Block direct access to images by URL

milankresoja

Hello,
I'm trying to block direct access to images using URL to visitors and Editor role.

I've followed this tutorial but it didn't work: https://aamplugin.com/article/how-to-manage-access-to-the-wordpress-media-library

Is there any other way to block direct access to images? (if it makes is easier, block could be applied to direct access to all files in wp-content/uploads)

vasyl

milankresoja typically there are two types of tiles in the wp-content/uploads: those that are part of the media library and those that are not. The big difference between them is that the first one is also a post that has records stored in wp_posts database table.

The "How to manage access to the WordPress media library" explains how to setup your server to redirect direct access to files to the AAM access handler.

Now, if your files are part of the media library, then you can manage access to them on the Posts & Terms tab. However, if they are not, then you should use URI Access tab.

Either way, everything should work as expected if setup correctly.

Regards,
Vasyl

milankresoja

Hello Vasyl,

When I this to my htaccess file

# BEGIN AAM Media Access Control
<IfModule mod_rewrite.c>
    RewriteEngine On
    RewriteBase /
    RewriteCond %{REQUEST_FILENAME} -f
    RewriteCond %{REQUEST_URI} wp-content/uploads/(.*)$
    RewriteRule . /index.php?aam-media=1 [L]
</IfModule>
# END AAM Media Access Control

And than set in Post and Terms - Media - Restricted - you really can't access images as a visitor, using direct URL of the image. This is great!

But, problem is, when you login as users (it doesn't matter whether you are admin, or any other user role) images aren't showing up on the website.

So, I need an option, where direct url access to images will be blocked to visitors, but once you login, you will be able to see images on the website.

vasyl

milankresoja it is most likely the redirect rules have to be customized for your website or your access settings are not defined correctly. It is hard to say what is the root cause without some additional troubleshooting.

Try to reset all AAM settings on the Settings area and confirm that your visitor actually CAN access images. If not, then redirect rules have to be customized. However, if visitor can see images, then try to set default access settings for all Media on the Posts & Terms ONLY for visitors.

Keep me posted.
Vasyl