Easily improve site security with WordPress Hardening, Two-Factor Authentication (2FA), Login Protection, Vuln...
Protect attachment files from direct access using powerful and flexible restrictions. Offer safe download links for any file in your uploads folder.
Media Vault is a WordPress plugin designed to protect attachment files within your uploads folder. It secures files by implementing customizable permission checks, ensuring that only authorized users can access them. You can manage file protection settings through the Media Uploader, the Media Vault metabox, or bulk actions in the Media Library.
This plugin is suitable for users who need to control access to downloadable files on their WordPress site, particularly those running a multisite setup. It allows for the creation of secure download links using a shortcode, making it easier to share files while maintaining security.
Best for: This plugin suits WordPress users who require secure file access management, especially in a multisite environment.
What it does well
Where it falls short
Media Vault offers essential file protection features for WordPress users, though its age may limit confidence in long-term support and updates.
Max GJ Panas's own description of Media Vault, lightly tidied.
Media Vault cordons off a section of your WordPress uploads folder and secures it, protecting all files within by passing requests for them through a powerful, flexible and completely customizable set of permission checks.
After activating the plugin, to protect attachment files with Media Vault you can:
By default the only permission check that the plugin does on media files is that the user requesting them be logged in. You can change this default behavior from the ‘Media Settings’ page in the ‘Settings’ menu of the WordPress Admin. You can also change the restrictions set on attachments on an individual basis by means of either the Media Vault metabox on the ‘Edit Media’ page or the Media Vault Protection Settings fields in the new Media Modal.
You can also write your own custom restrictions using the mgjp_mv_add_permission() function. See this support question for more details.
Creating a cross-browser compatible download link for a file is a harder task than might be expected. Media Vault handles this for you, and it does so while preserving all the file security features discussed earlier like blocking downloads to people who should not have access to the file.
The download links are available through a simple shortcode that you can use in your post/page editor screen:
[mv_dl_links ids="1,2,3"]
where ‘ids’ are the comma separated list of attachment ids you would like to make available for download in the list.
Note: Plugin comes with styles ready for WordPress 3.8+!
Note: Now supports WordPress MultiSite!
Other plugins for securing a site.
Easily improve site security with WordPress Hardening, Two-Factor Authentication (2FA), Login Protection, Vuln...
Firewall, Malware Scanner, Two Factor Auth, and Comprehensive Security Features, powered by our 24-hour team....
The best anti-spam protection to block spam comments and spam in a contact form. The most trusted antispam sol...
Loginizer is a WordPress security plugin which helps you fight against bruteforce attacks.
Enable SVG uploads and sanitize them to stop XML/SVG vulnerabilities in your WordPress website.
Protect your website investment with All-In-One Security (AIOS) – a comprehensive and easy to use security plu...