Allow download and full size image only for logged in users

I was surprised to find that anyone visiting the site can download attached files and view full size images. Noticed only after downloading a file and wanting to comment only to see I wasn’t logged in.

Aside from the user perspective, wouldn’t this mean the forum’s server’s bandwidth can easily be filled by anyone?

1 Like