Upload Security

[agaveville]

Is there a way to have file attachments renamed as part of the upload process, for example the way Facebook does?

My forum features many photos of a sensitive nature, rare plants in habitat and ancient ruins, for example, and original file names can unintentionally reveal clues about locales I would rather eliminate.

[Paul]

Files are already renamed during upload, and served via a dynamic script.

[agaveville]

Files are already renamed during upload, and served via a dynamic script.

Then why do I see all the original upload file names on my forum? Am I a witch?

[invenio]

Because that information is stored in the database. The files themselves on the server are renamed so that if two people upload "picture.jpg" they get assigned unique file names on the server so that they don't overwrite each other. You can see all these attachment files in the /files directory.

If you didn't want the original file names displayed you would probably edit the core files to not display them. However, I think when a user tries to download that picture, the original name will still be given as the default save name.

[agaveville]

Because that information is stored in the database. The files themselves on the server are renamed so that if two people upload "picture.jpg" they get unique file names so that they don't overwrite this. You can see all these attachment files in the /files directory.

If you didn't want the original file names displayed you would probably edit the core files to not display them. However, I think when a user tries to download that picture, the original name will still be given as the default save name.

Thank you. Yes I understand that. My ideal would be to display them as renamed on the server. But I gather there is no easy way to achieve this.

[invenio]

Maybe this extension: https://www.phpbb.com/customise/db/exte ... uff_buster

I don't know if it strips the actual name when downloading but at least people won't see the file name when browsing the forum. Also you will have to check whether it's compatible with the latest phpbb version.

[HiFiKabin]

My extension above hides the file name it does not remove it, and it is fully compatible with 3.3.15. See HERE

[agaveville]

My extension above hides the file name it does not remove it, and it is fully compatible with 3.3.15. See HERE

Tried it, but was disappointed to see that it strips my added verbal descriptions of photos, along with file names and download count. I may not want file names to betray where folks are looking, but I still need the ability to explain to folks what they are seeing.

I suspect many might find this extension more useful were it to provide the option of choosing what to hide (via checkbox), rather than just all or nothing.

In any case, thanks, it was certainly worth a try.

[Steve]

I could show you how to do it, What you like at manual file edits?

track-new-topic-2-yourdomain-com.png