BuildsByLuke Upload Vault – Secure File Uploads for Gravity Forms
| 开发者 | lukeaxiomflow |
|---|---|
| 更新时间 | 2026年10月23日 09:38 |
| PHP版本: | 7.4 及以上 |
| WordPress版本: | 7.1 |
| 版权: | GPLv2 or later |
| 版权网址: | 版权信息 |
详情介绍:
- Exposure audit - Upload Vault asks your own server for your own upload URLs (a loopback request) and reports, as a served fact, whether a stranger with the URL would receive the file. It also checks whether upload folders expose a browsable directory listing.
- Protection - one click writes deny rules (a marker block in the upload folder's
.htaccess, safely alongside anything already there) plus anti-listing placeholder files. On servers that ignore.htaccess(nginx, IIS) Upload Vault shows you the exact server snippet and keeps reporting honestly until direct requests are actually refused. - Downloads keep working - files are served through a capability-checked proxy. Links in entry views and notification emails are rewritten to proxy links automatically, so protecting uploads breaks nothing you rely on.
- Honest verdicts - the audit never claims "protected" unless the server was observed refusing direct requests. If your site cannot loopback-request itself, Upload Vault says so instead of guessing.
- Watchdog - a scheduled re-audit on the cadence you choose (hourly, twice daily, daily or weekly) with an email when a folder becomes newly exposed, plus a Site Health test.
- WP-CLI and REST, ungated -
wp upload-vault audit --format=jsonand a read-onlyupload-vault/v1/statusendpoint (administrators only) for your own dashboards, monitoring and fleet tooling. - Forms whose uploads are meant to be public (e.g. images you embed) can be left open per folder.
- Expiring signed share links (1 hour to 30 days, optional download cap, revocable) - hand a client one file without creating a WordPress user.
- Per-form access rules: choose which roles may download each form's files.
- Download audit trail - who downloaded what, when, from which IP, allowed or denied - with CSV export.
- Retention auto-purge: per-form maximum file age with preview (helpful for data-minimisation policies).
- Slack & webhook alerts the moment an audit finds new exposure.
- On nginx/IIS the written rules cannot take effect by themselves - Upload Vault gives you the exact snippet and verifies once it's in place. Until then it reports "installed, NOT verified", never "protected".
- If your uploads are offloaded to a CDN or external storage, those copies are outside this plugin's reach. When an upload URL on your own host redirects to one of them, Upload Vault stops at the redirect instead of following it, and reports that folder as unknown rather than claiming it is either exposed or protected.
- A URL that already leaked before protection cannot be un-leaked; protection stops the server serving it from now on.
- Some hosts block loopback requests; the audit then reports itself impaired rather than guessing.
- No plugin can guarantee security or make a site compliant with any regulation. Upload Vault helps you see and restrict access to Gravity Forms uploads; responsibility for the site remains with its administrators.
安装:
- Install and activate the plugin.
- Open Upload Vault → Exposure Audit and run the first audit.
- If folders are exposed, click Protect uploads, then re-check the verdict - it flips to Protected only when your server was observed refusing direct requests (on nginx/IIS, add the shown snippet first).
屏幕截图:
常见问题:
Does it need Gravity Forms to be active?
No. The audit, protection and proxy work on the gravity_forms upload directory itself, which outlives the form plugin. With Gravity Forms active you additionally get form titles and automatic link rewriting in entry views and notification emails.
It says "Rules installed, NOT verified" - is that a bug?
No - that's the plugin being honest. Your server (typically nginx or IIS) ignores .htaccess, so the deny rules can't take effect on their own. The audit page shows the exact server snippet; once it's in place and the server refuses direct requests, the verdict flips to Protected.
Will protecting uploads break the links my team already uses?
Entry views and new notification emails switch to proxy links automatically (when Gravity Forms is active). Direct URLs in old emails will stop working for strangers - that is the point - but any logged-in user with entry access gets the same file through the Files screen or entry view.
Does it modify or move my uploaded files?
No. It writes only: a marker block in the upload folder's .htaccess (removed on unprotect/uninstall), empty index.html placeholders to stop directory listings, and its own database table. Files are never moved, renamed or altered. The Pro retention feature deletes files only if you explicitly enable it and set per-form limits.
What happens on uninstall?
Upload Vault removes its deny rules (restoring Gravity Forms' stock behaviour), drops its database tables (uvgf_files, and uvgf_shares/uvgf_log if Pro was used) and deletes its options. The empty index.html placeholders are left in place (they are inert).
Is this plugin an official Gravity Forms add-on?
No. Upload Vault is an independent product and is not affiliated with, endorsed by, or sponsored by Rocketgenius, Inc.
更新日志:
- Updated Freemius SDK to the latest version.
- Initial public release.