Descrição
BF Secret File Downloader is a WordPress plugin that automatically creates secure directories and allows you to manage files within them. The plugin creates protected storage areas automatically and provides comprehensive file management, directory management, and download functionality with advanced access control.
Features
- Automatic Secure Directory Creation: System automatically creates protected directories with unique names
- File Management: Browse, upload, and manage files in secure directories
- Download Control: Secure download functionality with access control
- Access Control: Multiple authentication methods including WordPress login and simple password
- Directory Management: Organize files in automatically created protected directories
- i18n Ready: Translation ready with Japanese and English support
Authentication Methods
- WordPress user login (with role-based access)
- Simple password protection
Use Cases
- Private document distribution
- Member-only file downloads
- Protected resource sharing
Security
This plugin implements several security measures:
- Automatic secure directory creation with unique names
- Protected directories with .htaccess and index.php files to prevent direct access
- Nonce verification for all admin actions
- Input sanitization and validation
- Path traversal protection
- Access control verification
- Direct file access prevention
- Program code file upload blocking (PHP, JS, Python, etc.)
- Hidden file and dangerous file pattern filtering
- Secure file upload and download handling
Support
For support and feature requests, please visit the plugin’s support forum.
Donate
If you find this plugin useful, please consider making a donation to support its development.
Capturas de tela
Admin file list page showing protected files 
Settings page with authentication options 
Frontend download interface
Instalação
- Activate the plugin through the ‘Plugins’ screen in WordPress.
- The plugin automatically creates a secure directory on activation.
- Use the BF Secret File Downloader->Settings screen to configure authentication methods.
- Access the File List page to start uploading and managing files in the secure directory.
- Share the generated download URL with users who need access to the files.
Perguntas frequentes
-
What file types are supported?
-
The plugin supports most common file types including documents, images, archives, and media files. For security reasons, program code files are blocked, including PHP, JavaScript, Python, shell scripts, and other executable file types.
-
How secure is the download functionality?
-
The plugin implements multiple security layers including nonce verification, user authentication, and sanitized file paths to prevent unauthorized access.
-
How does the automatic directory creation work?
-
The plugin automatically creates secure directories with unique names when activated. These directories are protected with .htaccess and index.php files to prevent direct access and have unique names for additional security.
-
Is it compatible with multisite?
-
Currently, the plugin is designed for single-site installations.
Avaliações
Não há avaliações para este plugin.
Colaboradores e desenvolvedores
“BF Secret File Downloader” é um programa de código aberto. As seguintes pessoas contribuíram para este plugin.
Colaboradores
BF Secret File Downloader” foi traduzido para 1 localidade. Agradecemos aos tradutores por suas contribuições.
Traduzir o “BF Secret File Downloader” para seu idioma.
Interessado no desenvolvimento?
Navegue pelo código, consulte o repositório SVN ou assine o registro de desenvolvimento por RSS.
Registro de alterações
1.0.1
- Fix: Removed dangerous htmlspecialchars_decode() usage for improved security
- Fix: Removed unnecessary inline script tag from admin interface
- Fix: Added proper translation support for directory name validation messages
- Improvement: Updated PHPUnit tests to match current implementation
- Maintenance: Removed temporary .bak files from distribution
1.0.0
- Initial release
- Automatic secure directory creation
- File management functionality in protected directories
- Upload and download control with authentication
- Multiple authentication methods (WordPress login, simple password)
- i18n support for Japanese and English