[ad_1]
Hello Formidable,
When you have a form that as file uploads capabilities, files are stored in /wp-content/uploads/formidable/…
On one customers web site, they use Formidable Forms for subscription and some documents can be uploaded through it.
These files by default can be accessed by any users on frontend should they be able to guess the file names.
I have tested the suggested limitations of permission suggested from this page : https://formidableforms.com/knowledgebase/file-upload/ and was still able to access the uploaded files directly in browser private mode. I limited the access to admins and subscribers only.
Do you have suggestions on how to protect these files to only permit admin and the subscribed account users?
Thanks