Package: drupal7
Severity: important

This is relevant to the Debian package because Drupal is installed for
multi-site by default on Debian.

When a user uploads a file (e.g. an image attachment), the URL is of the
form

  http://mysite.com/sites/mysite.com/files/image.png

This just seems excessive, it is painful to type, and it also hints that
the site is in a virtual hosting environment.  It causes problems when
migrating content from one site to another, as all links have to be changed.

Even worse, people can construct URLs to access files/images from other
virtual hosts, which may incorrectly give the impression that site A has
published some content that was really published by site B.

The Drupal manual gives some suggestions about how to use Apache alias
or mod_rewrite to allow shorter URLs, but that is just a hack, because
the full URLs still appear under the names of uploaded attachments

There is a Drupal bug report too:
   http://drupal.org/node/1902322

and many discussions about the problem, some with patches or hacks:
   http://groups.drupal.org/node/10211

This module looks relevant, but it should not be necessary to use a
module to control the attachment URL:
   http://drupal.org/project/attachment_links

This is the manual page about file locations on the server, and it also
has discussion about the problem:
   http://drupal.org/node/53705


-- 
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]

Reply via email to