Moves protected files from uploads\/mlp-protected\/ to uploads\/mediaknight\/ and migrates settings; files stay blocked for visitors. Back up first. On Nginx, apply the newly generated snippet and run Check server protection again.<\/p>"},"ratings":[],"assets_icons":{"icon-128x128.png":{"filename":"icon-128x128.png","revision":3743006,"resolution":"128x128","location":"assets","locale":"","width":128,"height":128},"icon-256x256.png":{"filename":"icon-256x256.png","revision":3743006,"resolution":"256x256","location":"assets","locale":"","width":256,"height":256}},"assets_banners":[],"assets_blueprints":{},"all_blocks":[],"tagged_versions":["1.0.2"],"block_files":[],"assets_screenshots":{"screenshot-1.png":{"filename":"screenshot-1.png","revision":3743006,"resolution":"1","location":"assets","locale":"","width":1440,"height":1663},"screenshot-2.png":{"filename":"screenshot-2.png","revision":3743006,"resolution":"2","location":"assets","locale":"","width":1440,"height":1000},"screenshot-3.png":{"filename":"screenshot-3.png","revision":3743006,"resolution":"3","location":"assets","locale":"","width":1280,"height":925},"screenshot-4.png":{"filename":"screenshot-4.png","revision":3743006,"resolution":"4","location":"assets","locale":"","width":1280,"height":1250},"screenshot-5.png":{"filename":"screenshot-5.png","revision":3743006,"resolution":"5","location":"assets","locale":"","width":1280,"height":900}},"screenshots":{"1":"Settings > MediaKnight: the server protection check confirms that direct links are blocked on your hosting, with the Nginx setup option and optional blocked-file branding.","2":"The one-click Protect action and protection status in the normal Media Library list.","3":"The attachment editor: choose logged-in access for a single file.","4":"What a logged-out visitor sees on a protected file's link: a privacy-safe blocked-file page in their browser language.","5":"A logged-in client downloads the protected file normally from a client portal page."}},"plugin_section":[],"plugin_tags":[1912,233,22336,222907,183913],"plugin_category":[],"plugin_contributors":[286327],"plugin_business_model":[],"class_list":["post-381615","plugin","type-plugin","status-publish","hentry","plugin_tags-access-control","plugin_tags-media-library","plugin_tags-private-files","plugin_tags-protect-pdf","plugin_tags-protect-uploads","plugin_contributors-vivango","plugin_committers-vivango"],"banners":[],"icons":{"svg":false,"icon":"https:\/\/ps.w.org\/mediaknight\/assets\/icon-128x128.png?rev=3743006","icon_2x":"https:\/\/ps.w.org\/mediaknight\/assets\/icon-256x256.png?rev=3743006","generated":false},"screenshots":[{"src":"https:\/\/ps.w.org\/mediaknight\/assets\/screenshot-1.png?rev=3743006","caption":"Settings > MediaKnight: the server protection check confirms that direct links are blocked on your hosting, with the Nginx setup option and optional blocked-file branding."},{"src":"https:\/\/ps.w.org\/mediaknight\/assets\/screenshot-2.png?rev=3743006","caption":"The one-click Protect action and protection status in the normal Media Library list."},{"src":"https:\/\/ps.w.org\/mediaknight\/assets\/screenshot-3.png?rev=3743006","caption":"The attachment editor: choose logged-in access for a single file."},{"src":"https:\/\/ps.w.org\/mediaknight\/assets\/screenshot-4.png?rev=3743006","caption":"What a logged-out visitor sees on a protected file's link: a privacy-safe blocked-file page in their browser language."},{"src":"https:\/\/ps.w.org\/mediaknight\/assets\/screenshot-5.png?rev=3743006","caption":"A logged-in client downloads the protected file normally from a client portal page."}],"raw_content":"\n
Your private page is not protecting your files.<\/strong><\/p>\n\n A WordPress page can be members-only, but the PDFs and images on it still live in the Media Library with a public uploads address. Anyone who has that direct link can open the file, share it further, and leaked links can end up in search results.<\/p>\n\n MediaKnight closes that gap. Protect a file and it moves out of the public uploads path, so the old direct link stops working for visitors. Logged-in users still open it through a WordPress access check, and protected downloads are sent with noindex headers.<\/p>\n\n You keep working in the normal Media Library: click Protect, done.<\/p>\n\n The free plugin works on its own, with no account, payment, trial expiry or file quota.<\/p>\n\n Everything described above is free and stays free: no account, quota or expiry. MediaKnight Pro is a separate add-on for sites that need more control: choose which WordPress roles can open each file, protect files in bulk, protect new uploads automatically, and share temporary, revocable links with optional click limits.<\/p>\n\n Try Pro for free \u2014 features and pricing: https:\/\/plugins.vivango.com\/mediaknight\/#plans<\/p>\n\n If Pro ends, your saved protection rules stay in place and files remain protected by the free plugin. Existing role restrictions are not broadened to all logged-in users.<\/p>\n\n Pro is distributed outside WordPress.org. The free plugin contains no Pro licensing client or locked Pro implementation and does not download\/install that extension. The optional Freemius connection and its data sharing are explained below.