The following warnings occurred:
Warning [2] Undefined array key "pointsview" - Line: 1442 - File: inc/plugins/newpoints/core/hooks.php PHP 8.2.11 (Linux)
File Line Function
/inc/class_error.php 153 errorHandler->error
/inc/plugins/newpoints/core/hooks.php 1442 errorHandler->error_callback
/inc/class_plugins.php 142 newpoints_blockview
/showthread.php 471 pluginSystem->run_hooks



This forum uses cookies
This forum makes use of cookies to store your login information if you are registered, and your last visit if you are not. Cookies are small text documents stored on your computer; the cookies set by this forum can only be used on this website and pose no security risk. Cookies on this forum also track the specific topics you have read and when you last read them. Please confirm whether you accept or reject these cookies being set.

A cookie will be stored in your browser regardless of choice to prevent you being asked this question again. You will be able to change your cookie settings at any time using the link in the footer.

Tutorial Disable xThreads attachment download for guests.
Files
#1
One thing that bothers me with xThreads attachments is that they are available for guests. This might not be a problem with all boards and I'm not saying this is a issue for this site. But it would be nice to be able to set permissions for xThreads attachments.

First, we need to enable the `LOAD_SESSION` setting by changing its value to `true` (see line).
  1. Open file `xthreads_attach.php` located in your forum root directory.
  2. Frind the following line:
    PHP Code:
    define('LOAD_SESSION'false); 
  3. Update to:
    PHP Code:
    define('LOAD_SESSION'true); 
  4. Save and upload the file back to your forum root directory if needed.
  5. Finally, import the attached file using the Hooks plugin.

This will accomplish two things, first it will disable all xThreads attachments for guests. It will also disable attachments for groups that can't see the field. Currently xThreads assumes that if the user can't see the thread there isn't need to check for permissions as getting the download link could be quite difficult. This might or not be the best approach, even so I decided to apply this as it doesn't causes a big change on load or resource usage, but you can decide to remove that part.

   

There could be also the case that you want users to see attachments without being able to download. But for that we would need deeper changes or more steps. I will research this possibility later on when I find a need for that.

In this community I activated this feature mostly for you to test.
Reply