[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fmtPWpLv9e6xXgH6Dcg9ilwdecKHdI_JJn_diM7kLSfw":3},{"slug":4,"display_name":4,"profile_url":5,"plugin_count":6,"total_installs":7,"avg_security_score":8,"avg_patch_time_days":9,"trust_score":10,"computed_at":11,"plugins":12},"kistenstein","https:\u002F\u002Fprofiles.wordpress.org\u002Fkistenstein\u002F",1,0,100,30,94,"2026-08-29T05:42:59.897Z",[13],{"slug":14,"name":15,"version":16,"author":4,"author_profile":5,"description":17,"short_description":18,"active_installs":7,"downloaded":19,"rating":7,"num_ratings":7,"last_updated":20,"tested_up_to":21,"requires_at_least":22,"requires_php":23,"tags":24,"homepage":30,"download_link":31,"security_score":8,"vuln_count":7,"unpatched_count":7,"last_vuln_date":32,"fetched_at":33},"kistenstein-club-document-portal","Kistenstein Club Document Portal","1.5.0","\u003Cp>\u003Cstrong>Kistenstein Club Document Portal\u003C\u002Fstrong> turns any WordPress page into a private document library and member area — a Nextcloud-style file manager perfect for associations, clubs, sports teams and small organisations that need to share documents with their members.\u003C\u002Fp>\n\u003Cp>Members open a familiar file explorer with folders, drag-and-drop upload, PDF preview and search. Every area is protected — either by WordPress role\u002Fgroup or by a single shared password — and files are delivered securely through WordPress so they can never be downloaded by guessing a URL.\u003C\u002Fp>\n\u003Ch4>Key Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>Nextcloud-style file explorer\u003C\u002Fstrong> — folder navigation with breadcrumb trail\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Upload\u003C\u002Fstrong> — button and drag-and-drop from desktop\u003C\u002Fli>\n\u003Cli>\u003Cstrong>PDF preview\u003C\u002Fstrong> — inline browser preview via modal iframe, no download required\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Drag-and-drop move\u003C\u002Fstrong> — drag files or folders onto other folders or breadcrumb items to move them\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Folder management\u003C\u002Fstrong> — create, rename and delete folders\u003C\u002Fli>\n\u003Cli>\u003Cstrong>File management\u003C\u002Fstrong> — rename and delete (soft-delete) files\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Soft-delete trash\u003C\u002Fstrong> — deleted items are kept for a configurable retention period (default 180 days)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Admin trash view\u003C\u002Fstrong> — restore or permanently delete items; configurable retention directly in the trash panel\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Two protection modes per area\u003C\u002Fstrong> — choose for every area whether it is restricted to a WordPress role\u002Fgroup, or unlocked with a single shared password\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Upload permissions by role\u003C\u002Fstrong> — define which WordPress role may upload, rename and delete files\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Secure file delivery\u003C\u002Fstrong> — all files are streamed through WordPress, and the upload folder is blocked from direct HTTP access, so protected files cannot be downloaded by guessing their URL\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Page password manager\u003C\u002Fstrong> — editors can view and update the shared password of a password-protected page directly inside the portal (optional)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Fully translatable\u003C\u002Fstrong> — every string uses the \u003Ccode>kistenstein-club-document-portal\u003C\u002Fcode> text domain; the interface follows each user’s WordPress language\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>How access protection works\u003C\u002Fh4>\n\u003Cp>When you set up an area in the wizard you pick one of two modes:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Only a specific role \u002F group\u003C\u002Fstrong> — only logged-in users who hold the chosen WordPress role can open the area. Each member needs their own WordPress account. Best when you want individual accounts (e.g. a board with named members).\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Shared password\u003C\u002Fstrong> — the area’s page is protected with WordPress’ built-in page password. Everyone uses the same password — no individual accounts needed. Best for a members’ area where you simply hand out one password.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>In both cases files are delivered through WordPress and the storage folder is protected from direct access, so the chosen rule is always enforced — not just hidden in the listing.\u003C\u002Fp>\n\u003Ch4>Block editor\u003C\u002Fh4>\n\u003Cp>Prefer the block editor? Add the \u003Cstrong>Document Portal\u003C\u002Fstrong> block to any page and pick the folder in the sidebar — no shortcode required. The classic shortcodes below work exactly the same.\u003C\u002Fp>\n\u003Ch4>Shortcodes\u003C\u002Fh4>\n\u003Cpre>\u003Ccode>[kcdp_explorer folder=\"documents\"]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Renders a file explorer for the named sub-folder. The area’s protection mode is configured in the setup wizard.\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[kcdp_explorer folder=\"members\" manage_password=\"1\"]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Adds a shared-password manager panel for editors (requires the \u003Cstrong>Password-Protected Page\u003C\u002Fstrong> ID to be set under \u003Cstrong>File Portal \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> Advanced\u003C\u002Fstrong>).\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[kcdp_trash]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Trash view with restore and permanent-delete actions. Visible to administrators only.\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[kcdp_audit]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Audit log of all file actions (upload, download, delete, restore …). Visible to administrators only.\u003C\u002Fp>\n\u003Ch4>Configuration\u003C\u002Fh4>\n\u003Col>\n\u003Cli>After activation you are taken to \u003Cstrong>File Portal \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> Set Up\u003C\u002Fstrong>.\u003C\u002Fli>\n\u003Cli>Tick the areas your association needs, name each page, and choose how each area is protected (role\u002Fgroup or shared password).\u003C\u002Fli>\n\u003Cli>Pick which role may upload and manage files.\u003C\u002Fli>\n\u003Cli>Save — the pages are created automatically. Add \u003Ccode>[kcdp_trash]\u003C\u002Fcode> to a restricted admin page to manage deleted files.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch4>Server requirements for protected areas\u003C\u002Fh4>\n\u003Cp>Protected files are blocked from direct download with an \u003Ccode>.htaccess\u003C\u002Fcode> file written into the upload folder. This is honoured by \u003Cstrong>Apache\u003C\u002Fstrong> and \u003Cstrong>LiteSpeed\u003C\u002Fstrong>. If you run \u003Cstrong>nginx\u003C\u002Fstrong>, add an equivalent rule that denies direct access to the portal’s upload folder (e.g. \u003Ccode>location ^~ \u002Fwp-content\u002Fuploads\u002Ffile-portal\u002F { deny all; }\u003C\u002Fcode>), so that protected files are only reachable through the plugin.\u003C\u002Fp>\n\u003Ch4>Privacy\u003C\u002Fh4>\n\u003Cp>When a file is deleted, the following metadata is stored in a trash index file on the server: the original file path, the WordPress user ID and display name of the user who deleted it, and the timestamps for deletion and scheduled expiry. The audit log additionally records, per action, the acting user, a timestamp and the request IP address. This data is stored only on your server and is never transmitted off-site.\u003C\u002Fp>\n","A document library and member area for clubs and associations: upload, organise and share files with role or shared-password protection and a recycle  …",123,"2026-06-18T21:07:00.000Z","7.0.2","6.0","7.4",[25,26,27,28,29],"document-library","document-management","file-manager","member-area","private-files","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fkistenstein-club-document-portal\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fkistenstein-club-document-portal.1.5.0.zip",null,"2026-07-22T17:31:50.256Z"]