Shafat Mahmud Khan

<p>Frontend File Explorer is a modern, Windows Explorer–inspired file manager for WordPress. It gives you a clean admin interface to organize and share files plus a responsive frontend explorer powered by a simple shortcode.</p>
<p>Use it to create download areas for courses, client file portals, or resource libraries — without relying on heavy external file management tools.</p>
<p>The plugin provides a seamless experience for both administrators and frontend users:</p>
<ul>
<li><strong>Explorer-style UI:</strong> Navigate with breadcrumbs, toolbar actions, pagination, and Material Icons.</li>
<li><strong>Dedicated Directory:</strong> Files are stored in a secured <code>wp-content/uploads/downloads</code> directory.</li>
<li><strong>Admin Management:</strong> Create folders, upload files, delete items, and download ZIPs directly from the admin dashboard.</li>
<li>Frontend Integration: Embed the explorer anywhere using the <code>[frontend_file_explorer]</code> shortcode.</li>
<li><strong>AJAX-Powered:</strong> Fast, smooth navigation and pagination without page reloads.</li>
<li><strong>Translation Ready:</strong> Fully localized with the <code>frontend-file-explorer</code> text domain.</li>
</ul>
<p><strong>How to use the Explorer:</strong></p>
<ul>
<li>
<p><strong>Admin Interface:</strong><br />
Navigate to <strong>File Upload</strong> in your WordPress admin sidebar. From this dedicated dashboard, administrators can create nested folders, upload bulk files (featuring multi-select and drag-and-drop), import existing Media Library assets, delete items, and download entire directories as ZIP archives.</p>
</li>
<li>
<p><strong>Frontend Shortcode:</strong><br />
Embed the user-facing explorer interface on any Page, Post, or Custom Post Type using the following shortcode setup:</p>
<pre><code>[frontend_file_explorer]
</code></pre>
<p><em>(Renders the explorer starting at the root storage directory)</em></p>
<p><strong>Advanced Shortcode Usage:</strong><br />
You can explicitly define the starting folder path relative to the root <code>uploads/downloads</code> directory by using the <code>folder</code> attribute:</p>
<pre><code>[frontend_file_explorer folder="/course-materials"]
[frontend_file_explorer folder="/clients/acme-corp"]
</code></pre>
<ul>
<li><strong>Frontend Capabilities:</strong> Visitors browsing the frontend can view contents, click files to download them, and copy direct sharing links.</li>
<li><strong>Security:</strong> Destructive or mutating actions (like file upload, folder creation, or deletion) remain strictly hidden and blocked from public visitors. They are only accessible to logged-in users who possess the WordPress <code>upload_files</code> capability.</li>
</ul>
</li>
</ul>
<p><strong>Who is this plugin for?</strong></p>
<ul>
<li>Course creators who need a simple, branded downloads area.</li>
<li>Agencies and freelancers who share files with clients.</li>
<li>Site owners who want a lightweight, Explorer-like file manager in WordPress.</li>
</ul>


Frontend File Explorer

A modern, Windows Explorer–inspired file manager for WordPress with admin interface and frontend shortcode.