<\/p>\n\n WordPress serves Media Library files directly from the uploads folder. A login on the page does not apply to the file's own URL. MediaKnight moves a protected file out of that public path, so the direct link stops working for visitors while logged-in users can still open it.<\/p><\/dd>\n Yes, with a server rule. Nginx does not read .htaccess files. MediaKnight generates a site-specific snippet; your host adds it to the existing server block, validates with nginx -t and reloads. Then run Check server protection again. Without that rule, protection is not active on Nginx.<\/p><\/dd>\n After you protect a file, its old direct link no longer works for visitors. The blocked-file page does not show the file name or internal path; a refused download or direct protected path keeps status 403. Use the shown download URL or insert an image again. Existing hard-coded URLs in posts are not rewritten. Administrators get no exception to the chosen access rule.<\/p><\/dd>\n No. Manual protection, access rules, server checks and downloads remain free. There is no license server or account requirement for these functions.<\/p><\/dd>\n The plugin moves the file and its registered WordPress variants into MediaKnight recreates its own helper files automatically, but it cannot recreate your protected media: those files are stored only in Deactivation keeps protected files blocked; reactivate the base plugin to resume downloads. Uninstall restores media to their original directory and removes plugin settings, metadata and generated Apache rules. Restored files become public. Media files are never deleted by uninstall. On conflicts or interrupted moves, uninstall stops for recovery; see docs\/DEVELOPMENT.md. Remove manual Nginx rules only after successful restoration.<\/p><\/dd>\n Role selection is supplied by the separate Pro extension. Existing saved role rules remain enforced without Pro. Keep the existing restriction when saving an attachment to preserve both access and existing links. Switching to logged-in access or public explicitly broadens access.<\/p><\/dd>\n The free protection and access rules keep working. Existing signed links keep their original expiry, click limit and access rules, and can be revoked in the base plugin. If automatic protection was enabled and its extension is inactive, new uploads are stopped to prevent accidental publication. Settings offers an explicit action to disable automatic protection; existing files remain protected.<\/p><\/dd>\n Local WordPress uploads only. No offload, S3\/R2, watermarking, file sales, membership\/form integration or document portal in v1. Hosting execution limits apply to large downloads. Multipart ranges are rejected. Active file types are served as downloads. Previously downloaded\/cached copies cannot be recalled. Protection must be enforced on every host serving uploads. A failed anonymous loopback\/TLS check blocks new protection until hosting is fixed.<\/p><\/dd>\n It stores attachment protection settings and site settings locally. Existing signed-link records contain expiration and click counters. Approximate rate limiting uses a salted hash of the connecting IP in a transient expiring after 120 seconds; the plugin does not store raw IP addresses. Expired database entries may remain until WordPress cleanup. The server check requests a harmless temporary file on your own configured uploads URL without login cookies. Free activation and ordinary free protection do not initialize the optional Freemius connection. Optional public error-page branding uses only bundled assets. WordPress authentication and hosting access logs are separate. The MediaKnight uninstall routine makes no network request. The optional savings meter is off by default. Only after you switch it on, it records per day, locally in its own database tables, which external domains tried to load files from your site. This data is not sent anywhere.<\/p><\/dd>\n Packages with the Freemius SDK offer a voluntary Pro connection in Settings > MediaKnight. Nothing is sent to Freemius unless you explicitly continue, the server protection check succeeds and you then opt in on the Freemius connection screen (you can also skip). Only after that opt-in, or after starting a trial or activating a license, the SDK contacts api.freemius.com for connection, trial, purchase, licensing and premium updates.<\/p>\n\n The connection screen lists the permissions requested. Per Freemius' data practices this covers the opted-in administrator's name and email address, the site URL, plugin version and state (active, inactive, uninstalled), WordPress and PHP versions and site language; the data is re-synced at most daily when it changes. The list of installed plugins\/themes is a separate optional permission: our configuration sets it off by default, and the connection screen shows a switch so you decide. Our configuration also sets the SDK newsletter permission off; the SDK's standard connection text may still mention update\/offer emails, so only opt in if you agree with the text shown. Connected sites receive periodic licensing\/update checks. MediaKnight does not attach media files, protected URLs or visitor records to this integration. Free protection does not require connecting or paying. Freemius provides its own account\/disconnection controls after connection.