Downloading files from var

Next topic

Author	Message
Jorge estévez	Tuesday 23 March 2010 5:30:42 am I have a file at /var (tryed with files of type .txt .pdf .csv) When I try to Get that file (I supose it will try to download it) via www.mysite.com/var/THEFILE.XXX it comes up with the Module Not found How can I get files from the var directory? Diseño Web Cuba Web Design Cuba www.elfosdesign.com
Peter Keung	Tuesday 23 March 2010 8:31:49 am Part of the standard rewrite rule set is: RewriteRule ^/var/storage/.* - [L] RewriteRule ^/var/[^/]+/storage/.* - [L] This facilitates you placing files to download in the var/storage directory (or in sub-folders of the var/storage directory). http://www.mugo.ca Mugo Web, eZ Partner in Vancouver, Canada
Bertrand Dunogier Moderated by: Nicolas Pastorino	Tuesday 23 March 2010 11:51:56 am Peter's answer will indeed solve the issue, but you should be careful, though, as using this will make any file in var/ available publicly, while they're usually downloaded using the content/download script. If you have a known pattern for these files, you could limit the rewrite rule: RewriteRule ^/var/[^/]+/storage/THEFILE\.XXX - [L] Bertrand Dunogier eZ Systems Engineering, Lyon http://twitter.com/bdunogier http://gplus.to/BertrandDunogier
Kristof Coomans	Tuesday 23 March 2010 1:10:03 pm Why not changing the rewrite rules suggested in the documentation, to something more secure? Also see http://ez.no/doc/ez_publish/technical_manual/4_x/installation/virtual_host_setup#comment17679 I'm pretty sure there is an issue about this also in the issue tracker, can't find it back though (might be because I don't see security issues anymore). independent eZ Publish developer and service provider \| http://blog.coomanskristof.be \| http://ezpedia.org
Nicolas Pastorino	Wednesday 24 March 2010 4:18:27 am " Why not changing the rewrite rules suggested in the documentation, to something more secure? " Good point yes. Pushing this to engineering. Thanks Kristof -- Nicolas Pastorino Director Community - eZ Member of the Community Project Board eZ Publish Community on twitter: http://twitter.com/ezcommunity t : http://twitter.com/jeanvoye G+ : http://plus.tl/jeanvoye

Author

Message

Tuesday 23 March 2010 5:30:42 am

I have a file at /var (tryed with files of type .txt .pdf .csv)

When I try to Get that file (I supose it will try to download it) via www.mysite.com/var/THEFILE.XXX it comes up with the

Module Not found

How can I get files from the var directory?

Diseño Web Cuba
Web Design Cuba
www.elfosdesign.com

Peter Keung

Tuesday 23 March 2010 8:31:49 am

Part of the standard rewrite rule set is:

RewriteRule ^/var/storage/.* - [L]
 RewriteRule ^/var/[^/]+/storage/.* - [L]

This facilitates you placing files to download in the var/storage directory (or in sub-folders of the var/storage directory).

http://www.mugo.ca
Mugo Web, eZ Partner in Vancouver, Canada

Bertrand Dunogier

Moderated by: Nicolas Pastorino

Tuesday 23 March 2010 11:51:56 am

Peter's answer will indeed solve the issue, but you should be careful, though, as using this will make any file in var/ available publicly, while they're usually downloaded using the content/download script.

If you have a known pattern for these files, you could limit the rewrite rule:

RewriteRule ^/var/[^/]+/storage/THEFILE\.XXX - [L]

Bertrand Dunogier
eZ Systems Engineering, Lyon
http://twitter.com/bdunogier
http://gplus.to/BertrandDunogier

Kristof Coomans

Tuesday 23 March 2010 1:10:03 pm

Why not changing the rewrite rules suggested in the documentation, to something more secure?

Also see http://ez.no/doc/ez_publish/technical_manual/4_x/installation/virtual_host_setup#comment17679

I'm pretty sure there is an issue about this also in the issue tracker, can't find it back though (might be because I don't see security issues anymore).

independent eZ Publish developer and service provider | http://blog.coomanskristof.be | http://ezpedia.org

Nicolas Pastorino

Wednesday 24 March 2010 4:18:27 am

Why not changing the rewrite rules suggested in the documentation, to something more secure?