Kitgenix

<p>Kitgenix Document Manager lets admins upload documents and share a stable link like:</p>
<p>/kitgenix-document-manager/{slug}/</p>
<p>When you replace the file, the link stays the same and serves the new version.</p>
<p>You can protect documents with login-only or restricted access rules, issue expiring signed share links for external recipients, schedule go-live/archive/expiry dates, and review view/download analytics without changing the public URL.</p>
<h3>Key Features</h3>
<ul>
<li>Stable links: replace the file without changing the URL</li>
<li>Admin documents table with search, copy link, copy share link, and “Open link” actions</li>
<li>Bulk document actions: change visibility, assign categories, or move multiple documents to Trash in one step</li>
<li>Copy shortcode quick action so editors can grab the correct embed snippet without opening another screen</li>
<li>Quick edit modal (popup) for editing documents without leaving the table</li>
<li>Document Categories: create categories and assign documents for easier organization</li>
<li>Visibility controls: Public, Private, or Restricted documents</li>
<li>Granular access rules: limit a document by role, capability, or specific WordPress user IDs</li>
<li>Signed share links: expiring URLs for secure external distribution without creating a user account</li>
<li>Lifecycle controls: available-from, archive-at, and expire-at dates enforced across stable links, shortcodes, and REST metadata</li>
<li>Usage analytics: per-document view/download counts, signed-share activity, last-access timestamps, and 30-day rollups</li>
<li>Private behavior: redirect to login or return 403</li>
<li>Serving mode: Inline (browser) or Download (attachment)</li>
<li>Optional version history per document, including restore/delete for older versions</li>
<li>Bulk version cleanup: delete all old versions for a document (Versions tab + modal action)</li>
<li>Select from Media Library: optionally pick an existing Media Library file instead of uploading</li>
<li>Batch uploads: drag and drop multiple files to create document entries with shared defaults</li>
<li>Shortcode Builder with AJAX-powered document search for generating single-document or multi-document embeds</li>
<li>Document card shortcode with preview image, file type, file size, optional description, and configurable button styling</li>
<li>REST API endpoint for fetching stable document metadata by slug</li>
<li>Site Health test that checks the plugin upload directory exists and is writable</li>
<li>Safer serving: correct Content-Type where possible, security headers, and conditional caching for public docs</li>
</ul>
<h3>Usage</h3>
<ol>
<li>Go to <strong>Kitgenix <span aria-hidden="true" class="wp-exclude-emoji">→</span> Document Manager</strong></li>
<li>Add a document (name + optional slug) and upload the initial file</li>
<li>Copy the stable URL from the table and share it</li>
<li>Configure visibility, role/capability/user access, signed share expiry, and optional go-live/archive/expiry dates as needed</li>
<li>To update a document later, use <strong>Edit</strong> (modal) and upload a replacement file</li>
<li>Copy the signed share link when you need temporary external access without a login</li>
<li>Review per-document analytics to see recent views and downloads</li>
<li>If <strong>Keep version history</strong> is enabled for that document, older files will appear in the Versions panel (restore/delete)</li>
<li>Use <strong>Batch Upload</strong> when you need to ingest multiple files at once with shared visibility, category, and versioning defaults</li>
<li>Use bulk actions above the documents table when you need to update visibility, recategorize, or trash several documents together</li>
<li>Use <strong>Copy shortcode</strong> or the <strong>Shortcode Builder</strong> when you want to embed document links or cards in content</li>
