closes #5749

8 years ago · 22131640fd
parent 50367a971e
commit 22131640fd
1 changed files with 1 additions and 1 deletions
--- a/src/middleware/index.js
+++ b/src/middleware/index.js
@ -123,7 +123,7 @@ middleware.privateUploads = function (req, res, next) {
 	if (req.user || parseInt(meta.config.privateUploads, 10) !== 1) {
 		return next();
 	}
-	if (req.path.startsWith('/assets/uploads/files')) {
+	if (req.path.startsWith(nconf.get('relative_path') + '/assets/uploads/files')) {
 		return res.status(403).json('not-allowed');
 	}
 	next();