Freemius

Jory Hogeveen

Joachim Jensen

DEV Institute

Restrict User Access is a fast and simple Membership Plugin for WordPress. Restrict your content in minutes, NOT hours.
Quickly set up a paid membership site where your users can get different levels such as Platinum, Gold, or Free. Then, grant those levels when a user purchases a product in WooCommerce.
<h3>👥 Unlimited Access Levels</h3>
Users can have multiple levels, and you control how long memberships should last. When unauthorized users try to access restricted content, you can redirect them to another URL or display a teaser.
<h3>⚡ Level Membership Automations</h3>
Automatically add levels to your users based on something they do (Triggers) or something they are (Traits):
<ul>
<li>User Registration</li>
<li>User Roles</li>
<li>Logged-in or Guests</li>
<li>WooCommerce Purchases</li>
<li>Easy Digital Downloads Purchases</li>
<li>BuddyPress Member Types</li>
<li>GiveWP Donations</li>
</ul>
<h3>🔒 Contextual Content Protection</h3>
Prevent unauthorized users from visiting your posts, pages, or categories. You can even combine the conditions: protect all posts tagged “Premium” written by a select author.
The following Access Conditions are available out of the box:
<ul>
<li>Posts, Pages & Custom Post Types</li>
<li>Content with Tags, Categories, or Custom Taxonomies</li>
<li>Content written by select Authors</li>
<li>Page Templates</li>
<li>Blog Page & Post Type Archives</li>
<li>Author Archives</li>
<li>Taxonomy Archives</li>
<li>Front Page, Search Results, 404 Not Found Page</li>
<li>bbPress Profiles, Forums & Topics</li>
<li>BuddyPress Profile Sections</li>
<li>Languages (Polylang, qTranslate X, TranslatePress, Transposh, Weglot, WPML)</li>
<li>Pods Pages</li>
</ul>
Note that Access Conditions do not apply to content displayed in lists.
<h3>✅ Grant & Deny Capabilities</h3>
The easy-to-use WordPress User Manager gives you full control over the capabilities the members should or shouldn’t have. Access Level Capabilities will override the permissions set by roles or other plugins.
<h3>👁️ Hide Admin Bar & Nav Menu Visibility</h3>
Disable the admin bar for select levels and control what menu items members can see. You can even hide any widget area created with <a href="https://dev.institute/wordpress-sidebars/?utm_source=readme&utm_medium=referral&utm_content=section&utm_campaign=rua" rel="nofollow ugc">Content Aware Sidebars</a>
<h3>🤖 Restrict Content from Other Plugins</h3>
Restrict User Access autodetects Custom Post Types and Taxonomies created by any plugin or theme. Built-in support for some of the most popular WordPress plugins means that you e.g. can restrict access to bbPress forums or multilingual content.
<ul>
<li>bbPress</li>
<li>BuddyPress</li>
<li>Easy Digital Downloads</li>
<li>Pods</li>
<li>Polylang</li>
<li>TranslatePress</li>
<li>WooCommerce</li>
<li>Weglot</li>
<li>WPML</li>
<li>and more …</li>
</ul>
<h3>🛡️ WordPress Security Enhancements</h3>
<ul>
<li>WP REST API Content Protection 
Enforces PoLA to minimize attack surfaces and stop threat actors from harvesting your data</li>
<li>How to display content in lists 
Display excerpts only or hide content when post types are displayed in blog, archives, search results, lists, etc.</li>
</ul>
<h3>📑 Restrict Content with Shortcodes</h3>
Fine-tune content visibility in your posts or pages by adding simple shortcodes:
<pre><code>[restrict level="platinum"]
This content can only be seen by users with Platinum level or above.
[/restrict]

[restrict level="!platinum"]
This content can only be seen by users without Platinum level or above.
[/restrict]

[restrict role="editor,contributor" page="1"]
This content can only be seen by editors and contributors.
Other users will see content from page with ID 1.
[/restrict]

