Title: BF Secret File Downloader Author: BREADFISH Published: September 20, 2025 Last modified: September 20, 2025 --- Search plugins ![](https://ps.w.org/bf-secret-file-downloader/assets/icon-256x256.png?rev=3364860) # BF Secret File Downloader By [BREADFISH](https://profiles.wordpress.org/breadfish/) [Download](https://downloads.wordpress.org/plugin/bf-secret-file-downloader.1.0.1.zip) * [Details](https://wordpress.org/plugins/bf-secret-file-downloader/#description) * [Reviews](https://wordpress.org/plugins/bf-secret-file-downloader/#reviews) * [Installation](https://wordpress.org/plugins/bf-secret-file-downloader/#installation) * [Development](https://wordpress.org/plugins/bf-secret-file-downloader/#developers) [Support](https://wordpress.org/support/plugin/bf-secret-file-downloader/) ## Description BF Secret File Downloader is a WordPress plugin that automatically creates secure directories and allows you to manage files within them. The plugin creates protected storage areas automatically and provides comprehensive file management, directory management, and download functionality with advanced access control. #### Features * **Automatic Secure Directory Creation**: System automatically creates protected directories with unique names * **File Management**: Browse, upload, and manage files in secure directories * **Download Control**: Secure download functionality with access control * **Access Control**: Multiple authentication methods including WordPress login and simple password * **Directory Management**: Organize files in automatically created protected directories * **i18n Ready**: Translation ready with Japanese and English support #### Authentication Methods * WordPress user login (with role-based access) * Simple password protection #### Use Cases * Private document distribution * Member-only file downloads * Protected resource sharing ### Security This plugin implements several security measures: * Automatic secure directory creation with unique names * Protected directories with .htaccess and index.php files to prevent direct access * Nonce verification for all admin actions * Input sanitization and validation * Path traversal protection * Access control verification * Direct file access prevention * Program code file upload blocking (PHP, JS, Python, etc.) * Hidden file and dangerous file pattern filtering * Secure file upload and download handling ### Support For support and feature requests, please visit the plugin’s support forum. ### Donate If you find this plugin useful, please consider making a donation to support its development. [Donate via Square](https://square.link/u/Kl16kA0b) ## Screenshots [⌊Admin file list page showing protected files⌉⌊Admin file list page showing protected files⌉[ Admin file list page showing protected files [⌊Settings page with authentication options⌉⌊Settings page with authentication options⌉[ Settings page with authentication options [⌊Frontend download interface⌉⌊Frontend download interface⌉[ Frontend download interface ## Installation 1. Activate the plugin through the ‘Plugins’ screen in WordPress. 2. The plugin automatically creates a secure directory on activation. 3. Use the BF Secret File Downloader->Settings screen to configure authentication methods. 4. Access the File List page to start uploading and managing files in the secure directory. 5. Share the generated download URL with users who need access to the files. ## FAQ ### What file types are supported? The plugin supports most common file types including documents, images, archives, and media files. For security reasons, program code files are blocked, including PHP, JavaScript, Python, shell scripts, and other executable file types. ### How secure is the download functionality? The plugin implements multiple security layers including nonce verification, user authentication, and sanitized file paths to prevent unauthorized access. ### How does the automatic directory creation work? The plugin automatically creates secure directories with unique names when activated. These directories are protected with .htaccess and index.php files to prevent direct access and have unique names for additional security. ### Is it compatible with multisite? Currently, the plugin is designed for single-site installations. ## Reviews There are no reviews for this plugin. ## Contributors & Developers “BF Secret File Downloader” is open source software. The following people have contributed to this plugin. Contributors * [ BREADFISH ](https://profiles.wordpress.org/breadfish/) “BF Secret File Downloader” has been translated into 1 locale. Thank you to [the translators](https://translate.wordpress.org/projects/wp-plugins/bf-secret-file-downloader/contributors) for their contributions. [Translate “BF Secret File Downloader” into your language.](https://translate.wordpress.org/projects/wp-plugins/bf-secret-file-downloader) ### Interested in development? [Browse the code](https://plugins.trac.wordpress.org/browser/bf-secret-file-downloader/), check out the [SVN repository](https://plugins.svn.wordpress.org/bf-secret-file-downloader/), or subscribe to the [development log](https://plugins.trac.wordpress.org/log/bf-secret-file-downloader/) by [RSS](https://plugins.trac.wordpress.org/log/bf-secret-file-downloader/?limit=100&mode=stop_on_copy&format=rss). ## Changelog #### 1.0.1 * Fix: Removed dangerous htmlspecialchars_decode() usage for improved security * Fix: Removed unnecessary inline script tag from admin interface * Fix: Added proper translation support for directory name validation messages * Improvement: Updated PHPUnit tests to match current implementation * Maintenance: Removed temporary .bak files from distribution #### 1.0.0 * Initial release * Automatic secure directory creation * File management functionality in protected directories * Upload and download control with authentication * Multiple authentication methods (WordPress login, simple password) * i18n support for Japanese and English ## Meta * Version **1.0.1** * Last updated **9 months ago** * Active installations **30+** * WordPress version ** 6.8 or higher ** * Tested up to **6.8.5** * PHP version ** 7.4 or higher ** * Languages * [English (US)](https://wordpress.org/plugins/bf-secret-file-downloader/) and [Japanese](https://ja.wordpress.org/plugins/bf-secret-file-downloader/). * [Translate into your language](https://translate.wordpress.org/projects/wp-plugins/bf-secret-file-downloader) * Tags * [download](https://wordpress.org/plugins/tags/download/)[file manager](https://wordpress.org/plugins/tags/file-manager/) [security](https://wordpress.org/plugins/tags/security/) * [Advanced View](https://wordpress.org/plugins/bf-secret-file-downloader/advanced/) ## Ratings No reviews have been submitted yet. [Your review](https://wordpress.org/support/plugin/bf-secret-file-downloader/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/bf-secret-file-downloader/reviews/) ## Contributors * [ BREADFISH ](https://profiles.wordpress.org/breadfish/) ## Support Got something to say? Need help? [View support forum](https://wordpress.org/support/plugin/bf-secret-file-downloader/) ## Donate Would you like to support the advancement of this plugin? [ Donate to this plugin ](https://square.link/u/Kl16kA0b)