King of Racism
kiwifarms.net
- Joined
- Jul 27, 2024
Why not cut XF out of it? It seems like it should be possible to write middleware that checks XF's database to see if the image or attachment requested has restricted access or not and then checks the user's xf_session to see if they're privileged enough to not get a 403. This could be something you write in Rust, C++, or some other systems language.Complicated answer because xf is shit but yes. Authentication requires going through PHP to serve files - tremendously terrible.