</ol>
<p>Categories:</p>
<ul>
<li>Use the <strong>Categories</strong> tab to add/edit/delete categories</li>
<li>Assign a category when adding/editing a document</li>
</ul>
<p>Note: Inline viewing works best for PDFs and images. Office documents (DOCX/XLSX/etc.) typically download because browsers can’t render them natively.</p>
<h3>Settings</h3>
<p>Settings are available under the <strong>Settings</strong> tab:</p>
<ul>
<li>Allowed file extensions</li>
<li>Default visibility (Public/Private/Restricted)</li>
<li>Serving mode:
<ul>
<li>Inline (browser)</li>
<li>Download (attachment)</li>
</ul>
</li>
<li>Versioning defaults (keep history by default, delete old versions when history is disabled)</li>
<li>Private document behavior (login redirect or 403)</li>
<li>Delete all plugin data on uninstall (optional)</li>
</ul>
<p>Per-document controls in the <strong>Documents</strong> screen and native CPT metabox include:</p>
<ul>
<li>Role, capability, and user ID access rules</li>
<li>Signed share link expiry and generated signed URLs</li>
<li>Available-from, archive-at, and expire-at lifecycle controls</li>
<li>View/download analytics with recent activity summaries</li>
</ul>
<p>Frontend card options are available under the <strong>Frontend</strong> tab:</p>
<ul>
<li>Default document card button label</li>
<li>Button style (Outline or Solid)</li>
<li>Preview image size</li>
<li>File type/file size alignment</li>
<li>Button alignment</li>
<li>Button colors (normal + hover)</li>
<li>Option to open the “View” button in a new tab</li>
<li>Toggle showing file type and file size</li>
<li>Toggle showing document description</li>
<li>Shortcode Builder (generate a shortcode for one or multiple documents)</li>
</ul>
<h3>Frontend Embeds</h3>
<p>Use the built-in shortcodes when you want documents to appear directly inside posts, pages, or WooCommerce content:</p>
<ul>
<li><code>[kitgenix_document_manager_link slug="my-doc"]</code> for a simple stable link</li>
<li><code>[kitgenix_document_manager_document slug="my-doc"]</code> for a document card with preview image, metadata, button styling, and optional description</li>
<li><code>[kitgenix_document_manager_document slugs="doc-a,doc-b,doc-c"]</code> to render multiple cards inline</li>
</ul>
<h3>Security & Caching</h3>
<ul>
<li>Private, restricted, and signed-share document responses are not cached (no-store)</li>
<li>Restricted access can be enforced by login state, role, capability, specific user IDs, or a valid signed share URL</li>
<li>Public documents use conditional caching (ETag/Last-Modified) so browsers/CDNs can revalidate efficiently (including 304 Not Modified responses)</li>
<li>Responses include security hardening headers like <code>X-Content-Type-Options: nosniff</code></li>
<li>Private documents include <code>X-Robots-Tag: noindex, nofollow</code></li>
</ul>
<h3>External Services</h3>
<p>This plugin includes a shared “Kitgenix hub” component in wp-admin which may fetch publicly available plugin metadata from WordPress.org using the WordPress core <code>plugins_api()</code> function (WordPress.org Plugins API).</p>
<ul>
<li>When it runs: only in wp-admin (Kitgenix plugin admin pages)</li>
<li>Data sent: plugin slug(s) (no personal data)</li>
<li>Data received: publicly available plugin information (e.g. active installs, ratings)</li>
<li>Caching: responses are cached locally using transients for ~1 day:
<ul>
<li><code>kitgenix_hub_wporg_active_installs_v1</code></li>
<li><code>kitgenix_hub_wporg_ratings_v1</code></li>
<li><code>kitgenix_hub_wporg_media_v1</code><br />
<h3>Developer Notes (Internal Reference)</h3>
<p>This section documents internal identifiers used by the plugin (useful for developers, debugging, and advanced users).</li>
</ul>
</li>
</ul>
<h4>Options (Settings)</h4>
<ul>
<li>Option name: <code>kitgenix_document_manager_settings</code> (constant: <code>KITGENIX_DOCUMENT_MANAGER_OPTION_NAME</code>)</li>
