beechit/fal-securedownload

Secure download of assets. Makes it possible to secure FE use of assets/files by setting permissions to folders/files for fe_groups.

6.0.3 2025-12-01 12:30 UTC

Requires

• php: ^8.2
• typo3/cms-backend: ^13.4
• typo3/cms-core: ^13.4
• typo3/cms-extbase: ^13.4
• typo3/cms-frontend: ^13.4
• typo3/cms-install: ^13.4

GPL-2.0-or-later

• Frans Saris
• Rudy Gnodde
• Markus Klein

• typo3
• TYPO3 CMS
• fal
• secure download

README

This TYPO3 extension (fal_securedownload) aims to be a general solution to secure your assets.

When your storage is marked as non-public all links to files from that storage are replaced (also for processed files).

The access to assets can be set on folder/file basis by setting access to fe_groups in the file module.

How to use

1. Download and install fal_securedownload
2. Un-check the 'public' checkbox in your file storage
3. Add a .htaccess file with "Require all denied" in your file storage root folder or move your storage outside your webroot
4. Go to the file list and add access restrictions on file/folder

Features

• Restrict FE access on folder level
• Restrict FE access on file level
• Let editor set permissions in file list
• Force download for all files (for protected file storages)
• Force download for specific file extensions (for protected file storages)
• Keep track of requested downloads (count downloads per user and file)

Requirements

• TYPO3 13 LTS