[Mediawiki-l] restricting file downloads

[Florian Effenberger]

Hi,

I run an internal wiki which is protected with

$wgGroupPermissions['*']['read'] = false;
$wgWhitelistRead = array ("Special:Userlogin", "MediaWiki:Common.css",
"MediaWiki:Common.js", "MediaWiki:Monobook.css",
"MediaWiki:Monobook.js", "-");
$wgGroupPermissions['*']['edit'] = false;
$wgGroupPermissions['*']['createaccount'] = false;

so I cannot get in without an administrator-created account. However,
file downloads of course seem to work directly if the URL is known, as
they are directly served via Apache.

Is there any mod_rewrite rule that requires MediaWiki authentication
before offering file downloads (from the images directory), or an
extension that does not let users download files directly, but rather
uses a MediaWiki wrapper?

I know that wikis are not meant to be private, and a simple .htaccess
password protection helps here as well, but maybe there is an easy
solution for my needs. ;-)

Thanks,
Florian