- This topic has 4 replies, 2 voices, and was last updated 11 years, 9 months ago by
.
-
Posts
-
Hi Michael,
This is my first time here, and my first day setting up your plugin.
I am using it to list and download files according to which user is logged on. I have created a set of articles in a category each with an instance of the plugin pointing to a different folder. The menu item is a category blog and as each articles has different access levels, it only ever show one article with a separate file table for each logged in user.
Having got it working on a DEV site fine, but duplicated the setup on a LIVE server (same host, different physical server) and the lists are fine but when I click on a download icon, I get this:
Forbidden
You don’t have permission to access /plugins/content/easyfolderlistingpro/eflp_files/download.php on this server.
Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.
The plugin settings are exactly the same on both servers. The message suggests permissions in the plugin setup rather than the files themselves.
Can you help?
Sorry it’s Friday evening but I promised to get it working today …
Regards,
Simon
@simonw. Thanks for posting. From what you explain, it seems that there is a settings issue with your .htaccess file that blocks access to the download.php file that the plugin uses. You may have to alter the .htaccess at the root of your joomla installation. However, this depends on how the .htaccess was set. Some Joomla installations have this setup built in. However, I am just speculating based on what you explain, and my past experience with similar issues.
In reference to listing files for specific users, you don’t need to have multiple articles for each folder. I have setup a built-in feature that allows you to use a single instance of the plugin that points to a folder location with folders of usernames. So, when that user logs in, they will only see the files in their folder. You can enable this feature from the Plug-ins Manager.
Hi Michael,
Many thanks for the prompt response.
What am I looking for in the .htaccess? Here it is:
Options +FollowSymLinks
RewriteEngine On
RewriteCond %{QUERY_STRING} base64_encode[^(]*([^)]*) [OR]
RewriteCond %{QUERY_STRING} (<|%3C)([^s]*s)+cript.*(>|%3E) [NC,OR]
RewriteCond %{QUERY_STRING} GLOBALS(=|[|%[0-9A-Z]{0,2}) [OR]
RewriteCond %{QUERY_STRING} _REQUEST(=|[|%[0-9A-Z]{0,2})
RewriteRule .* index.php [F]
RewriteRule .* – [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]
RewriteCond %{REQUEST_URI} !^/index.php
RewriteCond %{REQUEST_URI} /component/|(/[^.]*|.(php|html?|feed|pdf|vcf|raw))$ [NC]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule .* index.php [L]
I missed the option to turn on your built-in user permissions. Have you got a FAQ/Doc on that on your site?
Your plugin is brilliantly simple – thanks!
Regards,
Simon
@simonw. I am not an expert on htaccess files. However, here are a couple of resources that may assist you:
Hi Michael,
Thanks for getting back to me on a weekend.
I reported the issue to my hosting company who solved it quickly. For your information they said it was –
“your get request is tripping out some of the mod_security rules for remote file inclusion”.
When I asked for more details to report back here they sent me this –
“The ruleset is the same [across the two servers] however because you’re calling by different name, domain, and get-string values some sites may match and some not; we recommend that data be passed via POST for cleaner operation, generally.”
Thanks for your help again.
Simon
PS I can highly recommend my hosting company for their excellent support – http://www.5quidhosting.co.uk
- The topic ‘Permission errors when downloading a file.’ is closed to new replies.