BF Secret File Downloader is a WordPress plugin that automatically creates secure directories and allows you to manage files within them. The plugin creates protected storage areas automatically and provides comprehensive file management, directory management, and download functionality with advanced access control.

Features

Automatic Secure Directory Creation: System automatically creates protected directories with unique names
File Management: Browse, upload, and manage files in secure directories
Download Control: Secure download functionality with access control
Access Control: Multiple authentication methods including WordPress login and simple password
Directory Management: Organize files in automatically created protected directories
i18n Ready: Translation ready with Japanese and English support

Authentication Methods

WordPress user login (with role-based access)
Simple password protection

Use Cases

Private document distribution
Member-only file downloads
Protected resource sharing

Security

This plugin implements several security measures:

Automatic secure directory creation with unique names
Protected directories with .htaccess and index.php files to prevent direct access
Nonce verification for all admin actions
Input sanitization and validation
Path traversal protection
Access control verification
Direct file access prevention
Program code file upload blocking (PHP, JS, Python, etc.)
Hidden file and dangerous file pattern filtering
Secure file upload and download handling

Support

For support and feature requests, please visit the plugin’s support forum.

Donate

If you find this plugin useful, please consider making a donation to support its development.

Donate via Square

Installation

Activate the plugin through the ‘Plugins’ screen in WordPress.
The plugin automatically creates a secure directory on activation.
Use the BF Secret File Downloader->Settings screen to configure authentication methods.
Access the File List page to start uploading and managing files in the secure directory.
Share the generated download URL with users who need access to the files.

Frequently Asked Questions

What file types are supported?

The plugin supports most common file types including documents, images, archives, and media files. For security reasons, program code files are blocked, including PHP, JavaScript, Python, shell scripts, and other executable file types.

How secure is the download functionality?

The plugin implements multiple security layers including nonce verification, user authentication, and sanitized file paths to prevent unauthorized access.

How does the automatic directory creation work?

The plugin automatically creates secure directories with unique names when activated. These directories are protected with .htaccess and index.php files to prevent direct access and have unique names for additional security.

Is it compatible with multisite?

Currently, the plugin is designed for single-site installations.

Review feed

No reviews available

Screenshots

Admin file list page showing protected files
Settings page with authentication options
Frontend download interface

Changelog

1.0.1

Fix: Removed dangerous htmlspecialchars_decode() usage for improved security
Fix: Removed unnecessary inline script tag from admin interface
Fix: Added proper translation support for directory name validation messages
Improvement: Updated PHPUnit tests to match current implementation
Maintenance: Removed temporary .bak files from distribution

1.0.0

Initial release
Automatic secure directory creation
File management functionality in protected directories
Upload and download control with authentication
Multiple authentication methods (WordPress login, simple password)
i18n support for Japanese and English

Back to plugins