<\/p>\n\n If you buy or trial Pro under the Freemius route, checkout runs on checkout.freemius.com. Freemius acts as the authorized reseller and merchant of record for that sale (payment processing, VAT\/sales tax and invoice); name, email and billing details you enter there go directly to Freemius. For opt-in usage and licensing data, Freemius acts on behalf of the plugin owner as data processor, as described in its data practices.<\/p>\n\n Service: https:\/\/freemius.com\/\nTerms: https:\/\/freemius.com\/terms\/\nPrivacy: https:\/\/freemius.com\/privacy\/\nData practices: https:\/\/freemius.com\/privacy\/data-practices\/<\/p><\/dd>\n Use this plugin's WordPress.org support forum. Include the relevant error message and server type when useful, but never post passwords, license credentials, private file URLs or customer documents. The separate Pro extension also offers a voluntary feedback form and optional departure question.<\/p><\/dd>\n MediaKnight limits access to files in your uploads folder. It cannot control copies already held by a CDN or cache, or server rules it cannot write (on Nginx your host must apply them). Run Check server protection again after server changes. Keep your own backups. MediaKnight is not a complete security solution and is provided without a guarantee that files can never be accessed without authorisation. Highly sensitive files do not belong in a publicly reachable uploads folder, even with MediaKnight.<\/p><\/dd>\n No. This plugin controls access to supported media files. It does not certify legal compliance or prevent an authorized recipient from copying a downloaded file.<\/p><\/dd>\n\n<\/dl>\n\n\n Initial permanent free edition: manual file protection, logged-in access, enforcement of saved rules, localized privacy-safe blocked-file pages, Apache\/Nginx checks, controlled downloads and safe recovery. Pro is a separately installed extension.<\/p>","raw_excerpt":"Private media for WordPress: protect PDFs and images from direct URL access so only logged-in users can open them. Apache rules + Nginx snippet.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/381615","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=381615"}],"author":[{"embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/vivango"}],"wp:attachment":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=381615"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=381615"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=381615"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=381615"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=381615"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=381615"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}Who uses it<\/h4>\n\n
\n
What the free plugin does<\/h4>\n\n
\n
MediaKnight Pro (optional)<\/h4>\n\n
Technical details<\/h4>\n\n
\n
wp-content\/uploads\/mediaknight\/<\/code> (the mediaknight folder inside your uploads directory); attachment metadata is updated and the attachment stays in the Media Library.<\/li>\n\n
\n
Why is my file still public when the page is private?<\/h3><\/dt>\n
Does it work on Nginx?<\/h3><\/dt>\n
What happens to old direct links?<\/h3><\/dt>\n
Does the free version expire?<\/h3><\/dt>\n
How is the file protected?<\/h3><\/dt>\n
wp-content\/uploads\/mediaknight\/<\/code>, updating attachment metadata. The originals leave the public path. Download URLs go through WordPress access checks. The attachment stays in the Media Library. Copies created outside registered metadata are not tracked.<\/p><\/dd>\nWhat happens if someone deletes the mediaknight folder?<\/h3><\/dt>\n
wp-content\/uploads\/mediaknight\/<\/code>, so deleting the folder deletes them. MediaKnight then reports the missing files on the MediaKnight and Media Library screens; it never moves, replaces or invents files to fill the gap. Keep regular backups that include this folder and restore it from your backup if needed. Cleanup, optimization, cache and security plugins must not delete or \"clean\" this folder or its .htaccess file; exclude it in their settings.<\/p><\/dd>\nWhat happens when I deactivate or uninstall?<\/h3><\/dt>\n
Can I change selected roles without Pro?<\/h3><\/dt>\n
What happens if Pro is removed or its trial ends?<\/h3><\/dt>\n
What are the limits?<\/h3><\/dt>\n
What data does the free plugin store or send?<\/h3><\/dt>\n
Optional external service: Freemius<\/h3><\/dt>\n
Where can I get help or give feedback?<\/h3><\/dt>\n
Important limits<\/h3><\/dt>\n
Does this guarantee that my website meets privacy laws?<\/h3><\/dt>\n
1.0.2<\/h4>\n\n
\n
1.0.1<\/h4>\n\n
\n
wp-content\/uploads\/mediaknight\/<\/code>. Files protected by an earlier build in uploads\/mlp-protected\/<\/code> are moved there automatically, in small batches while an administrator uses wp-admin: each file is copied and checked before the old copy is removed, an interrupted move resumes, and the old location stays blocked during the move.<\/li>\n1.0.0<\/h4>\n\n