aFFirmFirst Cloud Library

Description

Stop image theft on your WordPress site. aFFirmFirst Cloud Library connects WordPress to your aFFirmFirst secure image vault. Your originals are never stored in WordPress and never exposed in the page source. Instead, images are streamed on demand from the aFFirmFirst cloud and painted to an HTML canvas, so they can’t be right-clicked, dragged, downloaded, hot-linked, or scraped by bots.

It works exactly like the WordPress images you already know — Featured Images, galleries, the block editor, the Classic Editor, and WooCommerce products — but every image is protected automatically.

Why protect images this way?

  • No <img src> to copy — images render on a canvas, so there is no file URL to steal
  • Encrypted, one-time, short-lived delivery from the cloud (AES-256)
  • Right-click, drag-and-drop, and keyboard-save are blocked
  • Forensic and visible watermarking deter and trace unauthorized use
  • Domain locking — your images only render on the sites you authorize

Rendering Modes

  • SDK Canvas (default) — Maximum protection with client-side decryption and canvas rendering
  • Iframe Embed — High protection in a sandboxed iframe with the full SDK feature set
  • Signed URL — Direct signed image URL (shortcode override only; for email/RSS compatibility)

Key Features

  • Vault browser in the editor — Browse and insert your secure vault images without leaving WordPress
  • Upload to vault — Send images from WordPress straight into your encrypted vault
  • Featured Images — Set any protected vault image as a post or page featured image
  • Gutenberg blocks — A single “Protected Image” block and a “Protected Gallery” block with grid, masonry, slider, and justified layouts, plus lightbox and captions
  • Classic Editor support — A TinyMCE toolbar button to insert vault images in the classic editor
  • Image Scanner — Scan your existing posts, pages, and products for unprotected images, then bulk-upload and auto-replace them with protected versions
  • WooCommerce support — Protected product images and product galleries
  • [affirm_protect] shortcode — Manual insertion anywhere, with a per-image rendering mode override
  • SEO & social ready — Automatic signed og:image and Twitter Card URLs so previews still work for search engines and social crawlers
  • One-key setup — Connect securely with a single API key. No URLs or servers to configure

Usage

Featured Image: Open the Featured Image panel and choose “Set aFFirmFirst image” to pick a protected image from your vault.

Upload: Use the aFFirmFirst admin screen to upload new images directly to your secure vault.

Blocks: In the block editor, add the Protected Image block for a single image or the Protected Gallery block for multiple images. Galleries support grid, masonry, slider, and justified layouts with optional lightbox and captions.

Classic Editor: Use the aFFirmFirst button in the TinyMCE toolbar to insert a vault image.

Image Scanner: Open the aFFirmFirst > Scanner screen to find unprotected <img> tags in your existing content, then bulk-upload them to your vault and automatically replace them with protected versions.

Shortcode:
[affirm_protect id=”YOUR_IMAGE_ID” width=”800″ height=”600″]
[affirm_protect id=”YOUR_IMAGE_ID” mode=”iframe”]

Rendering Modes:
* sdk — Canvas-based (default, maximum protection)
* iframe — Sandboxed iframe (high protection)
* signed_url — Direct signed image URL (shortcode override only; for email/RSS compatibility)

External Services

This plugin relies on the aFFirmFirst service to store, process, and securely deliver your images. It will not function without an aFFirmFirst account and API key.

  • Frontend API (https://affirmfirst.com) — connection validation, image listing, signed-URL generation, and uploads via /api/plugin/*.
  • Secure delivery CDN (https://cdn.secured.affirmfirst.com) — SDK script, encrypted image streaming, and signed image delivery.

Data transmitted: your API key (for authentication) and any images you choose to upload. No data is sent until you enter an API key and use the plugin.

Terms of Service: https://affirmfirst.com/terms
Privacy Policy: https://affirmfirst.com/privacy

Blocks

This plugin provides 2 blocks.

  • aFFirmFirst Image
  • aFFirmFirst Gallery

Installation

  1. Upload the affirmfirst-cloud-library folder to /wp-content/plugins/, or install the ZIP via Plugins > Add New > Upload Plugin
  2. Activate the plugin through the ‘Plugins’ menu
  3. Go to aFFirmFirst in the admin sidebar
  4. Enter your API key from your aFFirmFirst Dashboard (Settings > API Keys)
  5. Click Test Connection to verify
  6. Select your preferred rendering mode

FAQ

Do I need an aFFirmFirst account?

Yes. This plugin is a connector for the aFFirmFirst service. You need an aFFirmFirst account and an API key to store, process, and deliver your protected images. You can create an account at https://affirmfirst.com.

Where are my images stored?

Your images are stored in your aFFirmFirst secure cloud vault, never in your WordPress uploads folder. WordPress only keeps lightweight references and thumbnails for the editor.

Will protected images still work for SEO and social sharing?

Yes. The plugin automatically outputs signed og:image and Twitter Card URLs so search engines and social networks can generate previews, while visitors still see the protected canvas version.

Does it work with WooCommerce?

Yes. You can use protected vault images as WooCommerce product images and in product galleries.

Can I protect images I already published?

Yes. Use the built-in Image Scanner to find unprotected images across your posts, pages, and products, then bulk-upload and replace them with protected versions.

Does it slow down my site?

The SDK is small and loaded from a CDN, and protected images are streamed on demand. Gallery assets are only loaded on pages that actually contain a gallery.

Reviews

There are no reviews for this plugin.

Contributors & Developers

“aFFirmFirst Cloud Library” is open source software. The following people have contributed to this plugin.

Contributors

Changelog

1.0.1

  • Security: shortcode and block width/height values are now strictly validated against an allow-list of CSS units, preventing arbitrary CSS injection through post content.

1.0.0

  • Initial release
  • Vault image browser and selection in the WordPress editor
  • Direct upload to the secure vault
  • SDK Canvas and Iframe rendering modes
  • Protected Image and Protected Gallery Gutenberg blocks (grid, masonry, slider, justified) with lightbox and captions
  • Classic Editor TinyMCE button for inserting vault images
  • Image Scanner with bulk-upload and auto-replace for existing unprotected images
  • Featured Image and WooCommerce product/gallery support
  • [affirm_protect] shortcode with per-image mode override
  • Signed og:image / Twitter Card support for SEO