<li>Settings group: <code>kitgenix_document_manager_settings_group</code></li>
<li>Keys (defaults):
<ul>
<li><code>allowed_extensions</code>: <code>["pdf","doc","docx","xls","xlsx","ppt","pptx","txt"]</code> (stored as an array; comma-separated strings are accepted and normalized)</li>
<li><code>default_visibility</code>: <code>public</code> (public|private|restricted)</li>
<li><code>serving_mode</code>: <code>attachment</code> (attachment|inline)</li>
<li><code>keep_version_history</code>: <code>true</code></li>
<li><code>delete_old_versions</code>: <code>false</code></li>
<li><code>private_behavior</code>: <code>login</code> (login|403)</li>
<li><code>delete_data_on_uninstall</code>: <code>false</code></li>
<li><code>card_button_label</code>: <code>"View"</code></li>
<li><code>card_button_style</code>: <code>"outline"</code> (outline|solid)</li>
<li><code>card_open_new_tab</code>: <code>false</code></li>
<li><code>card_show_file_type</code>: <code>true</code></li>
<li><code>card_show_file_size</code>: <code>true</code></li>
<li><code>card_show_description</code>: <code>false</code></li>
<li><code>card_image_size</code>: <code>96</code> (px)</li>
<li><code>card_meta_alignment</code>: <code>"justify"</code> (justify|left|center|right)</li>
<li><code>card_button_alignment</code>: <code>"center"</code> (justify|left|center|right)</li>
<li><code>card_button_text_color</code>: <code>""</code> (hex or blank)</li>
<li><code>card_button_bg_color</code>: <code>""</code> (hex or blank)</li>
<li><code>card_button_border_color</code>: <code>""</code> (hex or blank)</li>
<li><code>card_button_hover_text_color</code>: <code>""</code> (hex or blank)</li>
<li><code>card_button_hover_bg_color</code>: <code>""</code> (hex or blank)</li>
<li><code>card_button_hover_border_color</code>: <code>""</code> (hex or blank)</li>
</ul>
</li>
</ul>
<h4>Data Model</h4>
<ul>
<li>Custom Post Type: <code>kitgenix_dm_doc</code></li>
<li>Taxonomy (categories): <code>kitgenix_dm_cat</code></li>
<li>Capability: <code>manage_kitgenix_document_manager_documents</code> (assigned to Administrators and Shop Managers on activation)</li>
</ul>
<h4>Post Meta</h4>
<ul>
<li><code>_kitgenix_document_manager_current_attachment_id</code> (current attachment ID)</li>
<li><code>_kitgenix_document_manager_description</code> (optional document description shown on cards)</li>
<li><code>_kitgenix_document_manager_visibility</code> (<code>public</code>|<code>private</code>|<code>restricted</code>)</li>
<li><code>_kitgenix_document_manager_access_roles</code> (array of allowed WordPress roles)</li>
<li><code>_kitgenix_document_manager_access_capability</code> (optional required WordPress capability)</li>
<li><code>_kitgenix_document_manager_access_user_ids</code> (array of allowed user IDs)</li>
<li><code>_kitgenix_document_manager_share_expires_gmt</code> (signed share expiry in GMT)</li>
<li><code>_kitgenix_document_manager_share_secret</code> (per-document signing secret)</li>
<li><code>_kitgenix_document_manager_available_from_gmt</code> (go-live time in GMT)</li>
<li><code>_kitgenix_document_manager_archive_at_gmt</code> (archive time in GMT)</li>
<li><code>_kitgenix_document_manager_expires_at_gmt</code> (expiry time in GMT)</li>
<li><code>_kitgenix_document_manager_versioning_enabled</code> (0|1)</li>
<li><code>_kitgenix_document_manager_versions</code> (array of attachment IDs)</li>
<li><code>_kitgenix_document_manager_analytics</code> (view/download counters, signed-share counters, and daily buckets)</li>
</ul>
<h4>Stable Link Endpoint</h4>
<ul>
<li>Base path: <code>/kitgenix-document-manager/{slug}/</code></li>
<li>Query var: <code>kitgenix_document_manager_slug</code></li>
<li>Signed-share query args: <code>kitgenix_dm_share</code>, <code>kitgenix_dm_expires</code>, <code>kitgenix_dm_sig</code></li>
</ul>
<h4>REST API</h4>
<ul>
