Hi
my using from kunena version : 5.0.2
in this kunena, when enabled protect attachment, good working and no problem and good access with (not access with Guest to attachment)---> this is good setting for kunena
but I've noticed something
when protect attach --> yes
load any files (images,txt,or any files) with link ---> localhost/forum/attachment/1 or anu number
for example :
localhost/forum/attachment/1
localhost/forum/attachment/2
localhost/forum/attachment/3
localhost/forum/attachment/300
localhost/forum/attachment/1000
or any number id
this is low security, becuase users can be guess and if set 1 to last number, can download or see any attachments
if enabled protect attachment, in database (table attachment) set filename (for example) =4861650dafeb90c197212d5c90e60a7b
i think if load attachments with basename (after change with kunena), good and high security
for example :
localhost/forum/attachment/3 ----> localhost/forum/attachment/4861650dafeb90c197212d5c90e60a7b
localhost/forum/attachment/4 ---->localhost/forum/attachment/d550dafeb86190c19722d5c9456dwa5d
so , users can not guess
is it possible?
In your opinion, if load with id number from table attachment, is low security?
please answer me
Thank you kunena