Folio Gatehouse
| 开发者 | buffcleb |
|---|---|
| 更新时间 | 2026年8月12日 04:29 |
| PHP版本: | 7.4 及以上 |
| WordPress版本: | 7.0 |
| 版权: | GPL-3.0-or-later |
| 版权网址: | 版权信息 |
详情介绍:
Folio Gatehouse lets you protect files inside your uploads directory by restricting access to specific WordPress user roles. Files are served through PHP — the web server never delivers them directly — so direct URL access is blocked regardless of link sharing.
Key features:
- Zone-based protection — define named zones (subfolders inside your uploads directory) and assign allowed roles to each
- Custom denial screens — create HTML pages shown to blocked users, with full control over styling and messaging; separate screens for anonymous and logged-in users
- Redirect on denial — optionally redirect denied users to any URL (e.g. a sales page or membership signup) instead of showing a denial screen
- Login redirect shortcode —
[rbfa_login_link]inserts a secure login link that returns the user to the originally-requested file after authentication, using an opaque token so no file path is exposed in the URL - Zone virtual pages — each zone automatically gets a front-end page at
/protected-zone/{slug}/with customisable title and body content, rendered inside your active theme - Browsable file listing —
[rbfa_files]shortcode renders a collapsible, downloadable file listing for authorised users, with per-directory file counts, sizes, and ZIP download buttons - Access logging — every request is logged with timestamp, username, IP, file path, and status; filterable, sortable, and exportable as CSV
- Role management — create and manage custom WordPress roles (
fgh_prefix) directly from the plugin, with searchable member management .htaccessintegrity — automatically writes and repairs rewrite rules across all protected directories; optional hourly cron- NGINX support — dedicated tab generates ready-to-copy
locationblocks when NGINX is detected - Export / Import — back up and transfer zones, roles, denial screens, and settings as a JSON file; conflict resolution on import
- Files served through PHP (
readfile) — web server never delivers protected files directly - Path traversal blocked by
realpath()boundary check before any file is served - Login redirect tokens are opaque — no file path, role, or zone information in the URL
- Denial screen HTML filtered through a strict
wp_ksesallowlist on save and read-back - CSRF protection on every form via WordPress nonces
- All
ORDER BYclauses use a server-side whitelist to prevent SQL injection
- Apache with
mod_rewriteenabled, or NGINX (with manual server block configuration — see the NGINX Config tab)
安装:
- Upload the
folio-gatehousefolder towp-content/plugins/ - Activate the plugin from Plugins → Installed Plugins
- Navigate to Folio Gatehouse in the sidebar
- Go to Settings and set your base directory (the folder inside
wp-content/uploads/that will contain all protected zones) - Go to Zones and add zone rows — assign a folder slug and the roles that may access it
- Click Save & Sync Zones
屏幕截图:
![Front-end zone page — `[rbfa_files]` collapsible file listing with per-directory download buttons](https://cdn.jsdelivr.net/wp/folio-gatehouse/assets/screenshot-6.png)
常见问题:
Does this work with NGINX?
Yes, but you need to add server block rules manually. The plugin detects NGINX and shows a dedicated tab with ready-to-copy location blocks.
Will my files be accessible via direct URL?
Not after .htaccess rules are in place (Apache) or after you add the NGINX location blocks. All matched requests are routed through WordPress and through the plugin's access check before any file content is returned.
What happens to my data if I deactivate or delete the plugin?
Deactivation never deletes any data. Deletion only removes data if you explicitly enable that option in Settings → Data Management.
Can I show different denial messages to guests vs logged-in users?
Yes. Each zone has separate denial screen dropdowns for anonymous visitors and logged-in users who lack the required role.
Can I use this to protect files for a WooCommerce membership?
Yes. Create a custom role for your members (or use an existing WooCommerce role), assign it to a zone, and the plugin will enforce access on every file request.
Does the login redirect shortcode work with custom login pages?
Yes. Configure the login page URL per denial screen (supports absolute URLs and relative paths like /my-account).
更新日志:
1.2.1
- Fixed: critical — "Save & Sync Zones" deleted every zone, then reinserted only the ones present in the submitted form. Since the Zones tab is paginated and filterable, a save only ever submits the zones on the current page/filter view — any zone outside it (on another page, or hidden by a filter) was silently and permanently deleted, while its folder stayed on disk and reappeared as an "unmanaged directory." Zones are now updated in place by id; a zone is only deleted when its "Remove" button is explicitly clicked. If you're on 1.2.0, check your Zones tab after upgrading — zones lost to this bug will need to be reconfigured from the unmanaged-directory prompt.
- Admin menu: the plugin now appears under a shared "Folio" menu alongside other Folio-suite plugins, instead of as its own top-level item. Existing settings links (?page=rbfa-pro) and the admin screen are unchanged.
