Description
Protect access to all your media files and implement your own custom file access rules using a hook. Works for apache with mod rewrite or nginx with some custom configuration. No Multisite support. This plugin is more or less a development tool for defining your own custom file access rules.
For nginx you will need to modify the config file as nginx does not handle .htacess files. Add the following code:
location ~ “^/wp-content/uploads/(.*)$” {
rewrite ^/wp-content/uploads(/.*.w+)$ /index.php?jvm_protected_media_file=$1;
}
Hooks
Without a custom hook all file access will be disabled. The user will see the 404 page for all requested files. Adding a hook is needed to handle your own file access rules. A simple example that could go into your functions.php:
function my_file_access_rule($file_info) {
// Implement your own logic here
$userHasAccess = true;

if($userHasAccess) {
// Send the file output if users has access to the file
JVM_Protected_Media::send_file_output($file_info[‘path’]);
}
}

add_action( ‘jvm_protected_media_file’, ‘my_file_access_rule’);
The jvm_protected_media_file action has one parameter with the following file information:
Array
(
[id] => id_of_the_file
[url] => full/url/to/your/file
[path] => full/path/to/your/file
[is_resized_image] => bool (true if the requested file is a image thumbnail or resized version of an image)
)
Actions
Available actions:
jvm_protected_media_loaded (fires as soon as the plugin is loaded)
jvm_protected_media_file (fires when a file is requested)
Functions
To send the output of a file to you can call:
JVM_Protected_Media::send_file_output($fullPathToFile)