[wp-edu] Making media library files private

Grogan, David David.Grogan at tufts.edu
Tue Mar 6 16:13:01 UTC 2012

Thanks Bill. I'll bring back any solutions we find that works.


-----Original Message-----
From: wp-edu-bounces at lists.automattic.com [mailto:wp-edu-bounces at lists.automattic.com] On Behalf Of Bill Dennen
Sent: Monday, March 05, 2012 9:31 AM
To: wp-edu at lists.automattic.com
Subject: Re: [wp-edu] Making media library files private

This might be worth looking into:

WP Document Revisions

"Access Control - Each document is given a persistent URL (e.g.,
yourcompany.com/documents/2011/08/TPS-Report.doc) which can be private
(securely delivered only to members of your organization), password
protected (available only to those you select such as clients or
contractors), or public (published and hosted for the world to see).
If you catch a typo and upload a new version, that URL will continue
to point to the latest version, regardless of how many changes you

However, given the way WP Multisite media files are served, it may
take additional apache rules to completely block access.

Boston University has written some custom code to do this -- I believe
it writes htaccess files to protect media uploads. You can see their
documentation (but not their code), here for some ideas:



On Mon, Mar 5, 2012 at 9:24 AM, Grogan, David <David.Grogan at tufts.edu> wrote:
> Hello all,
> We have a large multi-site instance of WP 3.3.1 and although you can make your WordPress site private to individual named accounts (e.g. try accessing http://sites.tufts.edu/dgtest) it's really only the posts and pages content that is private. Any content uploaded to the sites Media Library (e.g. documents, images, audio etc) is still publicly accessible (e.g. try accessing: http://sites.tufts.edu/dgtest/wp-content/blogs.dir/856/files/2012/03/FCKeditor.png).
> Has anyone come across a solution that will provide privacy to the media library files?
> David
> --------------------------------------------------------------
> David Grogan
> Senior Solutions Specialist
> Educational & Scholarly Technology Services (ESTS)
> University Information Technology (UIT) Tufts University
> 108 Bromfield Rd
> Somerville, MA  02144
> Phone: 617.627.2859
> Fax: 617.627.3082
> http://uit.tufts.edu/at/
> http://sites.tufts.edu/davidgrogan
> _______________________________________________
> wp-edu mailing list
> wp-edu at lists.automattic.com
> http://lists.automattic.com/mailman/listinfo/wp-edu
wp-edu mailing list
wp-edu at lists.automattic.com

More information about the wp-edu mailing list