[Resolved] Upload of confidential images via form

[Author]

Posts

[anthonyH-5]

Hello, I have created a new user signup form, which requires the uploading of a passport photo.

I set up the form using the image field, but in testing, I noticed that the images go straight to the WordPress media area, which is public.

How can I protect these image uploads, so that they can still be uploaded securely?

Thanks in advance
Anthony

[Shane]

Hi Anthony,

Thank you for contacting our support forum.

You will need to protect the image from direct access.
https://wordpress.org/plugins/prevent-direct-access/

Try using the plugin that i've sent above to protect your image uploads in the media gallery.

Thanks,
Shane

[anthonyH-5]

Hi Shane,

Thanks for your reply. Unfortunately, the free version doesn’t support this.

Is there a better way? I’d rather not rely on 3rd party plugins if possible, and would prefer to remain within the toolset system.

Out of interest, would it work with Toolset and Download Manager? https://wordpress.org/plugins/download-manager/

Thank you,
Anthony

[Shane]

Hi Anthony,

There isn't an internal solution for this using Toolset.

Ideally the issue is to block direct access to the media file itself.

The download manager would work but it seems a bit heavy for what you are trying to achieve.

I was able to find another solution for you.
hidden link

Please let me know if this helps.
Thanks,
Shane

[anthonyH-5]

Hi Shane,

Thanks again for your help; the link is very useful.

One last question please - is it possible to use the upload form to send a file or image directly to the WP admin, rather than store it on the server?

Thanks,

Anthony

[Shane]

Hi Anthony,

Unfortunately no it is not.

You can send the link to the admin but the file will still get uploaded to the wordpress uploads folder.

Thanks,
Shane

[anthonyH-5]

My issue is resolved now. Thank you!