Files still accessible

Hi Max, thanks also for sharing your plugin. I am experiencing the same problem above – protected files are still accessible via a direct URL even though users are not logged in. In my situation:

• I am using a child theme of twentythirteen
• I am trying to protect PDF files
• files are being served from the Media Vault protected folder e.g. sitename/wordpress/wp-content/uploads/_mediavault/2014/02/filename.pdf
• the Media Vault rewrite rules are present in the .htaccess file
• I am using pretty permalinks

Note: I do have an additional .htaccess file in my theme’s directory – this is the one provided with HTML5 Boilerplate v4.3.0. Could this be causing the issue?

Please let me know what I can do to fix this. Many thanks.

I was just experiencing a similar issue. Looking at my .htaccess file this is what I had:

# Media Vault Rewrite Rules
RewriteRule ^assets(/_mediavault/.*\.\w+)$ index.php?mgjp_mv_file=$1 [QSA,L]
RewriteCond %{QUERY_STRING} ^(?:.*&)?mgjp_mv_download=safeforce(?:&.*)?$
RewriteRule ^assets(/.*\.\w+)$ index.php?mgjp_mv_file=$1 [QSA,L]
# Media Vault Rewrite Rules End

Investigating the assets directory I noticed the file that should have been protected didn’t even exist there. It was in the wp-content/uploads/ directory.

What solved my problem was simply deactivating and reactivating the plugin. My .htaccess file was updated and files are protected as expected.

# Media Vault Rewrite Rules
RewriteRule ^wp-content/uploads(/_mediavault/.*\.\w+)$ index.php?mgjp_mv_file=$1 [QSA,L]
RewriteCond %{QUERY_STRING} ^(?:.*&)?mgjp_mv_download=safeforce(?:&.*)?$
RewriteRule ^wp-content/uploads(/.*\.\w+)$ index.php?mgjp_mv_file=$1 [QSA,L]
# Media Vault Rewrite Rules End

Didn’t fix PDF protect for me.

I found a fix for my issue, at least for file types other than PDF files. I’ve installed wordpress in another directory, lets say /core, and so I edited the .htaccess to reflect in the code then, like:

# Media Vault Rewrite Rules
RewriteRule ^core/wp-content/uploads(/_mediavault/.*\.\w+)$ index.php?mgjp_mv_file=$1 [QSA,L]
RewriteCond %{QUERY_STRING} ^(?:.*&)?mgjp_mv_download=safeforce(?:&.*)?$
RewriteRule ^core/wp-content/uploads(/.*\.\w+)$ index.php?mgjp_mv_file=$1 [QSA,L]
# Media Vault Rewrite Rules End

That fixed my issue with direct download links, hope that helps some of you if you have your WordPress installed in an extra folder.
I don’t know why PDF files are still not being protected, while other file types are….? If you are only testing with PDF, try testing with jpg or some other file type as well.