[login-form]
</code></pre>
<h3>👋 Developer-friendly API</h3>
Restrict User Access makes it super easy for developers to programmatically customize WordPress access control by adding a few lines of code to theme templates.
<h4>Example – Add level to current user</h4>
<pre><code>rua_get_user()->add_level($level_id);
</code></pre>
<h4>Example – Check if current user has an active level membership</h4>
<pre><code>if(rua_get_user()->has_level($level_id)) {
 //show restricted content
} else {
 //show content if unauthorized
}
</code></pre>
<a href="https://dev.institute/docs/restrict-user-access/developer-api/?utm_source=readme&utm_medium=referral&utm_content=section&utm_campaign=rua" rel="nofollow ugc">View full RUA PHP API documentation here.</a>
<h3>🎛️ Premium Add-ons for Restrict User Access</h3>
Complete your WordPress membership site with these powerful extensions
<ul>
<li><a href="https://dev.institute/products/category/restrict-user-access/?utm_source=readme&utm_medium=referral&utm_content=acf&utm_campaign=rua" rel="nofollow ugc">ACF Restriction</a> 
Restrict content that contain data from Advanced Custom Fields plugin</li>
<li><a href="https://dev.institute/products/category/restrict-user-access/?utm_source=readme&utm_medium=referral&utm_content=date&utm_campaign=rua" rel="nofollow ugc">Date Restriction</a> 
Restrict content based on the time it was published</li>
<li><a href="https://dev.institute/products/category/restrict-user-access/?utm_source=readme&utm_medium=referral&utm_content=metabox&utm_campaign=rua" rel="nofollow ugc">Meta Box Restriction</a> 
Restrict content that contain data from Meta Box plugin</li>
<li><a href="https://dev.institute/products/category/restrict-user-access/?utm_source=readme&utm_medium=referral&utm_content=timelock&utm_campaign=rua" rel="nofollow ugc">Timelock</a> 
Determine when to enable or disable select Access Conditions</li>
<li><a href="https://dev.institute/products/category/restrict-user-access/?utm_source=readme&utm_medium=referral&utm_content=url&utm_campaign=rua" rel="nofollow ugc">URL Restriction</a> 
Restrict content based on the WordPress URL, with wildcard support</li>
<li><a href="https://dev.institute/products/category/restrict-user-access/?utm_source=readme&utm_medium=referral&utm_content=visibility&utm_campaign=rua" rel="nofollow ugc">Visibility Control</a> 
Hide content from blog, search results, archives, custom lists, WP REST API, and more</li>
</ul>

Restrict User Access – Ultimate Membership & Content Protection

Create Access Levels and restrict any post, page, category, etc. Supports bbPress, BuddyPress, WooCommerce, WPML, and more.

miniOrange

<a href="https://plugins.miniorange.com/wordpress-media-restriction" rel="nofollow ugc">WordPress Prevent files/ folders</a> access provides the easiest way to protect WordPress files from public users so that your wordpress media library can be accessed only by WordPress logged in users or users with specific roles/capabilities. Your ebooks, pdfs, other important files, etc., can be protected from google indexing so that data is protected from getting stolen. Control users access to media library, Control users access to the WordPress upload folder or sub folders, and restrict all the files published on your WordPress site.
For restricted Content you can choose to redirect users to 403 forbidden page, your custom page, WordPress login page, SSO login page (if you are using OAuth or SAML SSO).
No change required or no manual work needed to create a private link to protect your wordpress media file. Our plugin takes care of your media library or via Media, Pages, or Posts.
We support a level of security where you can choose either cookie-based restriction or session-based restriction. 
Also, we support Apache and Nginx servers to prevent direct access to the WordPress media library and therefore protect the media library for public or restricted users.
It prevents private download of the media files from public access and only the logged-in users or specific user roles can access and download the wordpress media files.
We also support media/files/folders Restriction based on NFT holding in the user crypto wallet. We support any level of customization according to your requirement.
<h3>File-Based Protection</h3>
WordPress Prevent file/folder access is developed to allow you to protect wordpress media file in your customized way. It will prevent direct access from media library based on their extension.
<pre><code>You can protect file types below:

* Images - Every type of image files can be protected. eg: jpeg, jpg, gif, png, bmp, webp, pfg, ico, psd, etc.
* Videos - Every type of video files can be protected. eg: mp4, m4a, m4v, f4v, f4a, m4b, m4r, f4b, mov, 3gp, avi etc.
* Documents - Every type of document files can be protected. eg: doc, docx, html, pdf, txt, ppt, xls, xlsx, pptx, odt.
</code></pre>
<h3>Redirect</h3>
WordPress Prevent file/folder access provides redirect options. This allow you to redirect the restricted users to any WordPress page of your website.
<ul>
<li>403 forbidden page (DEFAULT) – Users will be shown 403 forbidden pages with a restricted access message.</li>
<li>Display custom page – We can redirect users to any WordPress custom page when they try to access restricted files or folders.</li>
<li>WordPress login – Users will be redirected to the WordPress default login page.</li>
<li>IDP login – Users will redirect to the selected IDP (SAML/OAuth) login page and after IdP authentication they can see the restricted content.</li>
</ul>
<h3>Private Directory/Protected folder</h3>
<ul>
<li>Our plugin also gives you a <a href="https://plugins.miniorange.com/wordpress-media-restriction#mediarestriction" rel="nofollow ugc">Private Directory</a> where you can add files of all extension types and restrictions will be applied to all files inside the private directory.</li>
</ul>
<h3>Membership Based Media Restriction.</h3>
<ul>
<li>WordPress Prevent files/ folder allows you to secure media library and control wp-content/uploads access based on the membership purchased by the user.</li>
</ul>
<h3>Folder Based Protection</h3>
<ul>
<li>WordPress Prevent files/ folders access allows you to protect your folders too, the wp-content or uploads folder where all the wordpress media files like images, videos, and document files are stored will also be protected.</li>
<li>Users have the option to protect a particular month’s media files or sub folder in uploads directory..</li>
<li>User-Based Restriction – A particular user can access only a particular folder. (Admin would be able to access all the folders)</li>
<li>Role Base folder access – Uploads folder or subfolders can be restricted for public access and allowed folder access to users with specific role. (Admin would be able to access all the folders)</li>
</ul>
We support <a href="https://www.learndash.com/" rel="nofollow ugc">LearnDash</a> and other LMS to restrict files and folders according to different groups and specific user roles.
You can customize the restriction rules and use them as per your needs.
This functionality operates at the server level, thus if the Apache server rules don’t work, or also the WP Engine, Siteground, and other servers like this run on an Nginx server, which requires the use of Nginx configuration rules. If you face any issues please email us at info@xecurify.com or oauthsupport@xecurify.com. We would recommend you to please ensure your PHP server and rules first which will work on your server before purchasing it or else contact us we will help you to set up the plugin according to your requirements on your site.
FREE VERSION FEATURES
<ul>
<li>WordPress Prevent Files/Folder Access allows you to protect your wordpress media files, libraries and folders from public access.</li>
<li>File Extensions Restricted – Can restrict five standard extensions (.png, .jpg, .gif, .pdf, .doc).</li>
<li>Redirection of non-logged-in users: Can redirect non-logged-in users to any page of your WordPress site.</li>
<li>Protected Folder: Can keep selected files in a protected folder and they will be restricted from the public users.</li>
<li>Supported Servers: You can configure the plugin on the Apache server easily.</li>
<li>Security Level Base: Plugin will check if a user is logged in or not through Cookie.</li>
</ul>
PREMIUM VERSION FEATURES
<ul>
<li>WordPress Prevent Files/Folder Access allows you to protect your media files and folders from public access.</li>
<li>File Extensions Restricted – Media restricton to unlimited extensions is supported.</li>
<li>Redirection of non-logged-in users: You can redirect the non-logged-in users to any page of your WordPress site or to the WordPress login page.</li>
<li>Folder Restriction: Can restrict access to wordpress media library from non-logged-in users. </li>
<li>Protected Folder: Can store unlimited files in a private directory/protected folder and they will be restricted from the public users and indexing on search engine.</li>
<li>Supported Servers: You can configure plugins on Apache and NGINX servers easily.</li>
<li>Security Level Base: Plugin will check if a user is logged in or not through Cookie.</li>
</ul>
ENTERPRISE VERSION FEATURES
<ul>
<li>WordPress Prevent Files/Folder Access allows you to protect your WordPress media files and folders from public access.</li>
<li>File Extensions Restricted – Media restriction to unlimited extensions is supported.</li>
<li>Redirection of non-logged-in users: You can redirect non-logged-in users to any page of your WordPress site or to the WordPress login page or to SAML/OAuth login page.</li>
<li>Folder Restriction: Can restrict access to the WordPress uploads folder or any other folder in your WordPress instance from non-logged-in users by enabling user access restrictions. </li>
<li>Protected Folder: Can keep unlimited files in a protected folder and they will be restricted from the public users to prevent direct access to specific user roles.</li>
<li>Supported Servers: You can configure plugins on Apache and NGINX servers easily.</li>
<li>Security Level Base: Plugin will check if a user is logged in or not through Cookie or Session.</li>
</ul>
ALL INCLUSIVE VERSION FEATURES
<ul>
<li>WordPress Prevent Files/Folder Access allows you to protect your WordPress media files and folders from public access.</li>
<li>File Extensions Restricted – Media restricton to unlimited extensions is supported.</li>
<li>Redirection of non-logged-in users: You can redirect non-logged-in users to any page of your WordPress site or to the WordPress login page or to SAML/OAuth login page.</li>
<li>Folder Restriction: Can restrict access to the WordPress uploads folder or any other folder in your WordPress instance from non-logged-in users by enabling user access restrictions. </li>
<li>Protected Folder: Can keep unlimited files in a protected folder and they will be restricted from the public users to prevent direct access to specific user roles.</li>
<li>Supported Servers: You can configure plugins on Apache and NGINX servers easily.</li>
<li>Security Level Base: Plugin will check if a user is logged in or not through Cookie or Session.</li>
<li>Media Management: You can create custom folders and subfolders to organize your media library and control access of the created folders and subfolders.</li>
<li>Download Logs: You can view logs for uploading, downloading, and deleting files.</li>
<li>Membership Based Media Restriction: Compatible with Paid Memberships Pro, ARMember Membership, WordPress Membership, and WooCommerce Subscriptions.</li>
</ul>
DOCUMENTATION AND SUPPORT
<ul>
<li>For documentation go to our <a href="https://plugins.miniorange.com/wordpress-media-restriction#mediarestriction" rel="nofollow ugc">Documentation</a></li>
<li>If you have any questions or want to request new features, contact us via email at <a href="mailto:oauthsupport@xecurify.com" rel="nofollow ugc">oauthsupport@xecurify.com</a></li>
</ul>

Prevent files / folders access

Prevent public access to WordPress files and folders. Protect downloads from public access, Role-based folder access, and User base folder access.

Restrict User Access – Ultimate Membership & Content Protection vs Prevent files / folders access