<li><code>GET /wp-json/kitgenix-document-manager/v1/doc/{slug}</code>
<ul>
<li>Returns: <code>slug</code>, <code>title</code>, <code>updated</code> (ISO 8601), <code>visibility</code>, <code>schedule_status</code>, <code>stable_url</code></li>
<li>Protected, scheduled, archived, or expired documents return the same access state the stable link endpoint enforces</li>
</ul>
</li>
</ul>
<h4>Shortcode</h4>
<ul>
<li>
<p><code>[kitgenix_document_manager_link slug="my-doc" label="Download"]</code></p>
<ul>
<li>If <code>label</code> is omitted, the document title is used.</li>
<li>Protected, scheduled, archived, or expired documents render nothing when the current visitor cannot access them.</li>
</ul>
</li>
<li>
<p><code>[kitgenix_document_manager_document slug="my-doc" button_label="View"]</code></p>
<ul>
<li>Renders a small preview (thumbnail/icon), the document title, file type, file size, and a “View” button.</li>
<li>Protected, scheduled, archived, or expired documents render nothing when the current visitor cannot access them.</li>
<li>Optional attributes: <code>button_style="outline"|"solid"</code>, <code>image_size="96"</code>, <code>meta_align="justify"|"left"|"center"|"right"</code>, <code>button_align="justify"|"left"|"center"|"right"</code>, <code>show_description="0"|"1"</code>, <code>new_tab="0"|"1"</code>, <code>show_type="0"|"1"</code>, <code>show_size="0"|"1"</code>.</li>
<li>To render multiple documents inline, use <code>slugs</code> instead of <code>slug</code>, e.g. <code>[kitgenix_document_manager_document slugs="doc-a,doc-b,doc-c"]</code>.</li>
</ul>
</li>
</ul>
<h4>Filters</h4>
<ul>
<li><code>kitgenix_document_manager_user_has_document_access</code>
<ul>
<li>Allows custom access systems to grant or deny a logged-in user after the built-in role/capability/user-ID checks run.</li>
</ul>
</li>
</ul>
<h4>Admin Actions (admin-post.php)</h4>
<p>The Document Manager screen uses admin-post actions, including:</p>
<ul>
<li><code>kitgenix_document_manager_document_save</code>
<ul>
<li>Nonce field: <code>kitgenix_document_manager_document_nonce</code></li>
<li>Nonce action: <code>kitgenix_document_manager_document_save</code></li>
</ul>
</li>
<li><code>kitgenix_document_manager_document_delete</code> (nonce query parameter <code>nonce</code>)</li>
<li><code>kitgenix_document_manager_documents_bulk_action</code>
<ul>
<li>Nonce field: <code>kitgenix_document_manager_bulk_action_nonce</code></li>
<li>Nonce action: <code>kitgenix_document_manager_documents_bulk_action</code></li>
</ul>
</li>
<li><code>kitgenix_document_manager_documents_bulk_upload</code>
<ul>
<li>Nonce field: <code>kitgenix_document_manager_bulk_upload_nonce</code></li>
<li>Nonce action: <code>kitgenix_document_manager_documents_bulk_upload</code></li>
</ul>
</li>
<li><code>kitgenix_document_manager_version_restore</code> (nonce query parameter <code>nonce</code>)</li>
<li><code>kitgenix_document_manager_version_delete</code> (nonce query parameter <code>nonce</code>)</li>
<li><code>kitgenix_document_manager_versions_delete_all</code> (nonce query parameter <code>nonce</code>)</li>
<li><code>kitgenix_document_manager_category_save</code>
<ul>
<li>Nonce field: <code>kitgenix_document_manager_category_nonce</code></li>
<li>Nonce action: <code>kitgenix_document_manager_category_save</code></li>
</ul>
</li>
<li><code>kitgenix_document_manager_category_delete</code> (nonce query parameter <code>nonce</code>)</li>
</ul>
<p>WordPress action hook names for the above screen actions:</p>
<ul>
<li><code>admin_post_kitgenix_document_manager_document_save</code></li>
<li><code>admin_post_kitgenix_document_manager_document_delete</code></li>
<li><code>admin_post_kitgenix_document_manager_documents_bulk_action</code></li>
<li><code>admin_post_kitgenix_document_manager_documents_bulk_upload</code></li>
<li><code>admin_post_kitgenix_document_manager_version_restore</code></li>
