Wanze

FieldtypeSecureFile

Recommended Posts

Hi all!

Is it possible to use this module on your localhost (Mamp), for testing? Where do you place te folder?

Cheers!

 

Share this post


Link to post
Share on other sites

@Peejay

Of course, it doesn't matter where you place the folder as long as the user running apache has write permission. So for testing purposes, you could also place the folder inside the document root.

Cheers

  • Like 1

Share this post


Link to post
Share on other sites
On 4/13/2017 at 10:03 AM, Wanze said:

@Peejay

Of course, it doesn't matter where you place the folder as long as the user running apache has write permission. So for testing purposes, you could also place the folder inside the document root.

Cheers

Your solution worked! I wil see what happens when I place the website online.

 

I found a little issue:

The download link doesn't work when the secure fieldtype is used in the user template file. 

You get this link: {your site}admin/access/users/?id=41&ftsd=document_1.pdf (-> then you go to the users list)

But when je place "edit" after users/, the download link works!: {your site}admin/access/users/edit/?id=41&ftsd=document_1.pdf

Cheers! 

Share this post


Link to post
Share on other sites

I needed a way for the files to not force download, so that admin users can quickly view a document in their browser;

i added this to the hookDownloadFile() method:

$options = [];
if($this->wire('input')->get('view')) {
   $options['forceDownload'] = false;
}

and then added options to the download:

$file->download($options); // Access check performed by this method

up in the hookRenderItem i added this:

$segments['view'] = 1;
$link = $this->wire('page')->url . '?' . http_build_query($segments);
$markup .= " | <a href='{$link}' target='_blank'><i class='fa fa-eye'></i> " . $this->_('View File') . "</a>";
$markup .= "</div>";

so now the file looks like this:

view_file.jpg.844bb9bb968564498c1847d5eb41ebc2.jpg

It would be cool to consider adding this functionality, since it can't always be assumed that the files should force download; maybe it needs to be a config option where you choose the behavior or opt in for download and/or view links...

  • Like 2
  • Thanks 2

Share this post


Link to post
Share on other sites

Also, for the field to work in lister/lister pro, some additional changes needed to be made to how the links to the download are formed; this is the complete hookRenderItem method; so basically instead of referencing the page being edited, it would need to reference the $pagefile->page; then since the editUrl already has the id, you don't need to have that in the $segments array.. this works now in listers if you show a secure files field, when it renders in the list you can click on the item to download/view the file...

    public function hookRenderItem(HookEvent $event)
    {
        /** @var PagefileSecure $pagefile */
        $pagefile = $event->arguments('pagefile');
        if (!$pagefile instanceof PagefileSecure) {
            return;
        }
        $markup = $event->return;
        $markup = preg_replace("/<a class='InputfieldFileName'[^>]*>(.*)<\/a>/", "$1", $markup);
        if ($pagefile->field->get('allowDownloadInAdmin') && $pagefile->isDownloadable()) {
            $segments = array(
                //'id' => $this->wire('input')->get('id'),
                self::GET_VAR_DOWNLOAD => urlencode($pagefile->basename),
            );
            //$link = $this->wire('page')->url . '?' . http_build_query($segments);
            $link = $pagefile->page->editUrl . '&' . http_build_query($segments);
            $markup .= "<div class='FieldtypeSecureFileDownload InputfieldFileData'><a href='{$link}'><i class='fa fa-download'></i> " . $this->_('Download File') . "</a>";

            $segments['view'] = 1;
            //$link = $this->wire('page')->url . '?' . http_build_query($segments);
            $link = $pagefile->page->editUrl . '&' . http_build_query($segments);
            $markup .= " | <a href='{$link}' target='_blank'><i class='fa fa-eye'></i> " . $this->_('View File') . "</a>";
            $markup .= "</div>";
        }
        $event->return = $markup;
    }

after additional testing, i can consider forking and pull request, but wanted to run this by here on the forum first..  also haven't setup a module config to account for the showing pref (view and or download).. will possibly get to that soon..

  • Like 2

Share this post


Link to post
Share on other sites

@Macrura

Muchas gracias for your additions! Could you open a pull request against the "dev" branch? I would like to integrate your features :)

Cheers

  • Like 1

Share this post


Link to post
Share on other sites

A little information for the observers here: The feature to view a secret file beside the forced download is now available in version 1.0.3. Thanks @Macrura!

I introduced an additional setting on field level to toggle the "View" possibility.

Cheers

  • Like 2

Share this post


Link to post
Share on other sites

Try to add PW namespace at the very top of the .module file:

<?php namespace ProcessWire;

Lots of older modules can be made PW3-compatible that way... worth a try anyway.

