Please check the very popular addons bd attachment store and [Tinhte] Image Attachment Optimization & CDN Support.
Both addons provide CDN support for permission based Xenforo attachments and XenForo media assets.
Please consider to add similar support to the CDN functionality of Vaultwiki so that we can save the bandwidth costs of Vaultwiki full images.
No, downloads do not go through PHP. If user get the URL, no more permission check.
So private attachments (such as posted in a subscribers-only forum) are accessible to guests.
From the [Tinthe] Image Attachment description:
Force image attachments work with Guest permission (Guests can view full image attachments without login logged in permission).
Looked at the source code and confirmed that all permissions are bypassed.
For VaultWiki, it may be reasonable to allow CDN support for assets that are already guest-visible, but with private assets there is always a security hole.
The main issue is bandwidth use of full images. It would be good if there were a way to use CDN for this.
It is true that the file can be accessed if the user has the url. However, for costly files like full images this is an easy sacrifice to make.
In XF2 similar functionality for CDN is included in the core.
This site uses cookies to help personalize content, to tailor your experience, and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.