Description
BBA Secure File Downloads lets you select files from the Media Library and generate a stable File ID for each file. Then you can place a download button anywhere using:
[bbasfd_download id=”FILE_ID”]
The download is served through a controlled endpoint instead of exposing the direct file URL.
Looking for the PRO version?
https://bigbad.agency/portfolio/wordpress-plugins/secure-file-downloads-for-wordpress/
Usage
Shortcode:
* [bbasfd_download id=”FILE_ID”]
Optional:
* text=”Get the free plugin”
* class=”my-css-class”
Installation
- Upload the plugin folder to /wp-content/plugins/ or install via Plugins.
- Activate the plugin.
- Go to Secure Downloads Files and add your files.
- Copy the shortcode and paste it into a page/post.
FAQ
-
Why does FREE limit to 3 files?
-
This keeps the free plugin fully usable while allowing a PRO upgrade path. PRO can unlock unlimited files. With PRO, you can also enjoy analytics, password protected downloads, limited number of downloads and complete control of your file download system.
-
Does it work with Elementor?
-
Yes. Use Elementor’s Shortcode widget with the [bbasfd_download] shortcode.
-
Where can I get the PRO version?
-
You can learn more about the PRO version here:
https://bigbad.agency/portfolio/wordpress-plugins/secure-file-downloads-for-wordpress/
Reviews
There are no reviews for this plugin.
Contributors & Developers
“BBA Secure File Downloads” is open source software. The following people have contributed to this plugin.
ContributorsTranslate “BBA Secure File Downloads” into your language.
Interested in development?
Browse the code, check out the SVN repository, or subscribe to the development log by RSS.
Changelog
1.0.7
- Security: Validate the download nonce before touching any other request input.
- Security: Add clear permission hooks for download authorization.
- Compliance: Document raw/binary output in the download endpoint for scanners.
1.0.2
- Fix: Plugin Check compliance (admin enqueue without direct $_GET access, readme headers).
1.0.1
- Fix: add nonce to download links and validate in handler.
- Fix: use WP_Filesystem for file reads (Plugin Check compliance).
- Fix: wp_unslash() before sanitization for request values.
- Fix: translators comment for placeholder strings.
- Meta: bump Tested up to.
1.0.0
- Initial release: Files UI, Settings, How to Use, Help/About, shortcode, and secure download endpoint.




