From 22131640fd07fca7d34afd70885801182577945f Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Bar=C4=B1=C5=9F=20Soner=20U=C5=9Fakl=C4=B1?=
 <baris@nodebb.org>
Date: Thu, 8 Jun 2017 17:17:46 -0400
Subject: [PATCH] closes #5749

---
 src/middleware/index.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/middleware/index.js b/src/middleware/index.js
index f196ad7e54..149a455cac 100644
--- a/src/middleware/index.js
+++ b/src/middleware/index.js
@@ -123,7 +123,7 @@ middleware.privateUploads = function (req, res, next) {
 	if (req.user || parseInt(meta.config.privateUploads, 10) !== 1) {
 		return next();
 	}
-	if (req.path.startsWith('/assets/uploads/files')) {
+	if (req.path.startsWith(nconf.get('relative_path') + '/assets/uploads/files')) {
 		return res.status(403).json('not-allowed');
 	}
 	next();