What's New
You must be logged in to reply to this topic.
Hello. I use Multistore. When updating Prestashop to 1.7.8.8, the images in the UPLOAD folder of the secondary stores are not displayed, they are displayed correctly in the main store.
My .htaccess file already had the code “RewriteRule ^upload/.+$ %{ENV:REWRITEBASE}index.php [QSA,L]” for each of the domains, and it just works as I said in the main store.
What I can do?
Hi,
This is a major issue for all Panda (and probably all SunnyToo modules) that use images: they store the images in the /uploads dir. But PrestaShop blocks access to /uploads. Why? Because /uploads is not meant for public access, but for uploads (example customer products customization).
If you apply either one of your .htaccess “hacks” where you unblock the access, it means you expose either ALL customer upload (and other) files that are in the /uploads dir, or only image files. This is a major GDPR/privacy and security issue.
Read about the upload dir here: https://devdocs.prestashop-project.org/8/development/architecture/file-structure/#upload
Can you change all your modules to instead use the /img directory for images?
I think this is the only good solution.
Kind regards,
Mads
You must be logged in to reply to this topic.