We needed a closed member area which only certain user roles are allowed to access and where we offer downloads/files only users with the corresponding/correct user role are allowed to download.
Our solution was pretty straightforward: We were able to configure a custom post type, to which only certain user roles have access to. They can login via the standard login form of the wp admin. After they logged in successfully they are redirected to the member area their user role is assigned to.
–> So the only thing missing was the functionality the plugin “Prevent Direct Access” provides out of the box: Protect WordPress files.
And it just works, we’re very happy to have found such a great plugin.
Had some issues with the registration of the license, support was very friendly and helped right away.
]]>Thank you for viewing my question. Is it possible to protect my images and video from being downloaded through Firefox’s ‘show site information’ option?
This allows for each media object to be viewed as files and saved from a dialog window.
I used plugins and applied protection to my uploads folder and yet I can still download them from firefox.
]]>Even so, a malicious bot somehow changed a read.me file in one of my plug-ins. I fixed it but now I want to prevent that. I read all about htaccess file and it may as well be an alien hieroglyphics.
It cannot recognize me as the admin by my IP because it will only see the firewall’s IP.
I would like to :
1) protect my plugins.
2) protect my wp-admin.php
3) Protect my wp-admin files.
4) Not screw up my site doing this.
Will this work?
<file wp-config.php>
order allow, deny
deny from all
</files>Will it still let me work on my own site?
How do I protect my plugins from everybody else but me?
Is it possible to protect my whole wp-content folder?
I thought about doing this with robots.txt file but would a malicious bot even read that? Or would that just be a joke?
I love WordFence and value it, but it does not seem like it is capable of protecting these file areas. Shouldn’t this be somehow integrated into WordPress itself? Oh, well. It isn’t. So, now what?
I value your kind advice.
]]>