gfpdf_tmp_location

Description

By default, temporary files Gravity PDF create are stored in the tmp folder inside the PDF working directory. As we discussed in the PDF security documentation this directory is protected from direct access by a .htaccess file. However, this only works for web servers running Apache or Litespeed. This filter allows you to move this folder to a private directory that isn't accessible from the web, ensuring your PDFs stay private.

info

Your web server needs write access to the folder you move this directory to.

note

Do you host with WP Engine? Instead of using the filter below, to protect your PDFs you will need to setup a Redirect Rule in your control panel. Set the Source to ^/wp-content/uploads/PDF_EXTENDED_TEMPLATES/tmp/.* and the Destination to your home page.

Parameters

$path | string

• The path to the tmp folder.

$working_folder | string

• The working directory folder name. By default this is PDF_EXTENDED_TEMPLATES.

$upload_path | string

• The path to your uploads directory (where the PDF working directory is stored by default).

Usage

The following snippet shows you how you can move the PDF temporary directory to a private folder that's not accessible through a browser:

add_filter( 'gfpdf_tmp_location', function( $path, $working_folder, $upload_url ) {

/*

* On a standard WordPress installation the ABSPATH directory refers to the top-level directory on your web server

* where WordPress is located. When that's the case, going up a directory and creating the tmp folder usually means it becomes private.

*

* Depending on your web server setup you may need to modify this path to ensure it's not accessible through your browser.

*

* Make sure you include the forward slash at the end!

*/

return ABSPATH . '../GravityPDF/tmp/';

/*

* If the above doesn't work, you can try use the get_temp_dir() function instead

*/

return get_temp_dir() . 'GravityPDF/';

}, 10, 3 );

Once you've verified the filter works correctly, you should manually remove the old directory.

Source Code

This filter is located in the Model_Install::setup_template_location() method of /src/model/Model_Install.php.