robertoiacono

RIACO Content Protector allows you to protect any part of your WordPress content using a shortcode. 
Unlike the built-in post password protection, this plugin protects only what you wrap, not the whole post.
Perfect for:
<ul>
<li>Protecting premium blocks of content </li>
<li>Protecting guides, downloads, links, or sensitive sections </li>
<li>Paywall-style snippets</li>
</ul>
<h3>Features</h3>
<ul>
<li>Protect only specific content inside posts/pages </li>
<li>Uses a minimal shortcode: 
 [riaco_content_protector] Hidden text here [/riaco_content_protector]</li>
<li>Global password stored in plain text, like WordPress page passwords.</li>
<li>AJAX-based form — no page reload </li>
<li>Unlocks all protected sections on the site after correct password </li>
<li>Optional cookie persistence (remember unlocked content for a configurable number of days) </li>
<li>Secure implementation using nonces, hashed tokens, and transients </li>
</ul>
Important:
<ul>
<li>The global password is stored in plain text, just like WordPress page passwords. It can be read by user with ‘manage_options’ ability.</li>
<li>If the global password or “Remember Unlocked” duration is changed in settings, all existing unlock cookies are invalidated. Users will need to re-enter the new password to access protected content.</li>
</ul>
<h3>How It Works</h3>
Wrap content you want to protect:
<pre><code>[riaco_content_protector]
This text will be hidden until the visitor enters the password.
[/riaco_content_protector]
</code></pre>
Set the global password under:
Settings > Content Protector
Visitors will see a modern, styled form. 
After entering the correct password:
<ul>
<li>The content unlocks immediately </li>
<li>All other protected areas unlock automatically </li>
<li>An optional cookie can keep everything unlocked for a chosen number of days </li>
</ul>
<h3>Security</h3>
<ul>
<li>Nonces on every request </li>
<li>Secure HMAC token for cookie authentication </li>
<li>Sanitized shortcode attributes </li>
<li>Escaped output </li>
<li>No sensitive data stored in cookies </li>
<li>Global password stored in plain text, like WordPress page passwords. </li>
</ul>
<h3>Cookie</h3>
We use this cookie to understand if user unlocked the content: <code>riaco_cp_unlocked_global</code>.
<h3>Style</h3>
You can style the content protector box.
It has this class: <code>.riaco-cp--container</code>, so you can add in your <code>style.css</code>:
<pre><code>.riaco-cp--container {
 background: #f8f9fa;
 padding: 20px;
 border: 1px solid #ddd;
 border-radius: 6px;
}
</code></pre>
You can replace button classes using:
<pre><code>add_filter( 'riaco_cp_button_classes', function( $classes ) {
 return 'button my-custom-button-class';
});
</code></pre>
Or you can remove button classes:
<pre><code>add_filter( 'riaco_cp_button_classes', function( $classes ) {
 // Remove wp-element-button
 return str_replace( 'wp-element-button', '', $classes );
});
</code></pre>
<h3>License</h3>
This plugin is licensed under GPLv2 or later.

RIACO Content Protector

Protect any portion of your WordPress content using a simple shortcode. Includes global password, AJAX unlock, and site-wide instant access.

Protect Uploads

The uploads directory is where the files of the WordPress library are stored. Unfortunelty, this directory is not protected. A person who wants to see all your library could list it instantly going to : http://yourwebsite/wp-content/uploads . This plugin will hide the content by adding an index.php file on the root of your uploads directory or by setting an htaccess which will return a 403 error (Forbidden Access).
<ul>
<li>Depending on your server setting, the htaccess option could be disabled.</li>
</ul>
New Features in Version 0.6.0:
<ul>
<li>Image Watermarking: Add text watermarks to your uploaded images with customizable position, opacity, and font size.</li>
<li>Right-Click Protection: Prevent users from right-clicking to download or save your images.</li>
<li>Password Protection: Secure individual media files with passwords. Multiple passwords can be set for each file with custom labels.</li>
<li>Access Logging: Track who accesses your password-protected files with detailed logs including IP address and user agent.</li>
</ul>
Available languages:
<ul>
<li>English</li>
<li>Français</li>
<li>Español</li>
<li>Italian (thanks to Marko97)</li>
</ul>

Do not download. The plugin has been changed not too long ago and it now infects your wordpress installation, and possible spreads itself to other sites if you are on shared hosting.

It's a virus

Protect your uploads directory. Prevent browsing, add watermarks, disable right-click, and password-protect files. For more information, visit protect …

RIACO Content Protector vs Protect Uploads