The first release of Medifence. It blocks direct access to uploaded media files for visitors who are not logged in — without changing a single URL or moving any file.
- Protection rules in the uploads
.htaccess, written with WordPress’s own marker mechanism so other plugins’ rules are preserved. Deactivating restores normal delivery. - Access control via a login check, optionally requiring an additional capability. The final decision can be overridden with the
medifence_allow_accessfilter. - Self-diagnosis with a live test: a cookie-less HTTP request to your own site verifies that anonymous access is actually blocked. Rules overwritten by another plugin are detected too.
- Excluded extensions (served directly, bypassing PHP), a selectable denied status code (403 / 404 / 401), and a placeholder image for denied image requests.
- ETag-based 304 responses, Range support for video and audio seeking (206 / 416), 8KB chunked streaming, and
Cache-Control: private. - Multisite-aware uninstall that removes rules, settings, and temporary files on every site.
📦 Download Medifence 1.0.0 (zip)
