We have WordPress website on our linux system. It host number of private files which are visible to who can login. We set the permission of those files as full-read (rwxr-xr-x). The problem is all the content are accessible to anyone who has the direct link! The main question is how can I restrict accesses to these direct link only to logged-in users?
Is there any WordPress plugin or httpd configuration doing this?
I would place a
.htaccessfile withdeny from allclause within the root of the uploads folder.