Jordan Alexander

BBA Secure File Downloads lets you select files from the Media Library and generate a stable File ID for each file. Then you can place a download button anywhere using:
[bbasfd_download id=”FILE_ID”]
The download is served through a controlled endpoint instead of exposing the direct file URL.
Looking for the PRO version? 
https://bigbad.agency/portfolio/wordpress-plugins/secure-file-downloads-for-wordpress/
<h3>Usage</h3>
Shortcode: 
* [bbasfd_download id=”FILE_ID”] 
Optional: 
* text=”Get the free plugin” 
* class=”my-css-class”

BBA Secure File Downloads

Serve Media Library files through a controlled download endpoint, and place download buttons anywhere with a shortcode.

r2suites

R2 Storage Manager Lite enables restricted file management between WordPress and Cloudflare R2 using its S3-compatible API.
Upload files to your R2 bucket, browse stored objects, and generate expiring signed download links — all from your WordPress dashboard.
Unlike traditional storage solutions, this plugin ensures that your files remain private and are only accessible through controlled, time-limited URLs.
<h3>Key Features (Lite)</h3>
<ul>
<li>Secure Document Sync – Synchronize documents and digital assets from WordPress to Cloudflare R2 without altering frontend media URLs.</li>
<li>Direct Upload to R2 – Securely upload files from WordPress to Cloudflare R2.</li>
<li>Secure Downloads via REST API – Generate expiring signed URLs using a hardened REST endpoint.</li>
<li>Private File Delivery – Files are not publicly accessible and are delivered via signed URLs.</li>
<li>Configurable Expiration – Set custom expiration times for download links.</li>
<li>Basic File Browser – View and manage stored files from the admin panel.</li>
<li>S3-Compatible API – Fully compatible with Cloudflare R2 infrastructure.</li>
</ul>
<h3>Use Cases</h3>
<ul>
<li>Deliver private digital files securely</li>
<li>Share time-limited download links</li>
<li>Protect premium content</li>
<li>Replace insecure direct file URLs</li>
<li>Manage external storage for documents and digital assets</li>
</ul>
<h3>Pro Version (Optional)</h3>
Upgrade to unlock advanced capabilities:
<ul>
<li>High-capacity multipart uploads for very large files</li>
<li>Drag & drop interface</li>
<li>Advanced file manager with folders</li>
<li>Download tracking & analytics</li>
<li>User quotas and restrictions</li>
<li>Advanced security (IP, referer, geo restrictions)</li>
<li>Webhooks & automation tools</li>
</ul>
More information: https://www.r2suites.com/products/wordpress/cloudflare-r2-storage-manager-pro
<h3>Architectural Policy & Limitations</h3>
CR2SM Lite is a Secure File Sync tool for documents, zip files, and digital products. It is NOT an image CDN or frontend acceleration plugin.
To guarantee architectural stability and prevent unexpected CDN abuse, this plugin enforces a strict No-URL-Rewrite Policy: 
* It MUST NOT filter <code>wp_get_attachment_url</code>. 
* It MUST NOT rewrite <code>srcset</code> attributes. 
* It MUST NOT replace native attachment URLs on your frontend. 
* It MUST NOT alter frontend delivery or inject CDN URLs.
This plugin is exclusively designed for secure backend synchronization of documents and digital assets.
<h3>External Services</h3>
This plugin connects to Cloudflare R2 Object Storage.
Service provider: Cloudflare, Inc. 
Service URL: https://www.cloudflare.com/ 
Privacy Policy: https://www.cloudflare.com/privacypolicy/
Purpose: 
Storage and secure delivery of files via S3-compatible API.
Data sent: 
* Access Key ID 
* Secret Access Key 
* Bucket name 
* File upload and retrieval requests
Data is only transmitted when explicitly configured and used by the administrator.
<h3>Gutenberg Block</h3>
The plugin includes a built-in “R2 Download” block. You can insert a download button directly in the WordPress block editor without using shortcodes.
Simply search for “R2 Download” in the block editor and configure the file key and label.
<h3>Shortcodes</h3>
Use the shortcode to generate a secure download button with restricted access:
[cr2sm_download file=”lite/file.pdf” label=”Download”]
Files are delivered through time-limited signed URLs and are not publicly accessible.

R2 Storage Manager for Cloudflare

Securely synchronize and deliver private documents and digital files with Cloudflare R2 using expiring signed URLs.

BBA Secure File Downloads vs R2 Storage Manager for Cloudflare