WordPress maintenance or security needs? Reach out!
TLDWP

Plugin: prevent-file-access (Used by 15 domains)

Security snapshot

Across the 15 prevent-file-access sites we've scanned, compared to the all-WordPress average.

Grade A 7% Grade B 13% Grade C 0% Grade D 7% Grade F 73%
Fail the header check (F)73%vs 82.6% avg
Leak usernames53%vs 38.5% avg
Expose a sensitive file0%vs 1.8% avg
Use HTTPS100%vs 96.1% avg

Prevent files / folders access

πŸ‘€ miniOrange πŸ”— Plugin Homepage

WordPress Prevent files/ folders access provides the easiest way to protect WordPress files from public users so that your wordpress media library can be accessed only by WordPress logged in users or users with specific roles/capabilities. Your ebooks, pdfs, other important files, etc., can be protected from google indexing so that data is protected from getting stolen. Control users access to media library, Control users access to the WordPress upload folder or sub folders, and restrict all the files published on your WordPress site.

For restricted Content you can choose to redirect users to 403 forbidden page, your custom page, WordPress login page, SSO login page (if you are using OAuth or SAML SSO).

No change required or no manual work needed to create a private link to protect your wordpress media file. Our plugin takes care of your media library or via Media, Pages, or Posts.

We support a level of security where you can choose either cookie-based restriction or session-based restriction.
Also, we support Apache and Nginx servers to prevent direct access to the WordPress media library and therefore protect the media library for public or restricted users.

It prevents private download of the media files from public access and only the logged-in users or specific user roles can access and download the wordpress media files.

We also support media/files/folders Restriction based on NFT holding in the user crypto wallet. We support any level of customization according to your requirement.

File-Based Protection

WordPress Prevent file/folder access is developed to allow you to protect wordpress media file in your customized way. It will prevent direct access from media library based on their extension.

You can protect file types below:

* Images - Every type of image files can be protected. eg: jpeg, jpg, gif, png, bmp, webp, pfg, ico, psd, etc.
* Videos - Every type of video files can be protected. eg: mp4, m4a, m4v, f4v, f4a, m4b, m4r, f4b, mov, 3gp, avi etc.
* Documents - Every type of document files can be protected. eg: doc, docx, html, pdf, txt, ppt, xls, xlsx, pptx, odt.

Redirect

WordPress Prevent file/folder access provides redirect options. This allow you to redirect the restricted users to any WordPress page of your website.

  • 403 forbidden page (DEFAULT) – Users will be shown 403 forbidden pages with a restricted access message.
  • Display custom page – We can redirect users to any WordPress custom page when they try to access restricted files or folders.
  • WordPress login – Users will be redirected to the WordPress default login page.
  • IDP login – Users will redirect to the selected IDP (SAML/OAuth) login page and after IdP authentication they can see the restricted content.

Private Directory/Protected folder

  • Our plugin also gives you a Private Directory where you can add files of all extension types and restrictions will be applied to all files inside the private directory.

Membership Based Media Restriction.

  • WordPress Prevent files/ folder allows you to secure media library and control wp-content/uploads access based on the membership purchased by the user.

Folder Based Protection

  • WordPress Prevent files/ folders access allows you to protect your folders too, the wp-content or uploads folder where all the wordpress media files like images, videos, and document files are stored will also be protected.
  • Users have the option to protect a particular month’s media files or sub folder in uploads directory..
  • User-Based Restriction – A particular user can access only a particular folder. (Admin would be able to access all the folders)
  • Role Base folder access – Uploads folder or subfolders can be restricted for public access and allowed folder access to users with specific role. (Admin would be able to access all the folders)

We support LearnDash and other LMS to restrict files and folders according to different groups and specific user roles.

You can customize the restriction rules and use them as per your needs.

This functionality operates at the server level, thus if the Apache server rules don’t work, or also the WP Engine, Siteground, and other servers like this run on an Nginx server, which requires the use of Nginx configuration rules. If you face any issues please email us at [email protected] or [email protected]. We would recommend you to please ensure your PHP server and rules first which will work on your server before purchasing it or else contact us we will help you to set up the plugin according to your requirements on your site.

FREE VERSION FEATURES

  • WordPress Prevent Files/Folder Access allows you to protect your wordpress media files, libraries and folders from public access.
  • File Extensions Restricted – Can restrict five standard extensions (.png, .jpg, .gif, .pdf, .doc).
  • Redirection of non-logged-in users: Can redirect non-logged-in users to any page of your WordPress site.
  • Protected Folder: Can keep selected files in a protected folder and they will be restricted from the public users.
  • Supported Servers: You can configure the plugin on the Apache server easily.
  • Security Level Base: Plugin will check if a user is logged in or not through Cookie.

PREMIUM VERSION FEATURES

  • WordPress Prevent Files/Folder Access allows you to protect your media files and folders from public access.
  • File Extensions Restricted – Media restricton to unlimited extensions is supported.
  • Redirection of non-logged-in users: You can redirect the non-logged-in users to any page of your WordPress site or to the WordPress login page.
  • Folder Restriction: Can restrict access to wordpress media library from non-logged-in users.
  • Protected Folder: Can store unlimited files in a private directory/protected folder and they will be restricted from the public users and indexing on search engine.
  • Supported Servers: You can configure plugins on Apache and NGINX servers easily.
  • Security Level Base: Plugin will check if a user is logged in or not through Cookie.

