Level 102
Only the public disk and only if its symlinked
Oct 5, 2021
6
Level 1
Is Storage Safe?
Hello , I am Creating A App Where Admin Uploads Zip File And User Who Have Member Ship Can Download It, And I Created A Folder Name Uploads in /storage i Just Wanted To Ask If /Storage/uploads in accessible Or Not
Level 1
Means /storage/uploads and its files are not accessible directly by url?
Level 102
@mrphp Not in the /yourproject/storage directory. If you mean /yourproject/public/storage, then yes that is publicly available
1 like
Level 1
Thanks Man! i was Confused With Weather to Use Storage/uploads or not , But I Am Clear , Thanks
Level 80
@mrphp You should be using something like S3 where you can better control who can download files if this is some sort of protected/premium access site.
If you store them locally in storage and symlink the directory to your public directory then yes, any files in there will be accessible if someone knows the URL.
With S3, you can generate temporary URLs where I user gets a URL to download a file and that URL only works for a certain length of time.
Level 102
You can do the same thing with laravels local storage, using signed urls and file download responses :)
Please or to participate in this conversation.