diff --git a/src/middleware/index.js b/src/middleware/index.js
index f196ad7e54..149a455cac 100644
--- a/src/middleware/index.js
+++ b/src/middleware/index.js
@@ -123,7 +123,7 @@ middleware.privateUploads = function (req, res, next) {
 	if (req.user || parseInt(meta.config.privateUploads, 10) !== 1) {
 		return next();
 	}
-	if (req.path.startsWith('/assets/uploads/files')) {
+	if (req.path.startsWith(nconf.get('relative_path') + '/assets/uploads/files')) {
 		return res.status(403).json('not-allowed');
 	}
 	next();