ENTERPRISE VERSION FEATURES

  • WordPress Prevent Files/Folder Access allows you to protect your WordPress media files and folders from public access.
  • File Extensions Restricted – Media restriction to unlimited extensions is supported.
  • Redirection of non-logged-in users: You can redirect non-logged-in users to any page of your WordPress site or to the WordPress login page or to SAML/OAuth login page.
  • Folder Restriction: Can restrict access to the WordPress uploads folder or any other folder in your WordPress instance from non-logged-in users by enabling user access restrictions.
  • Protected Folder: Can keep unlimited files in a protected folder and they will be restricted from the public users to prevent direct access to specific user roles.
  • Supported Servers: You can configure plugins on Apache and NGINX servers easily.
  • Security Level Base: Plugin will check if a user is logged in or not through Cookie or Session.

ALL INCLUSIVE VERSION FEATURES

  • WordPress Prevent Files/Folder Access allows you to protect your WordPress media files and folders from public access.
  • File Extensions Restricted – Media restricton to unlimited extensions is supported.
  • Redirection of non-logged-in users: You can redirect non-logged-in users to any page of your WordPress site or to the WordPress login page or to SAML/OAuth login page.
  • Folder Restriction: Can restrict access to the WordPress uploads folder or any other folder in your WordPress instance from non-logged-in users by enabling user access restrictions.
  • Protected Folder: Can keep unlimited files in a protected folder and they will be restricted from the public users to prevent direct access to specific user roles.
  • Supported Servers: You can configure plugins on Apache and NGINX servers easily.
  • Security Level Base: Plugin will check if a user is logged in or not through Cookie or Session.
  • Media Management: You can create custom folders and subfolders to organize your media library and control access of the created folders and subfolders.
  • Download Logs: You can view logs for uploading, downloading, and deleting files.
  • Membership Based Media Restriction: Compatible with Paid Memberships Pro, ARMember Membership, WordPress Membership, and WooCommerce Subscriptions.

DOCUMENTATION AND SUPPORT

DomainExposuresHeadersLast Checked
s*r*-*b*.com F Sep 3, 2026
w*-*e*p.com (WP 5.4.21) F Aug 31, 2026
e*c*c*n*r*.com F Aug 29, 2026
s*i*i*h*-*e*a*a.com (WP 6.0.14) F Aug 27, 2026
j*l*-*h*r*h.com (WP 7.1) F Aug 26, 2026
c*n*c*r*.o*g.mx B Aug 24, 2026
p*w*3*0.com (WP 7.1) F Aug 24, 2026
w*a*h*r*e*p.com (WP 5.4.21) D Aug 21, 2026
k*l*s*-*e*r*t*m*n*.fr (WP 6.1.12) A Aug 21, 2026
p*f*e*o*s.com (WP 6.0.14) F Aug 17, 2026
p*i*t*i*p*r*n*r.com B Jul 29, 2026
n*w*o*e*o*s*i*.com (WP 4.9.29) F Jul 28, 2026
t*x*o*r*c*i*n*e*v*c*.com (WP 6.9.5) F Jul 27, 2026
a*i*i*g*o*.com (WP 6.4.8) F Jul 22, 2026
m*y*m*r*o*.com (WP 5.6.17) F Jul 16, 2026

Top 50 Plugins

Plugin Count
elementor 1,730,294
contact-form-7 1,721,189
elementor-pro 1,030,363
woocommerce 798,979
revslider 592,001
jetpack 433,801
js_composer 408,403
wp-rocket 326,504
essential-addons-for-elementor-lite 257,565
gravityforms 252,497
complianz-gdpr 252,176
google-site-kit 250,288
cookie-law-info 223,276
instagram-feed 219,874
sitepress-multilingual-cms 206,469
header-footer-elementor 200,528
google-analytics-for-wordpress 199,243
bluehost-wordpress-plugin 189,453
elementskit-lite 174,206
gutenberg 160,513
litespeed-cache 145,284
cookie-notice 144,599
gutenberg-core 140,377
gtranslate 120,852
the-events-calendar 120,446
wpforms-lite 118,547
astra-sites 108,826
popup-maker 106,886
woocommerce-payments 105,641
tablepress 101,273
honeypot 96,491
coblocks 93,600
astra-addon 91,421
duracelltomi-google-tag-manager 88,349
wp-smushit 88,315
layerslider 86,499
all-in-one-seo-pack 86,350
bb-plugin 84,791
akismet 82,203
ml-slider 82,176
premium-addons-for-elementor 80,773
cleantalk-spam-protect 80,289
mailchimp-for-wp 78,871
megamenu 78,680
ewww-image-optimizer 76,849
wp-pagenavi 76,546
jet-engine 76,523
fusion-builder 75,403
smart-slider-3 74,324
gravityformsrecaptcha 72,802

Top 50 Themes

Theme Count
hello-elementor 609,589
Divi 483,496
astra 402,734
flatsome 145,249
Avada 118,421
generatepress 112,290
pub 97,125
oceanwp 78,141
kadence 77,731
enfold 67,008
salient 63,381
twentyseventeen 53,013
twentytwentyfour 51,847
bb-theme 51,765
betheme 51,513
cocoon-master 49,979
blocksy 49,828
h4 48,819
twentytwentyfive 45,534
woodmart 44,843
dt-the7 44,448
neve 37,089
Avada-Child-Theme 36,459
gox 35,905
lightning 30,747
bridge 30,345
twentytwentyone 29,418
swell 29,198
twentytwenty 28,015
bricks 26,800
Impreza 25,536
Newspaper 23,668
twentytwentythree 21,364
epik-redesign 18,852
twentytwentytwo 18,186
uncode 18,019
twentysixteen 17,305
pro 17,228
sydney 15,747
storefront 15,733
Total 14,105
factory-templates-4 13,883
hello-theme-child-master 13,651
themify-ultra 12,716
hestia 12,288
yootheme 12,275
yith-wonder 11,711
jupiter 11,589
porto 11,548
twentyfifteen 11,531