- Performance: zone and base-folder lookups now share a single object-cache-backed query per request (previously two uncached queries on every front-end request). With a persistent object cache (Redis/Memcached) repeat requests serve from cache with zero queries. Cache is invalidated automatically when zones are saved, imported, or migrated.
- Fixed: zone and base-folder slugs were run through
sanitize_title()on save, which forces lowercase — a directory likeTestinggot stored astesting. On case-sensitive filesystems this pointed the zone at the wrong directory; on case-insensitive filesystems the directory still resolved, but the already-managed folder kept reappearing as a phantom "unmanaged directory" because the exact-case comparison never matched. Slugs now usesanitize_file_name(), which preserves case.
- Replaced two
str_starts_with()calls withstrpos()checks for compatibility with the declared minimum WordPress 5.8 (str_starts_with requires WP 5.9)
- Standardised all public shortcodes on the plugin's 4-character
rbfa_prefix:[rbfa_files],[rbfa_login_link],[rbfa_zone_link](meets WordPress.org prefix-length guideline) - DB migration (v1.9) rewrites shortcode names in existing zone pages and denial screens automatically on upgrade
- Role renames now use core
remove_role()/add_role()instead of a directwp_user_rolesoption write
- All plugin-managed role slugs migrated from fsg_ prefix to fgh_ prefix; DB migration (v1.8) renames existing roles, moves user assignments, and updates zone allowed-roles JSON automatically on upgrade
- System role renamed from FSG Admins (fsg_admins) to FGH Admins (fgh_admins)
- Renamed shortcodes to fgh_ prefix: [fgh_files], [fgh_login_link], [fgh_zone_link]; fsg_ and older names kept as backwards-compatible aliases
- DB migration (v1.7) updates existing zone pages and denial screens to new shortcode names
- Renamed plugin to Folio Gatehouse (slug folio-gatehouse, text domain folio-gatehouse)
- Fixed shortcode callback: escape size_format() output with esc_html() in file listing
- Added nonce verification to CSV export handler (CSRF protection)
- Sanitize $_SERVER['REQUEST_URI'] before use in access log and path derivation
- Renamed plugin to Folio Gatehouse (slug folio-sentrygate)
- Role prefix wfsp_ renamed to fsg_; automatic migration on upgrade
- Shortcodes renamed: [fsg_files], [fsg_login_link], [fsg_zone_link]; old names kept as aliases
- Fixed inline stylesheet in zone preview iframe
- Added Export / Import feature on the Settings tab — export zones, roles, denial screens, and settings to a JSON file; import with conflict detection and per-item resolution; role users always merged; only users that exist in the target install are added
- [folder_files] ZIP download buttons now recorded in the access log with
[zip]/[zip:all]path prefix - Fixed
[rbfa_zone_link]returning empty when used in a denial screen triggered by a zone page request
- Roles tab: Create Role moved to modal; role name and member filters; pagination
- Denial Screens tab: New/Edit form moved to modal; label filter; pagination; shortcode reference cards collapsed by default
- Zones tab: unmanaged directories in the base folder detected and shown as pre-populated rows
- Logs tab: Date From / Date To replaced with single datetime-local pickers supporting one-sided ranges
- Settings tab: Integrity Repair defaults to checked and persists across zone saves
- Security: reject non-
/relative redirect paths;sanitize_file_name()on Content-Disposition headers; conditional transient delete; ZIP boundary check hardened
- Added FSG Admins system role — plugin admin access without full administrator
- Added multi-user member modal on Roles tab
- Added separate anonymous and logged-in denial screens per zone
- Added redirect-to-URL option for logged-in users per zone
- Added zone virtual pages at
/protected-zone/{slug}/ - Added per-zone page editor (split-pane modal with live preview)
- Added zone page theme toggle in Settings
- Added file count and total size display per zone
- Added
[folder_files]shortcode with collapsible subdirectories and ZIP downloads - Fixed base directory reverting on zone save
- Fixed
wp_magic_quotesslash accumulation in editors
- Added configurable log pruning — auto daily cron and manual button
- Added NGINX Config tab with generated server block configuration
- Added stats dashboard widget with 7-day sparkline
- Added
X-Robots-Tag: noindex, nofollowon all file responses - Added per-zone redirect-to-URL option
- Added Settings tab consolidating system settings and data management
- Fixed
[rbfa_login_link]attribute handling - Extended zones dirty flag to slug, role, and denial screen changes
- Fixed zone saves — nested form bug silently discarding selections
- Moved all POST handlers to
admin_init - Added Post/Redirect/Get pattern for all form submissions
- Added sandboxed iframe preview for denial screens
- Added
[rbfa_login_link]with opaque token redirect system - Sortable log columns, date+time filters, configurable pagination
- Fixed CSV export headers-already-sent error
- Initial release