7604 posts
  • Has been part of the Envato Community for over 5 years
  • Has sold $40,000+ on Envato Market
  • Sells items exclusively on Envato Market
  • Located in Europe
+5 more
doru says

In that case, you should generate a new API key which is meant specifically for your FTP only ;)

any api keys will work with the ftp login.

but this debate is pointless

because it appears that


(currently it’s password OR API key).

didn’t knew that. :)

The only way that someone could profit from this, is that if he knows your api key then he can log in while you upload an item and download it from the ftp. I’m not sure if you can access your files after you click the submit button in the upload form and you send them to the queue button. If you can’t access the files then I think the opportunity window is pretty small, but if you can do it, then someone could copy your files while they are in the review queue.

Till the staff will clarify this I think the best solution is to delete all API keys and generate a new one and then keep that to yourself. No third party should know the API keys.

EDIT:

done! api keys deleted and generate a new one. I should be fine now.

2180 posts
  • Has been part of the Envato Community for over 4 years
  • Has referred 1+ members
  • Has sold $40,000+ on Envato Market
  • Interviewed on an Envato blog
+6 more
urbazon says

The only way that someone could profit from this, is that if he knows your api key then he can log in while you upload an item and download it from the ftp.

The last time I checked, I wasn’t able to download anything from the ftp servers. I can only upload, but can’t download from there. I don’t know much about ftp, but I guess this was restricted on purpose for various reasons. Don’t know if it can be bypassed in any way… :/ Hope not :D

138 posts
  • Has referred 10+ members
  • Has sold $10,000+ on Envato Market
  • Has been a beta tester for an Envato feature
  • Has collected 10+ items on Envato Market
+4 more
x4er0 says

At this time of the year may i suggest that a message is placed on authors dashboards or send out an email as many will not see this message and you will then receive a flood of posts no doubt in the new year asking why their FTP uploads are not working. Just a suggestion. +1 Jonathan
7604 posts
  • Has been part of the Envato Community for over 5 years
  • Has sold $40,000+ on Envato Market
  • Sells items exclusively on Envato Market
  • Located in Europe
+5 more
doru says


The only way that someone could profit from this, is that if he knows your api key then he can log in while you upload an item and download it from the ftp.
The last time I checked, I wasn’t able to download anything from the ftp servers. I can only upload, but can’t download from there. I don’t know much about ftp, but I guess this was restricted on purpose for various reasons. Don’t know if it can be bypassed in any way… :/ Hope not :D

well, never tried to download the items while uploading via ftp so probably you are right. :)

3 posts
  • Has been part of the Envato Community for over 1 year
  • Has collected 1+ items on Envato Market
CgBoutique says

Oh, that’s good info before i upload my first item ! :D

1160 posts
  • Located in Brazil
  • Made it to the Authors' Hall of Fame
  • Had an item featured in a magazine
  • Won a Most Wanted contest
+8 more
RafaelOliveira says



The only way that someone could profit from this, is that if he knows your api key then he can log in while you upload an item and download it from the ftp.
The last time I checked, I wasn’t able to download anything from the ftp servers. I can only upload, but can’t download from there. I don’t know much about ftp, but I guess this was restricted on purpose for various reasons. Don’t know if it can be bypassed in any way… :/ Hope not :D
well, never tried to download the items while uploading via ftp so probably you are right. :)

I had tried and it’s impossible :)

121 posts
  • Has referred 10+ members
  • Has collected 10+ items on Envato Market
  • Contributed a free file of the month
  • Sells items exclusively on Envato Market
+2 more
rabidflash says

like others said, this doesn’t make sense. Why opt for open APIs which authors use in many 3rd party apps instead of more secure and closed password? You may not able to download/ edit the files but you can delete the uploaded files. I’m not sure what exactly happens once the item’s been submitted- whether the files are moved to a different path or still accessed from the same path, but the change makes no sense.

2180 posts
  • Has been part of the Envato Community for over 4 years
  • Has referred 1+ members
  • Has sold $40,000+ on Envato Market
  • Interviewed on an Envato blog
+6 more
urbazon says

like others said, this doesn’t make sense. Why opt for open APIs which authors use in many 3rd party apps instead of more secure and closed password? You may not able to download/ edit the files but you can delete the uploaded files. I’m not sure what exactly happens once the item’s been submitted- whether the files are moved to a different path or still accessed from the same path, but the change makes no sense.

Once you submit the uploaded files via forms on the website, they do get removed from your ftp folder (although it’s not the case on PhotoDune since recently, it must be some kind of a bug…?)

But yes, never thought of that – files can be deleted indeed :/

121 posts
  • Has referred 10+ members
  • Has collected 10+ items on Envato Market
  • Contributed a free file of the month
  • Sells items exclusively on Envato Market
+2 more
rabidflash says

I’m almost certfiles from ftp don’t get deleted immediately after submitting them. They are deleted automatically after sometime even if you don’t submit them.

911 posts Never trust a ballerina with a moustache
  • Has been part of the Envato Community for over 3 years
  • Located in Australia
  • Interviewed on an Envato blog
  • Has collected 10+ items on Envato Market
+6 more
Carmen says

Hi guys, I’ll get one of the devs to reply to you. :)

by
by
by
by
by
by