Storage for EDD via S3-Compatible
| 开发者 |
mohammadr3z |
|---|---|
| 更新时间 | 2025年9月29日 20:59 |
| PHP版本: | 7.4 及以上 |
| WordPress版本: | 6.8 |
| 版权: | GPL-2.0-or-later |
| 版权网址: | 版权信息 |
详情介绍:
Storage for EDD via S3-Compatible is a powerful extension for Easy Digital Downloads that allows you to store and deliver your digital products using S3-compatible storage services. This plugin provides seamless integration with various S3-compatible storage providers including MinIO, DigitalOcean Spaces, Linode Object Storage, and many others.
Key Features
- S3 Compatible Storage Support: Works with MinIO, DigitalOcean Spaces, Linode Object Storage, and other S3-compatible services
- Secure File Delivery: Generates time-limited, secure download URLs for your digital products
- Easy File Management: Upload files directly to S3 storage through WordPress admin
- Media Library Integration: Browse and select files from your S3 storage within WordPress
- Configurable Expiry: Set custom expiration times for download links
- Customizable URL Prefix: Developers can customize the URL prefix (default: edd-s3cs://) using WordPress hooks
- Security First: Built with WordPress security best practices
- Developer Friendly: Clean, well-documented code with hooks and filters
安装:
- Upload the plugin files to the
/wp-content/plugins/storage-for-edd-via-s3-compatibledirectory, or install the plugin through the WordPress plugins screen directly. - Make sure you have Easy Digital Downloads plugin installed and activated.
- Run
composer installin the plugin directory if installing from source (not needed for release versions). - Activate the plugin through the 'Plugins' screen in WordPress.
- Navigate to Downloads > Settings > Extensions > S3 Storage to configure the plugin.
屏幕截图:
常见问题:
Which S3-compatible services are supported?
This plugin works with any S3-compatible storage service including:
- Amazon S3
- DigitalOcean Spaces
- Linode Object Storage
- Wasabi
- Backblaze B2 (with S3-compatible API)
- Cloudflare R2
- MinIO
- Storj
- ArvanCloud
- Hetzner Object Storage
- And many others
How secure are the download links?
The plugin generates presigned URLs with configurable expiration times (default 3 minutes). These URLs are temporary and cannot be shared or reused after expiration, ensuring your digital products remain secure.
What file types are supported for upload?
The plugin supports safe file types including:
- Archives: ZIP, RAR, 7Z, TAR, GZ
- Documents: PDF, DOC, DOCX, TXT, RTF, XLS, XLSX, CSV, PPT, PPTX
- Images: JPG, JPEG, PNG, GIF, WEBP, SVG
- Audio: MP3, WAV, OGG, FLAC, M4A
- Video: MP4, AVI, MOV, WMV, FLV, WEBM
- E-books: EPUB, MOBI, AZW, AZW3
- Web files: CSS, JS, JSON, XML Dangerous file types (executables, scripts) are automatically blocked for security.
Can I browse existing files in my S3 storage?
Yes, the plugin includes an S3 Library feature that allows you to browse and select existing files from your S3 bucket directly within the WordPress admin interface.
Can I customize the URL prefix for S3 files?
Yes, developers can customize the URL prefix using the s3cs_edd_url_prefix filter. Add this code to your theme's functions.php:
function customize_s3_url_prefix($prefix) { return 'edd-customprefix://'; // Change to your preferred prefix } add_filter('s3cs_edd_url_prefix', 'customize_s3_url_prefix');
更新日志:
1.1.0
- Added: URL prefix customization hook (
s3cs_edd_url_prefixfilter) for improved developer flexibility. - Added: Search functionality for S3 Library with real-time file filtering.
- Added: Clear search button and keyboard shortcuts (Ctrl+F/Cmd+F) for enhanced user experience.
- Improved: S3 Library interface with modern search container styling.
- Security: Added capability-based access control for S3 media library and upload functionality
- Security: Removed debug console.log statements to prevent file path exposure
- Security: Removed admin_post_nopriv_s3cs_upload action hook to restrict upload access to logged-in users only
- Security: Removed SVG from allowed file extensions to prevent XSS attacks via malicious SVG files
- Security: Replaced raw S3 error message display with generic user-friendly messages while logging detailed errors for debugging
- Security: Reduced XML parser logging to prevent sensitive server response data exposure in logs
- Security: Removed "No Auth" fallback from authentication methods to prevent unauthenticated requests
- Security: Deleted unused
makeRequestWithoutAuthmethod to enhance security posture
- Added: File type validation with enhanced security against dangerous file uploads
- Added: Translators comments for all internationalization strings with placeholders
- Improved: Better internationalization support for translators
- Improved: Debug logging now uses WordPress standards with proper sanitization
- Fixed: All output from internationalization functions properly escaped to prevent XSS vulnerabilities
- Fixed: Proper nonce verification for all form data processing to prevent CSRF attacks
- Fixed: Removed production-unsafe debug code and replaced with WordPress-compatible logging
- Changed: Default download link expiry reduced to 3 minutes for better security
- Automatically prepended
https://to Endpoint URL to prevent XML parsing errors. - Improved Endpoint URL validation and user guidance.
- XML parsing errors in S3 client and media library functions.
- Centralized version management using S3CS_EDD_VERSION constant
- Updated Persian translation files
- Removed: Dark mode support to simplify styling and improve consistency across all themes.
- Fixed: Responsive S3 file selection now displays file name, size, date, and select button on mobile.
- Fixed
WP_Scripts::localizeerror by usingwp_add_inline_script()for non-array values. - Separated all inline JavaScript into dedicated
.jsfiles for better maintainability and performance. - Separated inline CSS into dedicated
.cssfiles.
- Enhanced S3 upload section styling for a modern look and improved user experience.
- Improved responsive design for better display on various screen sizes.
- Refined the display of the current directory/bucket name in the S3 upload section.
- Added a non-dismissible admin notice to alert users when S3 Access Key or Secret Key are not configured, with a direct link to settings.
- Added Persian language support.
- Implemented direct file download functionality, preventing files like JSON or text from opening in the browser and forcing download.
- Initial release
- S3-compatible storage integration
- Secure presigned URL generation
- Media library integration
- File upload functionality
- Admin settings interface
- Security enhancements and validation
- Internationalization support