This commit is contained in:
Barış Soner Uşaklı
2017-06-08 17:17:46 -04:00
parent 50367a971e
commit 22131640fd

View File

@@ -123,7 +123,7 @@ middleware.privateUploads = function (req, res, next) {
if (req.user || parseInt(meta.config.privateUploads, 10) !== 1) {
return next();
}
if (req.path.startsWith('/assets/uploads/files')) {
if (req.path.startsWith(nconf.get('relative_path') + '/assets/uploads/files')) {
return res.status(403).json('not-allowed');
}
next();