Download the PHP package causal/fal-protect without Composer
On this page you can find all versions of the php package causal/fal-protect. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.
Download causal/fal-protect
More information about causal/fal-protect
Files in causal/fal-protect
Package fal-protect
Short Description Protect everything within /fileadmin/ based on associated folder and file restrictions (visibility, user groups and dates of publication).
License GPL-2.0-or-later
Informations about the package fal-protect
FAL Protect
This extension protects everything within /fileadmin/
or other relative storages based on associated folder and file
restrictions (visibility, user groups and dates of publication):
Unlike other similar extensions securing the File Abstraction Layer (FAL) of TYPO3, this extension aims at making it straightforward to block direct access to your sensitive assets.
No need to configure anything, just install and enable as usual, block direct access at the server level (Apache/Nginx see below) and... that's it!
Our motto? KISS!
Installation (Apache)
Edit file .htaccess
to read:
BEWARE: Be sure to add this rule before any other related rule.
Installation (Nginx)
Edit your server
block to read:
or, if that better fits your setup, like that:
Why 404 instead of 403 by default?
In case you try to access a restricted file and do not have the right to do so, the logical HTTP status code to use
should be either a 403 Forbidden
(or possibly a 401 Unauthorized
) but by doing so, you make it clear for a
malicious user that the resource exists but is not accessible.
We prefer, by default, to issue a 404 Not Found
but you can freely choose to issue a 403 Forbidden
in the extension
settings. This is particularly useful if you plan to redirect to a login page when a user tries to access a restricted
resource.
Complete documentation
A more complete documentation can be found on https://docs.typo3.org/p/causal/fal-protect/main/en-us/.
All versions of fal-protect with dependencies
typo3/cms-core Version ^10 || ^11 || ^12 || ^13