  • Like 1

Share this post


Link to post
Share on other sites
6 hours ago, pwfans said:

Make it compatible to pw 3.x please ..

@pwfans

i have it running well on a large PW3 site. Did you run into some problem? I didn't need to add any namespace or do anything in particular, it just works.

  • Like 2

Share this post


Link to post
Share on other sites

hey @Wanze I stumbled into an issue after updating the module I ran into some time ago before deploying a site on a Windows 2008 server.

The issue is described there

 

And the fix there :

 

 

Each time I don't remember where the issue come from and I have to google it and re-read my thread.

Are willing to accept a PR ?

 

  • Like 1

Share this post


Link to post
Share on other sites

Hello, I'm trying to make this module to work but It seems that my Processwire knowledge is not enough to make it work.

I have a user profile with some pdf files that I need to be secured for every user. Only the owner can dowload his/her own files.

So, I added the custom field 'profile-contract' to the system user template, so far so good.

The secure file module is saving the files outside of the document root.

Now I have created a new template in the front end (profile.php) so users can download their files and access other information about their profile.

I have been using this:

$user->profile_name, $user->birth_date etc to access custom field data from the user template and printed to the profile.php template

The question is how can I make a link to download a secured file stored in the user system template?, in this case a custom field named $user->profile_contract in to the profile.php template

Thank you.

 

 

 

Edited by Krlos
Typo

Share this post


Link to post
Share on other sites
On 8/14/2018 at 7:53 PM, Krlos said:

The question is how can I make a link to download a secured file stored in the user system template?, in this case a custom field named $user->profile_contract in to the profile.php template

@Krlos You can echo a link to the external file like that (I might not understood all the issue...) :

echo $user->profile_contract->first()->filename;

 

To offer a download to your client, check this tutorial and adapt it for your needs (credit: @jmartsch) : https://jensmartsch.de/blog/simple-file-downloads-with-processwire/

  • Like 1

Share this post


Link to post
Share on other sites

Hello Again!

I was able to make this module work... but now my client wants to open the PDF file on a lightbox or something so users don't need to download and open the files everytime.

I have tried many things but browers allways open download prompt, there is a way I can alter the behavior?

Much appreciated

 

Share this post


Link to post
Share on other sites

AFAIK, this is a browser specific setting, that you hardly can override if you only serve a download link.

But if you use a service like g**gle docs, it should work: https://nogajski.de/autosoftproof/ (the last link in the list)

Share this post


Link to post
Share on other sites
2 hours ago, Krlos said:

I have tried many things but browers allways open download prompt, there is a way I can alter the behavior?

there is, at least in the dev branch (not sure if it was committed to main)  – there should be a download file, and a view file option.

and if you are serving the file, make sure to supply the $options, with ['forceDownload'] => false

Share this post


Link to post
Share on other sites
1 hour ago, Macrura said:

$options, with ['forceDownload'] => false

That is exactly what cannot override the customers private browser setting for file downloads of type PDF. If you serve a file of type PDF you can tell the browser "your wishes", but every individual browser may have its own preferences that cannot be overridden.

I had understand that it should be not downloaded but directly shown as document, what only can be asured if you also provide the app for displaying the doc, as you don't know if a browser has a setting that enables such a behave.

Share this post


Link to post
Share on other sites
2 minutes ago, horst said:

That is exactly what cannot override the customers private browser setting for file downloads of type PDF. If you serve a file of type PDF you can tell the browser "your wishes", but every individual browser may have its own preferences that cannot be overridden.

Exactly, I know about this.

Could be posible to capture the download file and open it in pdf.js for example?

Right now I'm using secure file like this:

I pass the file ID to a download template where it queries and serve the file.

I was experimenting with Fancybox, usign this code:

<a data-fancybox data-type="iframe" data-src="download/?=fid" href="javascript:;">
    Sample PDF file 
</a>

If I use a hardcoded or a relative pdf url it woks, but as SecureFile has no URL (As far as I know) I'm getting an error not found.

Share this post


Link to post
Share on other sites

The download url is the $page editor, with some parameters; the person accessing the file needs the correct role/perms

the file has to be delivered to the browser, since it is in a non-web accessible location.

Share this post


Link to post
Share on other sites

When setting description fields to 0 the download links are not displayed in backend.

ProcessWire 3.0.98

 

 

 

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

  • Recently Browsing   0 members

    No registered users viewing this page.

