Joris van Montfort

<p>Protect access to all your media files and implement your own custom file access rules using a hook. Works for apache with mod rewrite or nginx with some custom configuration. No Multisite support. This plugin is more or less a development tool for defining your own custom file access rules.</p>
<p>For nginx you will need to modify the config file as nginx does not handle .htacess files. Add the following code:</p>
<pre><code>location ~ "^/wp-content/uploads/(.*)$" {
    rewrite ^/wp-content/uploads(/.*\.\w+)$ /index.php?jvm_protected_media_file=$1;
}
</code></pre>
<h3>Hooks</h3>
<p>Without a custom hook all file access will be disabled. The user will see the 404 page for all requested files. Adding a hook is needed to handle your own file access rules. A simple example that could go into your functions.php:</p>
<pre><code>function my_file_access_rule($file_info) {
    // Implement your own logic here
    $userHasAccess = true;

    if($userHasAccess) {
        // Send the file output if users has access to the file
        JVM_Protected_Media::send_file_output($file_info['path']);
    }
}

add_action( 'jvm_protected_media_file', 'my_file_access_rule');
</code></pre>
<p>The jvm_protected_media_file action has one parameter with the following file information:</p>
<pre><code>Array
(
    [id] => id_of_the_file
    [url] => full/url/to/your/file
    [path] => full/path/to/your/file
    [is_resized_image] => bool (true if the requested file is a image thumbnail or resized version of an image)
)
</code></pre>
<h3>Actions</h3>
<p>Available actions:</p>
<ul>
<li>jvm_protected_media_loaded (fires as soon as the plugin is loaded)</li>
<li>jvm_protected_media_file (fires when a file is requested)</li>
</ul>
<h3>Functions</h3>
<p>To send the output of a file to you can call:</p>
<pre><code>JVM_Protected_Media::send_file_output($fullPathToFile)
</code></pre>


JVM Protected Media

Restrict access to all your media files and implement your own custom file access rules.

Minor

<p>Simple Google reCAPTCHA will protect your WordPress! You have choice between default v2 Checkbox and v3 (like invisible reCAPTCHA).</p>
<p>No more spam comments and brute-force attacks against user accounts. Small plugin, only necessary code – no ads or tracking!</p>
<p>Google reCAPTCHA verification will be required only for not logged in users.</p>
<p>User, who newly setup the keys, will see (max for 10 days) emergency reCAPTCHA deactivate link – don’t need FTP access to disable Simple Google reCAPTCHA in case of emergency now.</p>
<h4>What is protected with reCAPTCHA?</h4>
<ul>
<li>Login form</li>
<li>Registration form</li>
<li>Reset password form</li>
<li>Comment form</li>
<li>New password form</li>
</ul>
<h4>Thank you!</h4>
<p>Thanks all of you, who are using this plugin, I really appreciate it!</p>
<p>If you write me (on support forum etc.), be patient, please. I work on this plugin in my free time, it’s only my hobby.</p>


Simple Google reCAPTCHA

Simply protect your WordPress against spam comments and brute-force attacks thanks to Google reCAPTCHA v3 or v2 Checkbox for free and without ads!

JVM Protected Media vs Simple Google reCAPTCHA