xF2 Add-on - Attachment Improvements By Xon 2.6.1

Compatible XF Versions: 2.2, 2.3

Additional Requirements: php 7.0+
Optionally; Nginx (for X-Accel-Redirect support)

A collection of improvements to XF's attachment system.

SVG support
Nginx's X-Accel-Redirect
New Permissions for forum/conversations (Respects global attachment size & count limits):
- Attachment Size (kb).
- Maximum Attachment Count.

SVG Support
Support for SVG attachments to be displayable as normal images.

Nginx X-Accel-Redirect (OPTIONAL)

Enables the use of Nginx's X-Accel-Redirect header feature for attachment serving.

This permits XenForo to-do validation and authentication, and offload the actual file serving to Nginx. This feature is not particularly well documented, but some info found here.

After following Using DigitalOcean Spaces or Amazon S3 for file storage in XF 2.x attachments no longer show, you must follow the relevant FAQ entry!

This addon assumes the /internal_data folder exists within the webroot, and you do not have a 'deny all;' statement but instead use 'internal;' to secure the internal_data folder.

For example, XenForo is accessible from: /forum rather than then the webroot.

The following must be added to config.php:

Code:

$config['internalDataUrl'] = '/forum/internal_data';

Something similar to the nginx config may be required in your webserver:

Code:

location ^~ /forum/internal_data {
  internal;
  add_header Etag $upstream_http_etag;
  add_header X-Frame-Options SAMEORIGIN;
  add_header X-Content-Type-Options nosniff;
  alias /path/to/internal_data;
}

To ensure you match how XenForo serves files, add the following headers into your website config for the internal_data folder:

Code:

add_header Etag $upstream_http_etag;
  add_header X-Frame-Options SAMEORIGIN;
  add_header X-Content-Type-Options nosniff;

New Permissions

Permits per-forum or conversation attachment size and count limits.

Respects the global forum wide attachment size/count limits, with per-usergroup settings allowing smaller values.

Due to how XF integer permissions work, 'unlimited' or '0' evaluate as no permission being set.

Post Install Instructions
Add 'svg' file extension to the list of supported to allow svg files to be uploaded.

Contributing features or bug fixes
Please create a Github Pull request via the "More Information" link.

Contributions

If you appreciate this add-on, please consider a contribution via PayPal. Details will be provide via private conversation.

Please contact me if you wish for different licencing arrangements.

Reactions: Engine, jim, idepato and 87 others