설명
Secure Private Files allows you to securely manage and share private files with selected users or user roles in WordPress.
Files are protected using unique token-based URLs, ensuring they cannot be accessed without proper permission. You can define who can download each file, set an expiry date, and track download activity.
This plugin is ideal for:
– Membership sites
– Client portals
– Secure document sharing
– Restricted downloads
– Private resources for logged-in users
Key Features
- Secure token-based file access (no public URLs)
- Assign files to specific users
- Allow access by user roles
- Optional expiry date for each file
- Logged-in user verification
- Download activity logging (user, IP, date)
- Dedicated Private Files custom post type
- Media library integration for file selection
- AJAX-powered user search (Select2)
- Frontend shortcode to list accessible files
- Works with any WordPress theme
- No third-party dependency required
How It Works
- Admin creates a Private File post
- Uploads or selects a file from Media Library
- Assigns allowed users and/or roles
- (Optional) Sets an expiry date
- Plugin generates a secure download token
- Authorized users can download the file using the secure link
Shortcodes
List logged-in user’s available private files
[secure_files]
Displays only files the current user is allowed to access.
스크린샷
설치
- Upload the plugin folder to
/wp-content/plugins/ - Activate Secure Private Files
- Go to Private Files in the admin menu
- Add a new Private File
- Select file, users, roles, and expiry
- Use the shortcode on any page if needed
FAQ
-
Is login required to download files?
-
Yes. Only logged-in users with permission can access files.
-
Can I restrict files by user role?
-
Yes. You can allow access by user roles and/or specific users.
-
Are files accessible via direct URL?
-
No. Files are protected using secure token-based URLs.
-
Does the plugin log downloads?
-
Yes. Each download logs the user, IP address, and date.
-
Will this work with any theme?
-
Yes. It works independently of themes and page builders.
-
Is WooCommerce required?
-
No. WooCommerce is NOT required.
후기
이 플러그인에 대한 평가가 없습니다.
기여자 & 개발자
변경이력
1.0.5
- Security fix: protected files were previously stored as normal media
attachments under wp-content/uploads/, making them directly downloadable
via their public URL and enumerable via the unauthenticated
/wp/v2/media REST endpoint, bypassing all login/role/expiry checks.
Protected files are now relocated on save into a dedicated directory
that is denied at the web-server level (.htaccess / web.config), are
excluded from REST API media responses, and existing sites are
migrated automatically on upgrade.
1.0.4
- Compatibility : WordPress 7.0
1.0.3
- Short Code Impovements
- Few minor bugfix and improvements
1.0.2
- Code Impovements
- Language POT
- Few minor bugfix and improvements
1.0.1
- slug update
1.0
- Initial release
- Secure token-based downloads
- User and role-based access control
- Expiry date support
- Download logs
- Frontend shortcode support