gfpdf_tmp_location
Description
By default, temporary files Gravity PDF create are stored in the tmp
folder inside the PDF working directory. As we discussed in the PDF security documentation this directory is protected from direct access by a .htaccess
file. However, this only works for web servers running Apache or Litespeed. This filter allows you to move this folder to a private directory that isn't accessible from the web, ensuring your PDFs stay private.
info
Your web server needs write access to the folder you move this directory to.
note
Do you host with WP Engine? Instead of using the filter below, to protect your PDFs you will need to setup a Redirect Rule in your control panel. Set the Source to ^/wp-content/uploads/PDF_EXTENDED_TEMPLATES/tmp/.*
and the Destination to your home page.
Parameters
$path | string
- The path to the
tmp
folder.
$working_folder | string
- The working directory folder name. By default this is
PDF_EXTENDED_TEMPLATES
.
$upload_path | string
- The path to your uploads directory (where the PDF working directory is stored by default).
Usage
The following snippet shows you how you can move the PDF temporary directory to a private folder that's not accessible through a browser:
Once you've verified the filter works correctly, you should manually remove the old directory.
Source Code
This filter is located in the Model_Install::setup_template_location()
method of /src/model/Model_Install.php
.