#drupal-files

File field download method: public files remain directly reachable after change

Drupal supports two documented download methods for file and image fields: public files served directly by the web server from the public files directory, and private files streamed through Drupal's file download route with entity access checks. The private file system is enabled via $settings['file_private_path'] in settings.php and is typically placed outs