ID in Attachment URL

Hi!

We were looking at the url of attachments (images in this case).

When you download all data, the url of the image will show something like:

https://kc.<org>.org/media/<image-size>?media_file=<form-owner>%2Fattachments%2F<token1>%2F<token2>%2F<filename>        

Where token1 seems to be consistent within 1 form, but different in different forms, and token2 unique (even different within 1 form)

Now we were wondering, what is the working of this token1? What could someone do with it? In the sense that, is it a token that you could use for more things than just being part of this attachment url? We mostly want to know in relation to safety; can we share this attachment url with people or would they then be able to do things we are not aware of?

Thanks!

Welcome to the community, @smeberendschot! Could you kindly share with us a screenshot of your issue so that we could understand it pictorially and help you out?

Hi @Kal_Lam , thanks for your response!

Hereby I share with you the download export of a form:

Let me know if it’s clearer now!

@smeberendschot, could you kindly provide me with the following details through a private message? Maybe I could have a closer look at your case?

  • Username
  • Project name
  • Server

You should be able to send me a private message as outlined in the post discussed previously:

Hi @Kal_Lam , thanks for your response!
I’m reviewing how to send you a private message, but not sure if I can?
This is what I’m seeing when trying option 1:

This is what I’m seeing when trying option 2:

Should I upgrade my account somewhere?