This plugin hasn’t been tested with the latest 3 major releases of WordPress. It may no longer be maintained or supported and may have compatibility issues when used with more recent versions of WordPress.

Private Files


There are several plugins to make a blog private, making it a good tool for basic collaboration / group ware. However file attachments / images have still been visible too the public, until now.

Private files acts as a proxy, making sure users are logged in before they can download any files. The nice thing about is, it doesn’t modify the current uploads at all, doesn’t store files in a different place, so if you want to stop using it, all links to files stay the same, so you don’t need to redo anything.

How this plugin works

1) It requires mod_rewrite/php running in apache, probably on unix/linux, although windows may work.

2) It requires wordpress to be handling all url requests via a .htaccess in your blog root, and for your uploads to be a subdirectory of the your blog root and you’re not using the default permalinks (ie. not

3) An additional .htaccess file is placed in your uploads directory with the following content:

RewriteEngine On

RewriteBase /wordpress/wp-content/uploads

RewriteRule . /wordpress/afilethatshouldnotexist.txt

Options -Indexes 

4) All requests for files within your upload are direct to a file that doesn’t exist

5) WordPress handles this as a 404 error

6) This plugin has a hook which intercepts the 404, and returns the file if the user is logged in.

7) If you want to force user login please try Angsuman’s Authenticated WordPress Plugin ( or Allow Categories ( to permission your blog.

8) There’s a small chance that the protection detection might be wrong, if so reprotect your files.

9) If you want to stop using the plugin, unprotect it, or delete the .htaccess file with your uploads directory.

More information and the latest version can be found here:


  1. Download privatefiles.php and place in wp-content/plugins
  2. Log into your WordPress admin panel
  3. Go to Plugins and „Activate“ the plugin
  4. Go to Manage->Private Files and click protect


There are no reviews for this plugin.

Þátttakendur & höfundar

“Private Files” er opinn hugbúnaður. Eftirfarandi aðilar hafa lagt sitt af mörkum við smíði þessarar viðbótar.


Translate “Private Files” into your language.

Interested in development?

Browse the code, check out the SVN repository, or subscribe to the development log by RSS.