Secure Image Source

Discussion Ask a question
, , ,
1

Hello all. This is my first post, I am quite new to Wix. I swear I searched the forums and googled before making this post. I am attempting to make a page that has content only viewable by members with certain roles. So far so good, I have it working well. But I have noticed that once you get the URL to an image, it can be loaded by anyone whether they are authenticated on the site or not, much less having the correct role.

So say I have users that pay for access to design content. I want to make sure that the content can only be viewed if properly logged in. Right now anyone with the URL to the images can view them regardless of page permissions.

Maybe there is a better way to display the images so they are protected by some backend code that verifies credentials before rendering? Any help is greatly appreciated!

2

Hey there!
I did not believe this so I created a new Data Collection with ADMIN ONLY Permissions and then I added some images to that Data Collection and then I tried to access the images outside in a browser and I did get them that way. This is a security breach that Wix Code team needs to read. I am including some of the ones I know here and hope they can get back to us both with a proper solution. I can’t be that if you set permissions on a Data Collection you can still view and steal resources from that Data Collection.

@yisrael-wix @uval-blumenfeld-wix

3

I completely agree. I’m unfortunately going to need to find another service if there isn’t a solution. It’s sad because I really like the structure and API’s of Wix too.