Password protect a whole directory?

Thanks! I actually managed to sort out this issue by storing the file in a directory which has a 401 re-direct via the htaccess file based on whether the user was logged in or not, the link to the file is then only visible to people via hiding the link in a custom meta field unless the user is logged in at theme level.

Quite a lengthy process but I got there in the end!

# BEGIN WordPress
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteCond %{REQUEST_URI} ^.*uploads/premium/.*
RewriteCond %{HTTP_COOKIE} !^.*wordpress_logged_in.*$ [NC]
RewriteRule . /index.php [R,L]
RewriteRule ^index\.php$ - [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
</IfModule>
# END WordPress

Here is my htaccess file, the directory i protected was “uploads/premium/” so changing the directory to the one you have configured should help. I used a plugin to change the directory of uploads which made it easier to handle files and paths in the media gallery.

To hide the url completely at theme level I used some PHP such as:

<?php $secretlink {get_post_meta bla bla bla}; ?>
<a href="<?php if logged_in {get_post_meta echo '$secretlink'}; ?>">Secret link here</a>

Sorry that PHP markup is just a made up language ha ha I imagine you know how to do this but if not i’ll give you a more ample reply tomorrow with real PHP code and better comments!

The website I used this for was also for a heavily customised CMS of wordpress. We wanted users to be able to register for a service the company offered – Once registered those users could see/access “premium content”. However we still wanted certain uploads to be open to everyone as and when chosen… most importantly done really really easily for people who don’t know about code.

I’ve heavily modified the Register-Plus plugin for the registration section and use the “Relocate Upload” plugin by Alan Trewartha to relocate files upon upload – this plugin was great because it provided the direct link which could be pasted automatically into a secret link box with a bit of JS and didn’t rely on the end user messing with long urls! Probably the most complicated WordPress install i’ve ever done!

It took me about 2 weeks to find out about the htaccess solution so i’m glad I could help you out faster than it took me! Now i’m finding solutions with htaccess rules all over the place!

@mingya

Can you paste the contents of your .htaccess file please, and write out the path of the presentation folder. Is the presentation folder within the uploads directory or is it in a directory of it’s own? I.e.

root/presentation/
Or
root/uploads/presentation/
root/wp-admin/presentation/ etc

It may be that you are not supplying a Rule for the RewriteCond i.e. your .htaccess file may read:

RewriteCond %{REQUEST_URI} ^.*presentation/.*
RewriteCond %{HTTP_COOKIE} !^.*wordpress_logged_in.*$ [NC]

When it should read:

RewriteCond %{REQUEST_URI} ^.*presentation/.*
RewriteCond %{HTTP_COOKIE} !^.*wordpress_logged_in.*$ [NC]
RewriteRule . /wp-login.php?redirect_to=%{REQUEST_URI} [R,L]