Restrict Media Server Error

Resolved Viv
(@vhelmig)

2 years, 6 months ago

Hi,
In Content Control Settings I added a restriction. For Content I have Posts with Cattery OR A Selected Page OR A Media with ID Restriction.

When I try to access the media file, a PDF file directly in the Browser I get an error.

Server Error
A potentially dangerous Request.Path value was detected from the client (<).

I do not see any “<” in my Restriction Rule. What I understand somewhere there is a “<” which could be the begin of a script and therefore the server sends an error. Any idea what goes wrong here?

Thank you 🙂

This version of the website is not live yet, therefore no link.
WordPress version: 6.1.1
PHP: 7.4.10
Windows Server 2019 with IIS
SQL Server 8.0.32

Viewing 5 replies - 1 through 5 (of 5 total)

Plugin Support Kim L
(@kimmyx)

2 years, 6 months ago

Hi @vhelmig,

Content Control restricts access to media at the content level via the media attachment pages. Content Control does not restrict access at the server level to actual media files (e.g.: .jpg, .gif, .pdf, and .webp files).

Nevertheless, if you could record a video of the error/issue you saw, you can also send it to us via Contact – Code Atlantic. Our developers are currently improving the plugin with more features and it may prove useful for us in the future.

Thank you!
Thread Starter Viv
(@vhelmig)

2 years, 6 months ago
I see. Thank you for your response. If you cannot restrict media direct access what or how do I use the Content Restriction “Is A Media..” then?
Thank you!
- This reply was modified 2 years, 6 months ago by Viv.
Plugin Support Kim L
(@kimmyx)

2 years, 6 months ago

Hi @vhelmig,

The restriction for the media will be at the content level via the media attachment pages.

Hope that helps!

Thread Starter Viv
(@vhelmig)

2 years, 6 months ago

Hi,

Thank you for your reply. Can you give me an example an media attachment page? I am accessing the media via http://ip-address/wp-content/uploads/year/month/filename.xlsx. Is there another way to access/restrict the file?

Thank you 🙂

Plugin Author Daniel Iser
(@danieliser)

2 years, 6 months ago

This should explain it better: https://www.hongkiat.com/blog/wordpress-attachment-pages/

That said v2 is very close to release, and there will be a pro version. It will not initially support blocking actual media access, but we are exploring several methods to handle that in the future.

The reason it doesn’t do it now, this was a very simple plugin initially and to block access in a way that respects the variety of dynamic settings we already offer would be very un-performant. In large sites it could lead to slow downs and reduction in server perfomance we found unacceptable.

As such it was never made a priority. Hope that helps.