Avoid Direct Download Link of files

Question

I am using Wordpress and Easy Digital Download plugin to sell digital files.

I have the following how-to questions:

1. How to avoid a user to see or to use direct download link?
2. How to create a download link that has an expiration like session?
3. How to secure a wp-contents/uploads folder?

Answer 1

You might be interested in this: deny direct access to a folder and file by htaccess

simply put a .htaccess file with the content "deny from all" in the folder. Then only scripts from your webspace should be able to read files from there.

This should be a first step. You would need a php-file serving the data instead of accessing those files directly. Eg like this: http://www.kavoir.com/2009/05/php-hide-the-real-file-url-and-provide-download-via-a-php-script.html

(as I am not aware of wordpress plugins, maybe just google for them, this explains how to write those in php - if you cant do that youre pretty much stuck to wordpress plugins)

Answer 2

"WP Secure Links" is WordPress plugin at codecanyon that lets you create a secure link to downloadable files.

http://codecanyon.net/item/wp-secure-links/4418678

http://sixthlife.net/product/wp-secure-links/

for securing the uploads folder needs some good .htaccess work check the comments section of this, its explained

Answer 3

Nah, Nah, Nah... It's easy man update your plugin, and check your settings...

Step 2. You will see in you plugin settings, that it has 24 hours expiration date download link in forwarded email

Answer 4

Still relevant in 2020 so I have written a small plugin that enables secure and temporary downloads in Wordpress:

WP DISPATCHER

It is free and simple. Check it out :)