot see the wp_photo_seller folders, but if I enter to “mydomanin.com/photo123” I still see the photo in full resolution with no watermark.

Please, could you help me with this

[admin]

Our plugin creates a .htaccess file for the “…uploads/wp_photo_seller” folder when you activate the plugin. That does the protection that you are not trying to do manually. You may have deleted that file on your site.

This is a file that our pluign needs to create so it can put all the correct directives in there.

Do the following:

– FTP to your server and go to the uploads/wp_photo_seller directory

– Delete the .htaccess file

– From the WP admin panel deactivate the photo seller plugin

– Then reactivate the plugin.

Doing the above steps will create a new .htaccess file in the uploads/wp_photo_seller directory with the correct directives and parameters to protect the images.

[admin]

I have sent you an email to arrange access so I can check the setup.

[arquip01]

Hi,

I’ve been talking to my hosting provider this problem and we notice that this just happen with the photos that I upload to a WPS gallery.

Actually, in the gallery folder you find 3 files of the same picture:

image.jpg

image-150×150.jpg

image-300×300.jpg

If I type the following url’s:

mydomain.com/image-150×150 or mydomain.com/image-300×300, I got a 404 message.

However, If I type mydomain.com/image I got the full resolution of the image with no watermark and in the url field I can see the following url: mydomain.com/wp-content/uploads/wp_photo_seller/15/zyf2lkdh5f/image.jpg

Why three files in the same folder, have different behaviors about the access?

15: Gallery number

zyf2lkdh5f: a random folder name that the plugin generate.

I also show them the code in the .htaccess file on the /wp_photo_seller/ folder and they said that there is no code for blocking access, they try adding some code there and it works with no problem.

One more thing, In the backend, if I go to gallery and click on “edit” in any photo, you can see above the photo a title that says “Permanent Link: my domain.com/image/”

[admin]

The following is not a standard behavior of a WP site. This is something very specific to your site only.

If I type mydomain.com/image I got the full resolution of the image

That URL is supposed to give you a 404 error since that is NOT the real URL of the image. Somehow these things are mapped on your site with some kind of redirection. So specifically ask your hosting provider why that particular behavior is happening. Once that is resolved, I can investigate more to see if anything else need correction.

[arquip01]

I will send you the screen shot of the permanent link in the edit section to your email.

When I saw this link, I realized the problem. This link is not generated by the server.

[Author]

Posts