7177 posts
  • Exclusive Author
  • Has been a member for 5-6 years
  • Sold between 10 000 and 50 000 dollars
  • Envato Studio (Microlancer) Beta Tester
  • Beta Tester
  • Repeatedly Helped protect Envato Marketplaces against copyright violations
  • Author had a Free File of the Month
  • Bought between 50 and 99 items
  • Referred between 10 and 49 users
+1 more
doru says

In that case, you should generate a new API key which is meant specifically for your FTP only ;)

any api keys will work with the ftp login.

but this debate is pointless

because it appears that


(currently it’s password OR API key).

didn’t knew that. :)

The only way that someone could profit from this, is that if he knows your api key then he can log in while you upload an item and download it from the ftp. I’m not sure if you can access your files after you click the submit button in the upload form and you send them to the queue button. If you can’t access the files then I think the opportunity window is pretty small, but if you can do it, then someone could copy your files while they are in the review queue.

Till the staff will clarify this I think the best solution is to delete all API keys and generate a new one and then keep that to yourself. No third party should know the API keys.

EDIT:

done! api keys deleted and generate a new one. I should be fine now.

2086 posts
  • Author had a File in an Envato Bundle
  • Contributed a Blog Post
  • Exclusive Author
  • Has been a member for 4-5 years
  • Interviewed on the Envato Notes blog
  • Most Wanted Bounty Winner
  • Referred between 1 and 9 users
  • Serbia
+1 more
urbazon says

The only way that someone could profit from this, is that if he knows your api key then he can log in while you upload an item and download it from the ftp.

The last time I checked, I wasn’t able to download anything from the ftp servers. I can only upload, but can’t download from there. I don’t know much about ftp, but I guess this was restricted on purpose for various reasons. Don’t know if it can be bypassed in any way… :/ Hope not :D

138 posts
  • Europe
  • Sold between 10 000 and 50 000 dollars
  • Most Wanted Bounty Winner
  • Envato Studio (Microlancer) Beta Tester
  • Bought between 10 and 49 items
  • Exclusive Author
  • Has been a member for 3-4 years
  • Referred between 10 and 49 users
x4er0 says

At this time of the year may i suggest that a message is placed on authors dashboards or send out an email as many will not see this message and you will then receive a flood of posts no doubt in the new year asking why their FTP uploads are not working. Just a suggestion. +1 Jonathan
7177 posts
  • Exclusive Author
  • Has been a member for 5-6 years
  • Sold between 10 000 and 50 000 dollars
  • Envato Studio (Microlancer) Beta Tester
  • Beta Tester
  • Repeatedly Helped protect Envato Marketplaces against copyright violations
  • Author had a Free File of the Month
  • Bought between 50 and 99 items
  • Referred between 10 and 49 users
+1 more
doru says


The only way that someone could profit from this, is that if he knows your api key then he can log in while you upload an item and download it from the ftp.
The last time I checked, I wasn’t able to download anything from the ftp servers. I can only upload, but can’t download from there. I don’t know much about ftp, but I guess this was restricted on purpose for various reasons. Don’t know if it can be bypassed in any way… :/ Hope not :D

well, never tried to download the items while uploading via ftp so probably you are right. :)

3 posts
  • Bought between 1 and 9 items
  • Has been a member for 1-2 years
CgBoutique says

Oh, that’s good info before i upload my first item ! :D

1157 posts
  • Brazil
  • Sold between 10 000 and 50 000 dollars
  • Repeatedly Helped protect Envato Marketplaces against copyright violations
  • Most Wanted Bounty Winner
  • Envato Studio (Microlancer) Beta Tester
  • Referred between 100 and 199 users
  • Bought between 1 and 9 items
+2 more
RafaelOliveira says



The only way that someone could profit from this, is that if he knows your api key then he can log in while you upload an item and download it from the ftp.
The last time I checked, I wasn’t able to download anything from the ftp servers. I can only upload, but can’t download from there. I don’t know much about ftp, but I guess this was restricted on purpose for various reasons. Don’t know if it can be bypassed in any way… :/ Hope not :D
well, never tried to download the items while uploading via ftp so probably you are right. :)

I had tried and it’s impossible :)

121 posts
  • Author had a Free File of the Month
  • Bought between 10 and 49 items
  • Exclusive Author
  • Has been a member for 3-4 years
  • Referred between 10 and 49 users
  • India
rabidflash says

like others said, this doesn’t make sense. Why opt for open APIs which authors use in many 3rd party apps instead of more secure and closed password? You may not able to download/ edit the files but you can delete the uploaded files. I’m not sure what exactly happens once the item’s been submitted- whether the files are moved to a different path or still accessed from the same path, but the change makes no sense.

2086 posts
  • Author had a File in an Envato Bundle
  • Contributed a Blog Post
  • Exclusive Author
  • Has been a member for 4-5 years
  • Interviewed on the Envato Notes blog
  • Most Wanted Bounty Winner
  • Referred between 1 and 9 users
  • Serbia
+1 more
urbazon says

like others said, this doesn’t make sense. Why opt for open APIs which authors use in many 3rd party apps instead of more secure and closed password? You may not able to download/ edit the files but you can delete the uploaded files. I’m not sure what exactly happens once the item’s been submitted- whether the files are moved to a different path or still accessed from the same path, but the change makes no sense.

Once you submit the uploaded files via forms on the website, they do get removed from your ftp folder (although it’s not the case on PhotoDune since recently, it must be some kind of a bug…?)

But yes, never thought of that – files can be deleted indeed :/

121 posts
  • Author had a Free File of the Month
  • Bought between 10 and 49 items
  • Exclusive Author
  • Has been a member for 3-4 years
  • Referred between 10 and 49 users
  • India
rabidflash says

I’m almost certfiles from ftp don’t get deleted immediately after submitting them. They are deleted automatically after sometime even if you don’t submit them.

911 posts Never trust a ballerina with a moustache
  • Attended a Community Meetup
  • Australia
  • Bought between 10 and 49 items
  • Contributed a Blog Post
  • Exclusive Author
  • Grew a moustache for the Envato Movember competition
  • Has been a member for 2-3 years
  • Interviewed on the Envato Notes blog
  • Repeatedly Helped protect Envato Marketplaces against copyright violations
+1 more
Carmen says

Hi guys, I’ll get one of the devs to reply to you. :)

by
by
by
by
by
by