Subj : Re: Stuff
To   : apam
From : Avon
Date : Mon Nov 04 2019 21:31:29

On 04 Nov 2019 at 06:13p, apam pondered and said...
 
 ap> Uploads have to be approved by the sysop first, so it's not possible to
 ap> unintentionally have an upload in the upload folder that hasn't been
 ap> vetted by the sysop first.

OK thanks. Still seems strange to me that that directory/folder would be
publicly downloadable in any regard.

 ap> 
 ap> File areas need to be configured to show on the web server, so Al would
 ap> have done that intentionally, by default no file areas show up.

OK but should they not be downloadable only if logged in, much like you can
only view messages if logged in? Or some bases flagged as freely downloadable
such as infopacks etc. but the rest locked out until logged in?

Just some thoughts...

--- Mystic BBS v1.12 A43 2019/03/03 (Windows/32)
 * Origin: Agency BBS | Dunedin, New Zealand | agency.bbs.nz (21:1/101)

.