<li><code>admin_post_kitgenix_document_manager_version_delete</code></li>
<li><code>admin_post_kitgenix_document_manager_versions_delete_all</code></li>
<li><code>admin_post_kitgenix_document_manager_category_save</code></li>
<li><code>admin_post_kitgenix_document_manager_category_delete</code></li>
</ul>
<p>Admin AJAX:</p>
<ul>
<li><code>wp_ajax_kitgenix_dm_search_docs</code> (used by the Shortcode Builder autocomplete)</li>
</ul>
<p>The (hidden) CPT edit screen metabox uses:</p>
<ul>
<li><code>kitgenix_document_manager_upload_initial</code> (nonce field <code>kitgenix_document_manager_file_nonce</code>)</li>
<li><code>kitgenix_document_manager_replace_file</code> (nonce field <code>kitgenix_document_manager_file_nonce</code>)</li>
<li>Visibility/versioning meta save nonce:
<ul>
<li>Nonce field: <code>kitgenix_document_manager_meta_nonce</code></li>
<li>Nonce action: <code>kitgenix_document_manager_save_meta</code></li>
</ul>
</li>
</ul>
<h4>Hooks, Filters & Assets (Internal)</h4>
<p>This list is intended as a comprehensive map of WordPress integration points used by the plugin.</p>
<ul>
<li><code>plugins_loaded</code> (bootstrap init)</li>
<li><code>init</code> (register CPT/taxonomy; add rewrite rules)</li>
<li>Filter: <code>query_vars</code> (adds query var <code>kitgenix_document_manager_slug</code>)</li>
<li><code>template_redirect</code> (serves stable link responses)</li>
<li><code>rest_api_init</code> (registers REST route)</li>
<li><code>admin_menu</code> (registers Kitgenix menu + Document Manager submenu)</li>
<li><code>admin_head</code> (outputs Kitgenix admin menu icon CSS)</li>
<li><code>admin_init</code> (registers Settings API option)</li>
<li><code>admin_enqueue_scripts</code> (enqueues Kitgenix hub CSS; enqueues Document Manager admin assets)</li>
<li><code>add_meta_boxes</code> (adds the CPT file/visibility metaboxes)</li>
<li><code>save_post</code> (saves visibility, versioning, access, signed-share, and scheduling meta)</li>
<li><code>admin_post_kitgenix_document_manager_upload_initial</code> (metabox upload)</li>
<li><code>admin_post_kitgenix_document_manager_replace_file</code> (metabox replace)</li>
<li><code>admin_notices</code> (metabox success/error notices via <code>kitgenix_dm_notice</code>)</li>
<li>Filter: <code>manage_kitgenix_dm_doc_posts_columns</code> (adds list table columns)</li>
<li><code>manage_kitgenix_dm_doc_posts_custom_column</code> (renders list table columns)</li>
<li>Filter: <code>post_row_actions</code> (adds “Replace File” row action)</li>
<li>Filter: <code>site_status_tests</code> (registers Site Health test)</li>
<li>Shortcode: <code>kitgenix_document_manager_link</code></li>
</ul>
<p>Other admin UI identifiers:<br />
– Admin list-table column key: <code>kitgenix_dm_actions</code><br />
– Version restore notice query arg: <code>kitgenix_version_restored=1</code></p>
<p>Admin asset handles (wp-admin):</p>
<ul>
<li>Styles:
<ul>
<li><code>kitgenix-hub</code> (Kitgenix hub page)</li>
<li><code>kitgenix-admin-ui</code> (shared Kitgenix admin UI)</li>
<li><code>kitgenix-document-manager-admin</code> (Document Manager settings screen)</li>
</ul>
</li>
<li>Scripts:
<ul>
<li><code>kitgenix-admin-tabs</code> (shared Kitgenix tabs UI)</li>
<li><code>kitgenix-document-manager-admin</code> (Document Manager admin JS)</li>
</ul>
</li>
</ul>
<h4>Site Health (Internal)</h4>
<ul>
<li>Registers Site Health test ID: <code>kitgenix_document_manager_uploads</code> (checks uploads directory exists and is writable)</li>
</ul>
<h4>Notes (Internal)</h4>
<ul>
<li>Uninstall deletes a legacy transient <code>kitgenix_document_manager_site_health</code> for backwards compatibility, even though v1 does not set it.</li>
</ul>


Kitgenix Document Manager

Manage document downloads with stable links, granular access, lifecycle scheduling, and usage analytics.

Frontend File Explorer vs Kitgenix Document Manager