04-27-2012, 02:19 PM
(04-27-2012, 02:08 PM)steinm Wrote: out/out.ViewDocument.php isn't enough. It just outputs the links to the download page op/op.Download.php. Somebody with some knownledge on how letodms works could easily access the document anyway. If you want to reliably prevent somebody from downloading a document you will have to do it in op/op.Download.php.
Was just digging round in the files and looking for the download files so thanks for that.