wordpress: how to secure attachments from other users - wordpress

As a admin I created some posts with attachments and allowed permissions to particular users it works fine no other member or non-member can access those posts but what about the attachments everyone can access those attachments.
I read http://www.idowebdesign.ca/wordpress/password-protect-wordpress-attachments/ but I don't want to use .htaccess. Is there any good wp plugin which do this?

You can download the SEO by Yoast plugin. In that there are settings to apply a no-index etc. to make the content un-discoverable by search and the sitemap.
You could also use membership plugins like imember360 (formerly infusionwp) or Premise (by coppyblogger people)
There are quite a few ways to secure attachments etc.
I guess my question would be can anyone see the page where the attachments are, or is it a page you give them a link to?
Thanks!

Related

Wordpress - restrict access to certain post types

I have a Wordpress site that the client wants to set a couple of users up on, purely for creating, editing and deleting blogs. They want to assign these users the 'author' role and when they log into the admin area, they only want them to see the post type 'posts'. They do not want them to have access to media or any other custom post types. Does anyone have any ideas on this please?
User Role Editor plugin (https://wordpress.org/plugins/user-role-editor/) has always served me well in cases like that.
As the description says: User Role Editor WordPress plugin makes user roles and capabilities changing easy. Edit/add/delete WordPress user roles and capabilities.
Sounds like the Groups plugin is what you're looking for here. I don't think that functionality is possible within stock Wordpress.
This allows you to further segregate users and permissions, restricting to posts, etc.

Different users and rules in Wordpress or Joomla

I am going to make a website which there is 3 type of users.
Admin
- can CRUD posts
Teacher
- can CRUD own posts in their's own pages.
Student
- can Read posts, comment, ...
I know how to do this in PHP, but I need to implement this website with Wordpress OR Joomla.
Can Wordpress/Joomla provide my needs or I have to install extra plugins.
If I need plugins, would you please tell me plugin's names.
You could do that with Joomla default features.
Super Administrator would have full access to administrator panel and all articles.
Then you have to create Authors that could have access to their own articles (this is the full list of privileges in Joomla).
As for students you have to find a comments extension.
Good Luck!

Wordpress Advanced Search Plugin

I want to design a Wordpress site that contains all of the usual Wordpress components (blog, contact us, image gallery, etc). I want to have a separate section of the site for "Books" and "Articles".
Admins will be able to enter a book/article with its detailed information (title, author, reference, etc.). I need to have a way for users (non admin) to be able to do an advanced search on these books entered by the Admin.
Should I use Wordpress for the entire site, and write a custom plugin for the book search piece? OR Have a custom PHP page for the searching? OR Is there a plugin that already exists where I could leverage Wordpress to do this advanced search for me? Any information to point me in the right direction would help.
Take a look at this Wordpress Plugin. It should provide you with what you need within the bounds of Wordpress. This should save time from having to write custom PHP code for this functionality.
There are probably other plugins available too that could work for you. One of the benefits of open source is there is a lot of user created content. This should help get you started.

wordpress restrict pulgin installation to those who have a unique code

i want to make an wordpress plugin, and to put it public, but i want that only the users that have a certain unique code to be able to activate it.
is there possible using the wordpress api to ask for a unique code at plugin activation (and to condition the plugin activation by this code)? I searched wordpress codex, but nothing found.
thanks a lot!
This sounds like the old akismet plugin which required users to register for an API token. You can as part of your plugin require users to enter settings and at this point prompt them to register for an API key.
See the WordPress codex for adding an options page.
Also see this example for a good example of hooking into the plugin activation:

Wordpress - Database

New to Wordpress.
I am aware the default database to Wordpress is MySQL.
Like livejournal, i have a small requirement which allows Admin to post content and registered users on the website are allowed to post contents.
I decided to go with Wordpress, but still have not done much research on allowing registered users to post contents as like admin.
I am wondering, What database would be the best to go with ?
SQL or MySQL ?
Also, whether these contents are stored in the Database or in the form of .doc ?
The database you use doesn't matter as long as Wordpress supports it.
Comment functionality is built into Wordpress. You don't need to do any custom development to make it happen. If you only want registered users to be able to comment, you'll have to make a setting requiring users to be registered and logged in to comment. This setting is under Settings - Discussion. Comments are stored in the database.
Those are a few questions in one, so I'll answer each one of its own and paraphrase:
Can Wordpress use some other database than MySQL?
No, Wordpress only supports MySQL, so there is no choice.
Are the posts or pages/content in Wordpress stored in a database or in a .doc file
The contents of posts in Wordpress, just like in liveJournal, are actually stored in a database.
Is it possible to allow users in Wordpress to submit content that an admin can then review and publish/delete later etc.
Yes. Very much so. I believe it's built into Wordpress, you just need to have a registered user and enable the feature.

Resources