Good point yes. Pushing this to engineering.
Thanks Kristof

--
Nicolas Pastorino
Director Community - eZ
Member of the Community Project Board

eZ Publish Community on twitter: http://twitter.com/ezcommunity

t : http://twitter.com/jeanvoye
G+ : http://plus.tl/jeanvoye

eZ debug

Timing:	Jan 18 2025 00:51:03
Script start
Timing:	Jan 18 2025 00:51:03
Module start 'layout'
Timing:	Jan 18 2025 00:51:03
Module start 'content'
Timing:	Jan 18 2025 00:51:04
Module end 'content'
Timing:	Jan 18 2025 00:51:04
Script end

Main resources:

Total runtime	1.2392 sec
Peak memory usage	4,096.0000 KB
Database Queries	70

Timing points:

Checkpoint	Start (sec)	Duration (sec)	Memory at start (KB)	Memory used (KB)
Script start	0.0000	0.0054	589.0313	152.6250
Module start 'layout'	0.0054	0.0026	741.6563	39.4453
Module start 'content'	0.0080	1.2297	781.1016	692.7500
Module end 'content'	1.2377	0.0014	1,473.8516	16.1641
Script end	1.2392		1,490.0156

Time accumulators:

Accumulator	Duration (sec)	Duration (%)	Count	Average (sec)
Ini load
Load cache	0.0032	0.2576	16	0.0002
Check MTime	0.0013	0.1027	16	0.0001
Mysql Total
Database connection	0.0008	0.0623	1	0.0008
Mysqli_queries	1.1739	94.7271	70	0.0168
Looping result	0.0010	0.0795	68	0.0000
Template Total	1.2051	97.2	2	0.6025
Template load	0.0018	0.1471	2	0.0009
Template processing	1.2033	97.0986	2	0.6016
Template load and register function	0.0002	0.0131	1	0.0002
states
state_id_array	0.0007	0.0545	1	0.0007
state_identifier_array	0.0008	0.0639	2	0.0004
Override
Cache load	0.0016	0.1316	28	0.0001
Sytem overhead
Fetch class attribute can translate value	0.0009	0.0752	5	0.0002
Fetch class attribute name	0.0014	0.1107	9	0.0002
XML
Image XML parsing	0.0024	0.1962	5	0.0005
class_abstraction
Instantiating content class attribute	0.0000	0.0016	9	0.0000
General
dbfile	0.0014	0.1111	35	0.0000
String conversion	0.0000	0.0005	4	0.0000
Note: percentages do not add up to 100% because some accumulators overlap

Templates used to render the page:

Usage	Requested template	Template	Template loaded
1	node/view/full.tpl	full/forum_topic.tpl	extension/sevenx/design/simple/override/templates/full/forum_topic.tpl
5	content/datatype/view/ezxmltext.tpl	<No override>	extension/community_design/design/suncana/templates/content/datatype/view/ezxmltext.tpl
7	content/datatype/view/ezxmltags/paragraph.tpl	<No override>	extension/ezwebin/design/ezwebin/templates/content/datatype/view/ezxmltags/paragraph.tpl
4	content/datatype/view/ezimage.tpl	<No override>	extension/sevenx/design/simple/templates/content/datatype/view/ezimage.tpl
2	content/datatype/view/ezxmltags/literal.tpl	<No override>	extension/community/design/standard/templates/content/datatype/view/ezxmltags/literal.tpl
1	content/datatype/view/ezxmltags/quote.tpl	datatype/ezxmltext/quote.tpl	extension/ezwebin/design/ezwebin/override/templates/datatype/ezxmltext/quote.tpl
1	content/datatype/view/ezxmltags/line.tpl	<No override>	design/standard/templates/content/datatype/view/ezxmltags/line.tpl
1	print_pagelayout.tpl	<No override>	extension/community/design/community/templates/print_pagelayout.tpl
Number of times templates used: 22 Number of unique templates used: 8

Time used to render debug report: 0.0001 secs