WPIntell

Source evidence

images acessible from public

ELEX WordPress HelpDesk & Customer Ticketing System · support · 2022-02-15T15:43:00+00:00

complaintsentiment
highseverity
0.96relevance
3replies
Evidence linked to opportunitycommercial context

Proof Health

Open evidence

Commercial opportunities need traceable source links before they are treated as build-worthy.

5 / 30 rows with source links

16.7% of this page's analysis has direct source links.

0 build-decision rows missing links

0 rows here require auditable proof before promotion.

25 rows with no attached evidence

0 rows have source counts but still need direct links.

Conversation

support
Antonio Augusto unresolved
I do not agree the plugin policy for to allow change upload folder in the pro version only. First because the images is accessible from public. Second because the images isn’t deleted with the post delete. Third because the uploads folder keeps a mess. Please a option to save images inside email or, if it is not possible, to allow change the folder. Keep in mind that an email server isn’t the same power (and storage) of a wordpress server. Could be a cost. I also didn’t understand what the plugin meant with “Enabling HTML option may lead to security issues. Resolving such issues are out of the scope of WSDesk plugin, hence we do not recommend this option.” Thank you, the plugin is amazing Hello @antonio24073 , Thanks for trying our plugin and sharing the feedback. Your suggestion to add the custom folder feature in the basic version will be discussed with our product team. The option to delete the attachment link once the ticket has been deleted will be added in the future release of the plugin. Regarding the HTML warning, There were a few use cases where HTML tags in the spam emails created issues with the ticket scripting. That’s why we show warnings before enabling the HTML option. Hope that explains. Hi, I’m trying to block uploads folder from direct access without success #ini allow uploads to my domain only location ^/wp\-content/uploads/$ { valid_referers mysite.com www.mysite.com; if ($invalid_referer) { return 403; } } # end Is it safe to keep these images exposed? Because I noticed that the images have a long “hash” preffix. Hello @antonio24073 , Apologies for the delay. The code you have shared can be used. However, It might not be the correct solution. There are plugins available to restrict the uploaded files in WordPress. You may try one of them. If you would like to customize the feature, We can custom code it for you. You can reach out to us . Thanks,

Comments

3 shown
ELEXtensions 2022-02-16T16:37:00+00:00

Hello @antonio24073 , Thanks for trying our plugin and sharing the feedback. Your suggestion to add the custom folder feature in the basic version will be discussed with our product team. The option to delete the attachment link once the ticket has been deleted will be added in the future release of the plugin. Regarding the HTML warning, There were a few use cases where HTML tags in the spam emails created issues with the ticket scripting. That’s why we show warnings before enabling the HTML option. Hope that explains.

Antonio Augusto 2022-02-17T19:23:00+00:00

Hi, I’m trying to block uploads folder from direct access without success #ini allow uploads to my domain only location ^/wp\-content/uploads/$ { valid_referers mysite.com www.mysite.com; if ($invalid_referer) { return 403; } } # end Is it safe to keep these images exposed? Because I noticed that the images have a long “hash” preffix.

ELEXtensions 2022-02-22T15:58:00+00:00

Hello @antonio24073 , Apologies for the delay. The code you have shared can be used. However, It might not be the correct solution. There are plugins available to restrict the uploaded files in WordPress. You may try one of them. If you would like to customize the feature, We can custom code it for you. You can reach out to us . Thanks,