How to restrict access to uploaded files?

This isn’t really a WordPress question – but you can add a rewrite rule to prevent access unless the referrer is your own domain.

[Update]

You’ll need to do 2 things

  1. Add a rewrite rule (either directly with .htaccess or by using WP_rewrite (Codex reference). The aim here is to deny requests to your documents that don’t have your domain as a referrer – this stops people pasting the link into a browser’s address bar

  2. Wrap your download links in an is_user_logged_in (Codex reference) conditional block – that way they will only show up on the page if the user is logged in

A code example is available in a related question:

Leave a Comment