Downloading files from var

Next topic

Author	Message
Jorge estévez	Tuesday 23 March 2010 5:30:42 am I have a file at /var (tryed with files of type .txt .pdf .csv) When I try to Get that file (I supose it will try to download it) via www.mysite.com/var/THEFILE.XXX it comes up with the Module Not found How can I get files from the var directory? Diseño Web Cuba Web Design Cuba www.elfosdesign.com
Peter Keung	Tuesday 23 March 2010 8:31:49 am Part of the standard rewrite rule set is: RewriteRule ^/var/storage/.* - [L] RewriteRule ^/var/[^/]+/storage/.* - [L] This facilitates you placing files to download in the var/storage directory (or in sub-folders of the var/storage directory). http://www.mugo.ca Mugo Web, eZ Partner in Vancouver, Canada
Bertrand Dunogier Moderated by: Nicolas Pastorino	Tuesday 23 March 2010 11:51:56 am Peter's answer will indeed solve the issue, but you should be careful, though, as using this will make any file in var/ available publicly, while they're usually downloaded using the content/download script. If you have a known pattern for these files, you could limit the rewrite rule: RewriteRule ^/var/[^/]+/storage/THEFILE\.XXX - [L] Bertrand Dunogier eZ Systems Engineering, Lyon http://twitter.com/bdunogier http://gplus.to/BertrandDunogier
Kristof Coomans	Tuesday 23 March 2010 1:10:03 pm Why not changing the rewrite rules suggested in the documentation, to something more secure? Also see http://ez.no/doc/ez_publish/technical_manual/4_x/installation/virtual_host_setup#comment17679 I'm pretty sure there is an issue about this also in the issue tracker, can't find it back though (might be because I don't see security issues anymore). independent eZ Publish developer and service provider \| http://blog.coomanskristof.be \| http://ezpedia.org
Nicolas Pastorino	Wednesday 24 March 2010 4:18:27 am " Why not changing the rewrite rules suggested in the documentation, to something more secure? " Good point yes. Pushing this to engineering. Thanks Kristof -- Nicolas Pastorino Director Community - eZ Member of the Community Project Board eZ Publish Community on twitter: http://twitter.com/ezcommunity t : http://twitter.com/jeanvoye G+ : http://plus.tl/jeanvoye

Author

Message

Tuesday 23 March 2010 5:30:42 am

I have a file at /var (tryed with files of type .txt .pdf .csv)

When I try to Get that file (I supose it will try to download it) via www.mysite.com/var/THEFILE.XXX it comes up with the

Module Not found

How can I get files from the var directory?

Diseño Web Cuba
Web Design Cuba
www.elfosdesign.com

Peter Keung

Tuesday 23 March 2010 8:31:49 am

Part of the standard rewrite rule set is:

RewriteRule ^/var/storage/.* - [L]
 RewriteRule ^/var/[^/]+/storage/.* - [L]

This facilitates you placing files to download in the var/storage directory (or in sub-folders of the var/storage directory).

http://www.mugo.ca
Mugo Web, eZ Partner in Vancouver, Canada

Bertrand Dunogier

Moderated by: Nicolas Pastorino

Tuesday 23 March 2010 11:51:56 am

Peter's answer will indeed solve the issue, but you should be careful, though, as using this will make any file in var/ available publicly, while they're usually downloaded using the content/download script.

If you have a known pattern for these files, you could limit the rewrite rule:

RewriteRule ^/var/[^/]+/storage/THEFILE\.XXX - [L]

Bertrand Dunogier
eZ Systems Engineering, Lyon
http://twitter.com/bdunogier
http://gplus.to/BertrandDunogier

Kristof Coomans

Tuesday 23 March 2010 1:10:03 pm

Why not changing the rewrite rules suggested in the documentation, to something more secure?

Also see http://ez.no/doc/ez_publish/technical_manual/4_x/installation/virtual_host_setup#comment17679

I'm pretty sure there is an issue about this also in the issue tracker, can't find it back though (might be because I don't see security issues anymore).

independent eZ Publish developer and service provider | http://blog.coomanskristof.be | http://ezpedia.org

Nicolas Pastorino

Wednesday 24 March 2010 4:18:27 am

Why not changing the rewrite rules suggested in the documentation, to something more secure?

