Where to store publicly-accessible files

I think that would depend how you’ve made your site private?

I’ve used this plugin to set sites to private
https://wordpress.org/plugins/jonradio-private-site/

It also has settings to exclude any URLs from being set to private.

There are a bunch of other plugins that do similar thins.

Related Posts:

  1. wp_verify_nonce vs check_admin_referer
  2. How does admin-ajax.php work?
  3. Securing Admin Accounts – Username Discovery
  4. Assuming a theme is properly secured, how save is the WordPress admin?
  5. Don’t attribute content to admin users
  6. WordPress ACL (folder + permissions)
  7. using rewrites to secure login page
  8. How do I diagnose a plugin resource 404?
  9. WordPress Brute Force Prevention
  10. Changing admin user id for database
  11. WordPress custom admin functions security
  12. Does deleting the table users prevent all logins?
  13. Why does my admin email address keep changing to something random?
  14. Where in WP can I check history or log of updates of plugins etc?
  15. Hide other users’ posts in admin panel
  16. Editor Styles and Typekit
  17. WordPress admin stylesheet
  18. Is it possible to create a WordPress tour? V3.3.1
  19. Can an admin check passwords of registered users?
  20. Prevent author from changing their posts if admin has modified
  21. Showing WP_Error message with admin_notice action hook
  22. Set Featured Image programmatically (in admin) with JavaScript?
  23. Can I set a default dashboard layout for all users?
  24. Taxonomy/category hierarchy lost when editing posts [closed]
  25. Making the thumbnails in the backend Media section bigger
  26. How to remove “Super Admin” from All Users for those that are not a “Super Admin”?
  27. Customize the upload screen
  28. How to print the output of the get_num_queries function from frontend to backend?
  29. Javascript not working in admin
  30. Setting Login with User Name and Password default option for Jetpack Admin Login
  31. Downloading entire site locally with httrack
  32. add_submenu_page set for multiple roles [duplicate]
  33. Adminstering Large Number of WordPress Sites
  34. How To Create User Specific Admin User Pages?
  35. Adding markup to column text in “Edit Pages” admin page
  36. Disable HTML (Text) Tab in Post Editor
  37. Admin: global $post empty
  38. How to remove “publish metabox” from each post type
  39. Change home-url in dashboard
  40. Admin doesn’t have sufficient permissions to plugin’s page
  41. How to restrict the editors from viewing/editing pages created by admin?
  42. Admin multiple column sorting
  43. How do I add a contact form?
  44. Unable to login, old site with previous developer gone
  45. How to default display name to first name and last and disable the profile field
  46. Adding html format on tinymce visual editor
  47. How can I show the contents of only a few users
  48. Editors change a permalink on an unpublished post, but only admins change a permalink on a post that has ever been published?
  49. Locked out of admin and some pictures don’t show after failed SSL installation
  50. How-to turn off mobile admin mode?
  51. How can I make the user names of commentors clickable links to the user’s profile from the admin comment screen?
  52. Grabbing the first image attached to a post and use it with the admin columns
  53. Keep Logged in Users out of Admin Panel
  54. Add Custom Script in Other Plugin’s Options page
  55. Is there a wp-config.php option or constant that I can set to allow me to download nightly / beta builds?
  56. I can’t access the login panel on my offline website
  57. Output the admin menu_position for each item
  58. Admin login not working
  59. Adding and removing columns from the admin pages panel
  60. paginate_links on custom query in admin – ‘sufficient permissions’ error
  61. Live reload preview just reloads forever
  62. Hide admin notice when user profile updated
  63. Locked out of WordPress website from wrong amount of login attempts
  64. current_user_can(‘administrator’) not working in custom login
  65. Black admin bar is being hidden by page elements
  66. admin edit link from a specific page
  67. Set Link Target Checkbox chcked on Edit Image MOdal Window in Admin Post Edit Screen?
  68. Help! I changed the domain and now I can’t log in via admin online
  69. Username was changed to “admin”
  70. Admin user roles/permissions
  71. [Multisite]How can I update custom blog option?
  72. Top toolbar is not showing in wordpress admin panel
  73. wordpress – add a custom admin section with fields for name, address, city,state, and photo upload
  74. Problem with implenting Uploadify with WordPress
  75. Best way to reset some admin options form to default?
  76. Authorize subdomain to access and read user and admin cookies
  77. Can’t see past events on admin dashboard
  78. WordPress Admin Page
  79. Only a small portion of my export page renders
  80. require/include php file in add_menu()
  81. How can I restrict ‘edit_form_after_’ to a specific post/page?
  82. Search Only Works when Logged into Admin
  83. exclude ID on avatar
  84. Missing content on website. Admins cant sign in
  85. Different role for free and pro users in wordpress without using bbpress
  86. Is Post-Form Resubmission somehow prevented in WordPress 4.2.2?
  87. WordPress login not working
  88. Enqueue script throws error in console
  89. How to sort post_meta in edit.php?
  90. Link to all posts page?
  91. WP Logs me out after updating anything on dashboard
  92. Adding additional text fields and image upload to a Page?
  93. Calculate and save an average in a meta
  94. If the only thing I use MySQL for is WordPress, do I need MySQL’s timezone tables?
  95. plugin to upload to youtube via wordpress [closed]
  96. How to fix: Clicking ‘Quick Edit’ link in Admin (edit.php) makes posts disappear?
  97. My Account Lost Administrator permission
  98. WordPress admin panel is blank
  99. Use the wordpress admin table
  100. deploying a standard build of wordpress in WHM/cPanel