Protect access to all your media files and implement your own custom file access rules using a hook. Works for apache with mod rewrite or nginx with some custom configuration. No Multisite support. This plugin is more or less a development tool for defining your own custom file access rules.<\/p>\n\n
For nginx you will need to modify the config file as nginx does not handle .htacess files. Add the following code:<\/p>\n\n
location ~ \"^\/wp-content\/uploads\/(.*)$\" {\n rewrite ^\/wp-content\/uploads(\/.*\\.\\w+)$ \/index.php?jvm_protected_media_file=$1;\n}\n<\/code><\/pre>\n\nHooks<\/h3>\n\n
Without a custom hook all file access will be disabled. The user will see the 404 page for all requested files. Adding a hook is needed to handle your own file access rules. A simple example that could go into your functions.php:<\/p>\n\n
function my_file_access_rule($file_info) {\n \/\/ Implement your own logic here\n $userHasAccess = true;\n\n if($userHasAccess) {\n \/\/ Send the file output if users has access to the file\n JVM_Protected_Media::send_file_output($file_info['path']);\n }\n}\n\nadd_action( 'jvm_protected_media_file', 'my_file_access_rule');\n<\/code><\/pre>\n\nThe jvm_protected_media_file action has one parameter with the following file information:<\/p>\n\n
Array\n(\n [id] => id_of_the_file\n [url] => full\/url\/to\/your\/file\n [path] => full\/path\/to\/your\/file\n [is_resized_image] => bool (true if the requested file is a image thumbnail or resized version of an image)\n)\n<\/code><\/pre>\n\nActions<\/h3>\n\n
Available actions:<\/p>\n\n
\n- jvm_protected_media_loaded (fires as soon as the plugin is loaded)<\/li>\n
- jvm_protected_media_file (fires when a file is requested)<\/li>\n<\/ul>\n\n
Functions<\/h3>\n\n
To send the output of a file to you can call:<\/p>\n\n
JVM_Protected_Media::send_file_output($fullPathToFile)\n<\/code><\/pre>\n\n\n\n- Install the plugin from the Plugins or upload the plugin folder to the
\/wp-content\/plugins\/<\/code> directory menu and then activate it. If your server does not meet the requirements the plugin will show a notification.<\/li>\n- Define your own access rules in your themes functions.php<\/li>\n<\/ol>\n\n\n
1.0.6<\/h4>\n\n
Added nginx check and admin notice for nginx users.<\/p>\n\n
1.0.5<\/h4>\n\n
Tested up to 5.2.2 and added a comment for nginx usage.<\/p>\n\n
1.0.4<\/h4>\n\n
Better flushing of rewrite rules and plugin tested up to 5.0.3<\/p>\n\n
1.0.3<\/h4>\n\n
Fix for the .htaccess file being reset in some situations.<\/p>\n\n
1.0.2<\/h4>\n\n
Added a 24 hour cache time to the output. This effectivly trigger the 304 not modified header if the file is indeed not modified.<\/p>\n\n
1.0.1<\/h4>\n\n
Bug fix: When requesting files that are not in the media library the plugin was not calling the jvm_protected_media_file action. Fixed this. In this case the action is called but the file_id will remain empty.<\/p>\n\n
1.0.0<\/h4>\n\n
Initial release<\/p>\n\n
Stable<\/h4>\n\n
1.0.3<\/p>","raw_excerpt":"Restrict access to all your media files and implement your own custom file access rules.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/szl.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/82030","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/szl.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/szl.wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/szl.wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=82030"}],"author":[{"embeddable":true,"href":"https:\/\/szl.wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/jorisvanmontfort"}],"wp:attachment":[{"href":"https:\/\/szl.wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=82030"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/szl.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=82030"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/szl.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=82030"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/szl.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=82030"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/szl.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=82030"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/szl.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=82030"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}