We'll create fresh WordPress site with B2 Private Files installed. You have 20 minutes to test the plugin after that site we'll be deleted.
If you have a digital products (downloadable pdf, mp3, mp4 etc) that is supposedly being accessed by registered/paying users, uploading them into the standard media library have problems:
wp-content/uploads
is publicly accessible, and anyone can basically download the file directly thereThis plugin allows you to securely share files to your website users by passing a token to the url. For example, here is a file hosted in B2 Backblaze
https://f001.backblazeb2.com/file/wp-b2-private-files/key.jpg?Authorization=4_0018c3b251e15120000000012_01a459bb_2f35e1_acct_QGJ-TljNx-NqgRLi1dff_XGJjlQ=
note that simply accessing https://f001.backblazeb2.com/file/wp-b2-private-files/key.jpg
wont work, as the file is token-protected.
the plugin generates the value for Authorization
parameter when your post/page is rendered. The token can be only generated from your website, thus its impossible for any other site to crawl your site and scrape the files.
Each token generated can be also configured to expire after N minutes. So if lets say you generated a download link to a big installer, people cant re-use the same link and paste it in public forums, chats etc.
Because the link will expire after few minutes, which makes it hard for user to share file to non-registered users.
Generally the shortcode looks like this:
[b2-private-file-button filename=”my-installer.zip”]
the above shortcode will generate a button with caption “Download”, pointing to the Backblaze B2 file with token passed to it.