Joris van Montfort

<p>Protect access to all your media files and implement your own custom file access rules using a hook. Works for apache with mod rewrite or nginx with some custom configuration. No Multisite support. This plugin is more or less a development tool for defining your own custom file access rules.</p>
<p>For nginx you will need to modify the config file as nginx does not handle .htacess files. Add the following code:</p>
<pre><code>location ~ "^/wp-content/uploads/(.*)$" {
    rewrite ^/wp-content/uploads(/.*\.\w+)$ /index.php?jvm_protected_media_file=$1;
}
</code></pre>
<h3>Hooks</h3>
<p>Without a custom hook all file access will be disabled. The user will see the 404 page for all requested files. Adding a hook is needed to handle your own file access rules. A simple example that could go into your functions.php:</p>
<pre><code>function my_file_access_rule($file_info) {
    // Implement your own logic here
    $userHasAccess = true;

    if($userHasAccess) {
        // Send the file output if users has access to the file
        JVM_Protected_Media::send_file_output($file_info['path']);
    }
}

add_action( 'jvm_protected_media_file', 'my_file_access_rule');
</code></pre>
<p>The jvm_protected_media_file action has one parameter with the following file information:</p>
<pre><code>Array
(
    [id] => id_of_the_file
    [url] => full/url/to/your/file
    [path] => full/path/to/your/file
    [is_resized_image] => bool (true if the requested file is a image thumbnail or resized version of an image)
)
</code></pre>
<h3>Actions</h3>
<p>Available actions:</p>
<ul>
<li>jvm_protected_media_loaded (fires as soon as the plugin is loaded)</li>
<li>jvm_protected_media_file (fires when a file is requested)</li>
</ul>
<h3>Functions</h3>
<p>To send the output of a file to you can call:</p>
<pre><code>JVM_Protected_Media::send_file_output($fullPathToFile)
</code></pre>


JVM Protected Media

Restrict access to all your media files and implement your own custom file access rules.

10Horizons Plugins

KeystrokeClick

<p>This plugin protects selected WP Admin accounts, and standard posts created by those Admins, from being deleted or edited by other users. This plugin is hidden from all users other than the Admin who installs it. Only users with the “Administrator” role can be protected.</p>
<p>This plugin might be useful if you want to share admin access with other users (i.e. IT team, developers, etc) but don’t want to risk impacting the accounts of certain Admins. Or, perhaps you’re the developer or IT member who might need this plugin to prevent other non-technical Admins from accidentally deleting your account or key Admins on specific projects.</p>
<h3>How It Works</h3>
<ul>
<li>
<p>As soon as the plugin is <strong>activated</strong>, it will store the ID of the user that activates the plugin. The plugin will then be hidden from all users other than this user.</p>
</li>
<li>
<p>You can choose which Admin accounts (yours or others) to protect. Only the Admin who activates the plugin can save its settings. Other users won’t see the Settings page or the menu.</p>
</li>
<li>
<p>Once protected admin accounts are selected on the Settings page, other users and admins will <strong>NOT</strong> be able to:</p>
<ul>
<li>delete the protected Admin accounts.</li>
<li>access the profile edit page for the protected Admin accounts.</li>
<li>change the role of the protected Admin accounts.</li>
<li>select the protected Admin accounts in the bulk actions on users list page.</li>
</ul>
</li>
<li>
<p>Additionally, if other users or Admins, under unlikely circumstances, are able to access the user profile page of the protected Admin accounts using other plugins, this plugin will prevent any modifications from being saved.</p>
</li>
<li>
<p>Similar to the above, if other users or Admins are able to change the protected Admin account’s email address via the Profile page, this plugin will revert it back to the original email address.</p>
</li>
<li>
<p>Also, should someone attempt to edit a protected Admin’s account, the attempted action will be logged to the database. You can view recent attempts under Logs within the plugin’s section.</p>
</li>
</ul>
<h3>Important Reminder</h3>
<p>Once you deactivate the plugin, all users with the ability to manage plugins (<code>activate_plugins</code> capability) will be able to see the plugin. It is advised to only deactivate the plugin when you feel safe to do so. Otherwise you can just enable or disable protection from the plugin’s Settings page.</p>
<p>If you want to be extra cautious (depending on your needs), you should also manually disallow file edit. This plugin doesn’t do that because some people might still need it.</p>
<pre><code>define( 'DISALLOW_FILE_EDIT', true );
</code></pre>
<p>This plugin has NOT been tested with other user management plugins or role editor plugins. Hence its use alongside these types of plugins is not guaranteed to work as intended.</p>
<h3>Email Notification</h3>
<p>You can choose to get notified by email when someone attempts to modify your protected Admin accounts. Easily enable or disable email notification when you upgrade to <a href="https://protectadmin.com/plugin/protect-admin-account-pro-wordpress-plugin/" rel="nofollow ugc">Protect Admin PRO</a>.</p>
<h3>Protect Admin PRO</h3>
<ul>
<li>Be the first to know when someone is attempting to modify your protected admin accounts.</li>
<li>Get access to all logs and data of users who try to modify the protected admin accounts (the FREE version only records the most recent attempt).</li>
<li>Protect standard posts and pages made directly by protected Admins.</li>
<li>See <a href="https://protectadmin.com/plugin/protect-admin-account-pro-wordpress-plugin/" rel="nofollow ugc">more</a>.</li>
</ul>


Protect Admin

Protect admin accounts from being deleted or modified by other users. This plugin will always be hidden from all users other than the admin who instal …

JVM Protected Media vs Protect Admin