  • Similar Content

    • By anderson
      Hi all,
      I'm a new to website building. Learned some CRASH course of js,jquery,php. Then I found CMS. Still learning around forum, youtube....
      Anyway, please help me with some beginer questions:
      1, About template - please correct me if I understand wrong : every page should be (or recommended) built on a template. So if in total I'll have 10 pages, 2 of them have same layout, I'll need 9 templates.  And, what fields a page includes, is not defined in page, but defined in the template that page uses. 
      2,  Where to see what modules I've installed? is it in "Modules - Site"? 
      3, I installed "PageTable Extended", then what?  As in a youtube tutorial, it should appear in Setup tab, but it doesn't.  What's in there: templates,fields,logs,comments. (I installed "Uikit 3 site_blog profile".)
      4, I did a search in Processwire website for the famous "repeater matrix" module, and can not find it, there's a Repeater, as well as a Matrix. Is it not a module?
      5, I watched this youtube tuts: https://www.youtube.com/watch?v=IHqnLQy9R1A
      Anybody familiar with this tuts please help: 
      After he analysed a target webpage layout he wanted to mimic, he created some fields, some template, then based on those he created a page and input some "content" in there, then clicked "view", it's just some text. So, here comes my question, he copied a folder "assets" (subfolders are: css,fonts,js,img) over, then the page have the appearance/layout he wanted to mimic. Where does that assets folder come from?
      Appreciate any help.
    • By mtwebit
      I've created a set of modules for importing (manipulating and displaying) data from external resources. A key requirement was to handle large (100k+) number of pages easily.
      Main features
      import data from CSV and XML sources in the background (using Tasker) purge, update or overwrite existing pages using selectors user configurable input <-> field mappings on-the-fly data conversion and composition (e.g. joining CSV columns into a single field) download external resources (files, images) during import handle page references by any (even numeric) fields How it works
      You can upload CSV or XML files to DataSet pages and specify import rules in their description.
      The module imports the content of the file and creates/updates child pages automatically.
      How to use it
      Create a DataSet page that stores the source file. The file's description field specifies how the import should be done:
      After saving the DataSet page an import button should appear below the file description.

      When you start the import the DataSet module creates a task (executed by Tasker) that will import the data in the background.
      You can monitor its execution and check its logs for errors.

      See the module's wiki for more details.
      The module was already used in three projects to import and handle large XML and CSV datasets. It has some rough edges and I'm sure it needs improvement so comments are welcome.
    • By dreerr
      TemplateEnginePug (formally TemplateEngineJade)
       
      This module adds Pug templates to the TemplateEngineFactory. It uses https://github.com/pug-php/pug to render templates.
      doctype html html(lang='en') head meta(http-equiv='content-type', content='text/html; charset=utf-8') title= $page->title link(rel='stylesheet', type='text/css', href=$config->urls->templates . 'styles/main.css') body include header.pug h1= $page->title if $page->editable() p: a(href=$page->editURL) Edit Project on GitHub: github.com/dreerr/TemplateEnginePug
      Project in modules directory: modules.processwire.com/modules/template-engine-pug/
       
      For common problems/features/questions about the Factory, use the TemplateEngineFactory thread.
       
    • By Robin S
      Pages At Bottom
      Keeps selected pages at the bottom of their siblings.
      A "bottom page" will stay at the bottom even if it is drag-sorted to a different location or another page is drag-sorted below it (after Page List is refreshed the bottom page will still be at the bottom).
      Newly added sibling pages will not appear below a bottom page.
      The module also prevents the API methods $pages->sort() and $pages->insertAfter() from affecting the position of bottom pages.
      Note: the module only works when the sort setting for children on the parent page/template is "Manual drag-n-drop".
      Why?
      Because you want some pages to always be at the bottom of their siblings for one reason or another. And someone requested it. 🙂
      Usage
      Install the Pages At Bottom module.
      Select one or more pages to keep at the bottom of their siblings. If you select more than one bottom page per parent then their sort order in the page list will be the same as the sort order in the module config.

       
      https://github.com/Toutouwai/PagesAtBottom
      https://modules.processwire.com/modules/pages-at-bottom/
    • By Robin S
      Another little admin helper module...
      Template Field Widths
      Adds a "Field widths" field to Edit Template that allows you to quickly set the widths of inputfields in the template.

      Why?
      When setting up a new template or trying out different field layouts I find it a bit slow and tedious to have to open each field individually in a modal just to set the width. This module speeds up the process.
      Installation
      Install the Template Field Widths module.
      Config options
      You can set the default presentation of the "Field widths" field to collapsed or open. You can choose Name or Label as the primary identifier shown for the field. The unchosen alternative will become the title attribute shown on hover. You can choose to show the original field width next to the template context field width.  
      https://github.com/Toutouwai/TemplateFieldWidths
      https://modules.processwire.com/modules/template-field-widths/