Good point yes. Pushing this to engineering.
Thanks Kristof

--
Nicolas Pastorino
Director Community - eZ
Member of the Community Project Board

eZ Publish Community on twitter: http://twitter.com/ezcommunity

t : http://twitter.com/jeanvoye
G+ : http://plus.tl/jeanvoye

eZ debug

Timing:	Jan 15 2025 08:50:58
Script start
Timing:	Jan 15 2025 08:50:58
Module start 'layout'
Timing:	Jan 15 2025 08:50:58
Module start 'content'
Timing:	Jan 15 2025 08:50:59
Module end 'content'
Timing:	Jan 15 2025 08:50:59
Script end

Main resources:

Total runtime	1.1944 sec
Peak memory usage	6,144.0000 KB
Database Queries	70

Timing points:

Checkpoint	Start (sec)	Duration (sec)	Memory at start (KB)	Memory used (KB)
Script start	0.0000	0.0069	684.4766	183.6875
Module start 'layout'	0.0069	0.0037	868.1641	52.5625
Module start 'content'	0.0106	1.1819	920.7266	1,964.3750
Module end 'content'	1.1926	0.0018	2,885.1016	136.5469
Script end	1.1944		3,021.6484

Time accumulators:

Accumulator	Duration (sec)	Duration (%)	Count	Average (sec)
Ini load
Load cache	0.0057	0.4761	16	0.0004
Check MTime	0.0014	0.1161	16	0.0001
Mysql Total
Database connection	0.0010	0.0871	1	0.0010
Mysqli_queries	1.1286	94.4876	70	0.0161
Looping result	0.0007	0.0569	68	0.0000
Template Total	1.1453	95.9	2	0.5726
Template load	0.0037	0.3070	2	0.0018
Template processing	1.1416	95.5788	2	0.5708
Template load and register function	0.0012	0.0970	1	0.0012
states
state_id_array	0.0014	0.1134	1	0.0014
state_identifier_array	0.0019	0.1553	2	0.0009
Override
Cache load	0.0033	0.2768	28	0.0001
Sytem overhead
Fetch class attribute can translate value	0.0006	0.0461	5	0.0001
Fetch class attribute name	0.0020	0.1677	9	0.0002
XML
Image XML parsing	0.0025	0.2062	5	0.0005
class_abstraction
Instantiating content class attribute	0.0000	0.0012	9	0.0000
General
dbfile	0.0021	0.1789	35	0.0001
String conversion	0.0000	0.0007	4	0.0000
Note: percentages do not add up to 100% because some accumulators overlap

Templates used to render the page:

Usage	Requested template	Template	Template loaded
1	node/view/full.tpl	full/forum_topic.tpl	extension/sevenx/design/simple/override/templates/full/forum_topic.tpl
5	content/datatype/view/ezxmltext.tpl	<No override>	extension/community_design/design/suncana/templates/content/datatype/view/ezxmltext.tpl
7	content/datatype/view/ezxmltags/paragraph.tpl	<No override>	extension/ezwebin/design/ezwebin/templates/content/datatype/view/ezxmltags/paragraph.tpl
4	content/datatype/view/ezimage.tpl	<No override>	extension/sevenx/design/simple/templates/content/datatype/view/ezimage.tpl
2	content/datatype/view/ezxmltags/literal.tpl	<No override>	extension/community/design/standard/templates/content/datatype/view/ezxmltags/literal.tpl
1	content/datatype/view/ezxmltags/quote.tpl	datatype/ezxmltext/quote.tpl	extension/ezwebin/design/ezwebin/override/templates/datatype/ezxmltext/quote.tpl
1	content/datatype/view/ezxmltags/line.tpl	<No override>	design/standard/templates/content/datatype/view/ezxmltags/line.tpl
1	print_pagelayout.tpl	<No override>	extension/community/design/community/templates/print_pagelayout.tpl
Number of times templates used: 22 Number of unique templates used: 8

Time used to render debug report: 0.0001 secs