There are several plugins to make a blog private, making it a good tool for basic collaboration \/ group ware. However file attachments \/ images have still been visible too the public, until now.<\/p>\n\n
Private files acts as a proxy, making sure users are logged in before they can download any files. The nice thing about is, it doesn't modify the current uploads at all, doesn't store files in a different place, so if you want to stop using it, all links to files stay the same, so you don't need to redo anything.<\/p>\n\n
How this plugin works<\/p>\n\n
1) It requires mod_rewrite\/php running in apache, probably on unix\/linux, although windows may work.<\/p>\n\n
2) It requires wordpress to be handling all url requests via a .htaccess in your blog root, and for your uploads to be a subdirectory of the your blog root and you're not using the default permalinks (ie. not http:\/\/www.myblog.com\/?p=123)<\/p>\n\n
3) An additional .htaccess file is placed in your uploads directory with the following content:<\/p>\n\n
RewriteEngine On\n\nRewriteBase \/wordpress\/wp-content\/uploads\n\nRewriteRule . \/wordpress\/afilethatshouldnotexist.txt\n\nOptions -Indexes \n<\/code><\/pre>\n\n4) All requests for files within your upload are direct to a file that doesn't exist<\/p>\n\n
5) Wordpress handles this as a 404 error<\/p>\n\n
6) This plugin has a hook which intercepts the 404, and returns the file if the user is logged in.<\/p>\n\n
7) If you want to force user login please try Angsuman's Authenticated WordPress Plugin (http:\/\/blog.taragana.com\/index.php\/archive\/angsumans-authenticated-wordpress-plugin-password-protection-for-your-wordpress-blog\/) or Allow Categories (http:\/\/jameslow.com\/2007\/12\/02\/allow-categories\/) to permission your blog.<\/p>\n\n
8) There's a small chance that the protection detection might be wrong, if so reprotect your files.<\/p>\n\n
9) If you want to stop using the plugin, unprotect it, or delete the .htaccess file with your uploads directory.<\/p>\n\n
More information and the latest version can be found here:\nhttp:\/\/jameslow.com\/2008\/01\/28\/private-files\/<\/p>\n\n\n
\n- Download privatefiles.php and place in wp-content\/plugins<\/li>\n
- Log into your WordPress admin panel<\/li>\n
- Go to Plugins and \"Activate\" the plugin<\/li>\n
- Go to Manage->Private Files and click protect<\/li>\n<\/ol>","raw_excerpt":"Private Files makes sure only logged in users can see images and file attachments.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/2440","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=2440"}],"author":[{"embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/jamesdlow"}],"wp:attachment":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=2440"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=2440"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=2440"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=2440"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=2440"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=2440"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}