- 🇬🇧United Kingdom robcarr Perthshire, Scotland
Six years on and File Encrypt still the only way to solve this. It works.
The solution in this module (Webform Encrypt) apparently only encrypts the filename in the database
When a webform has a managed_file element, which is set to be encrypted, only the value of the field is encrypted, but not the file itself. I think it's a fair assumption that this is not the expected behaviour.
The severity of this is mitigated for three reasons:
private.Still, if someone could somehow figure out the internal path to the file, and had access to private files, they would see the unencrypted file.
Discovered while trying to reproduce #3035804: Access encrypted file uploaded by anonymous user →
Figure out if we can actually encrypt the file's content before saving to disk.
None.
None?
None
Needs work
1.0
Code
Not all content is available!
It's likely this issue predates Contrib.social: some issue and comment data are missing.
Six years on and File Encrypt still the only way to solve this. It works.
The solution in this module (Webform Encrypt) apparently only encrypts the filename in the database