shanebp

A simple Private Content settings plugin for BuddyPress or the BuddyBoss Platform.
This plugin allows administrators to select whether posts, pages and sections can be viewed by non-logged-in users.
Your front page or home page will always be Public.
If a user is logged in – this plugin will have no effect on them.
It:
<ul>
<li>will redirect non-logged-in users trying to access private content to your front page or home page</li>
<li>provides a Settings screen in wp-admin: Settings > BP Simple Private</li>
<li>allows an admin to select which post types and BuddyPress or BuddyBoss components are Private</li>
<li>provides a Private checkbox in the upper right corner of every page, post, and custom post type selected in Settings</li>
</ul>
Spanish translation included, thanks to <a href="https://profiles.wordpress.org/pablocusto/" rel="nofollow ugc">pablocusto</a>
For more information about using this plugin, please visit: <a href="https://www.philopress.com/products/bp-simple-private/" rel="nofollow ugc">PhiloPress – BP Simple Private</a>
Important: Please deactivate other privacy plugins and disable any privacy hacks on your site before activating this plugin. Otherwise there may be conflicts.
If you would like support for:
<ul>
<li>entering a custom redirection url</li>
<li>bbPress</li>
<li>multi-site</li>
<li>disabling BuddyPress RSS Feeds</li>
<li>the option to set a post type to ‘private’ on a site-wide basis</li>
</ul>
Then you may be interested in <a href="https://www.philopress.com/products/bp-simple-private-pro/" rel="nofollow ugc">BP Simple Private Pro</a>
For more plugins, please visit <a href="https://www.philopress.com/" rel="nofollow ugc">PhiloPress</a>

BP Simple Private

This plugin provides an admin page which allows you to manage the visibility of various areas of your site. If you need privacy to be under tight control then this is a super useful plugin. 5*



Control privacy easily

A simple Private Content settings plugin for BuddyPress or the BuddyBoss Platform.

Chris Dennis

‘Private’ uploaded files (PDFs, images, etc.) will normally be only included in private posts and pages. But the files themselves can still be accessed by anyone if they know the corresponding URLs.
For example, a PDF file’s URL might be
<pre><code>http://example.com/wp-content/uploads/minutes-20160924.pdf
</code></pre>
and anyone could download that file because WordPress does not get a chance to check their authorisation.
The solution that the Private Uploads plugin uses involves moving any private files to a separate folder, and then configuring the web server to ask WordPress to authenticate access to files in that folder.
So the file’s URL might now be
<pre><code>http://example.com/wp-content/uploads/private/minutes-20160924.pdf
</code></pre>
and an HTTP server rewrite rule will convert this to
<pre><code>http://example.com/?pucd-folder=private&pucd-file=minutes-20160924.pdf
</code></pre>
The Private Uploads plugin will intercept that URL and reject it with a 403 status code.
This plugin is more efficient than some similar ones because it only has to run when serving files in the private folder(s): the web server handles other uploaded files (ones not in the private folders) directly.
<h3>Requirements</h3>
<ul>
<li>Sufficient access to the web server to allow the required configuration.</li>
</ul>
<h3>Acknowledgements</h3>
<ul>
<li>This plugin was inspired by a discussion on <a href="https://wordpress.stackexchange.com/questions/37144/how-to-protect-uploads-if-user-is-not-logged-in" rel="nofollow ugc">StackExchange</a>.</li>
</ul>
<h3>Future Plans</h3>
<ul>
<li>Currently, access to private files just depends on the <code>is_user_logged_in()</code> function. This plugin could be developed to give more fine-grained control, such as having a folder for each user.</li>
</ul>

Private Uploads

Simple, works well, just perfect for me.
Some tips:
With the Plugin User Role Editor you can add a role like view_private_file and choose which user roles can access it. You can also redirect to a access denied page. Just modify in the Plugin file the function send_private_file like this:

    // Only return files to logged-in users
    if (!is_user_logged_in() || !current_user_can('view_private_file')) {
        header("Location: https://www.yoursite.com/access-denied");
        die();
    }


Perfect

Protects sensitive uploaded files so that only logged-in users can access them. The plugin depends on corresponding web server (e.g.

BP Simple Private vs Private Uploads