外掛說明
BF Secret File Downloader is a WordPress plugin that automatically creates secure directories and allows you to manage files within them. The plugin creates protected storage areas automatically and provides comprehensive file management, directory management, and download functionality with advanced access control.
Features
- Automatic Secure Directory Creation: System automatically creates protected directories with unique names
- File Management: Browse, upload, and manage files in secure directories
- Download Control: Secure download functionality with access control
- Access Control: Multiple authentication methods including WordPress login and simple password
- Directory Management: Organize files in automatically created protected directories
- i18n Ready: Translation ready with Japanese and English support
Authentication Methods
- WordPress user login (with role-based access)
- Simple password protection
Use Cases
- Private document distribution
- Member-only file downloads
- Protected resource sharing
Security
This plugin implements several security measures:
- Automatic secure directory creation with unique names
- Protected directories with .htaccess and index.php files to prevent direct access
- Nonce verification for all admin actions
- Input sanitization and validation
- Path traversal protection
- Access control verification
- Direct file access prevention
- Program code file upload blocking (PHP, JS, Python, etc.)
- Hidden file and dangerous file pattern filtering
- Secure file upload and download handling
Support
For support and feature requests, please visit the plugin’s support forum.
Donate
If you find this plugin useful, please consider making a donation to support its development.
螢幕擷圖
Admin file list page showing protected files 
Settings page with authentication options 
Frontend download interface
安裝方式
- Activate the plugin through the ‘Plugins’ screen in WordPress.
- The plugin automatically creates a secure directory on activation.
- Use the BF Secret File Downloader->Settings screen to configure authentication methods.
- Access the File List page to start uploading and managing files in the secure directory.
- Share the generated download URL with users who need access to the files.
常見問題集
-
What file types are supported?
-
The plugin supports most common file types including documents, images, archives, and media files. For security reasons, program code files are blocked, including PHP, JavaScript, Python, shell scripts, and other executable file types.
-
How secure is the download functionality?
-
The plugin implements multiple security layers including nonce verification, user authentication, and sanitized file paths to prevent unauthorized access.
-
How does the automatic directory creation work?
-
The plugin automatically creates secure directories with unique names when activated. These directories are protected with .htaccess and index.php files to prevent direct access and have unique names for additional security.
-
Is it compatible with multisite?
-
Currently, the plugin is designed for single-site installations.
使用者評論
這個外掛目前沒有任何使用者評論。
參與者及開發者
變更記錄
1.0.1
- Fix: Removed dangerous htmlspecialchars_decode() usage for improved security
- Fix: Removed unnecessary inline script tag from admin interface
- Fix: Added proper translation support for directory name validation messages
- Improvement: Updated PHPUnit tests to match current implementation
- Maintenance: Removed temporary .bak files from distribution
1.0.0
- Initial release
- Automatic secure directory creation
- File management functionality in protected directories
- Upload and download control with authentication
- Multiple authentication methods (WordPress login, simple password)
- i18n support for Japanese and English