內容簡介
Folio Drawbridge 讓已驗證的 WordPress 使用者能夠將檔案上傳至命名的保險庫，並使用 AES-256-CBC 加密存儲，確保檔案安全。外部未驗證的接收者可以透過雙重驗證流程安全地共享保險庫內容，所有操作均記錄於不可變的審計日誌中。
【主要功能】
• 加密保險庫存儲，使用 AES-256-CBC
• 雙重驗證的外部共享流程
• 支援多檔案及分塊上傳
• ZIP 批量下載所有檔案
• 角色基礎的存取控制
• 不可變的審計日誌記錄所有事件
外掛標籤
開發者團隊
原文外掛簡介
Folio Drawbridge lets authenticated WordPress users upload files into named vaults, where they are encrypted at rest using AES-256-CBC before being written to disk. Vault contents can be shared securely with external, unauthenticated recipients through a two-factor verification flow: invite email → email confirmation → one-time code. Every action across the plugin is recorded in an immutable audit log.
Key features
Encrypted vault storage — AES-256-CBC with a unique per-vault key derived from a site-wide master key. Files stored with direct HTTP access blocked.
Two-factor external sharing — recipients receive an invite link, confirm their email, then verify a time-limited one-time code before downloading.
Multi-file and chunked upload — files split client-side and reassembled server-side, bypassing PHP upload_max_filesize limits.
ZIP bulk download — recipients can download all vault files as a single archive (requires PHP ZipArchive).
File type restrictions and per-user storage quotas — enforced server-side at upload time.
Role-based access — two tiers of non-admin access: Drawbridge Admin (full panel) and Vault User (My Vaults only).
Global share limits — default and maximum download counts and link expiration windows, retroactively enforceable.
OTP rate limiting — configurable cooldown between one-time-code requests.
Lifecycle management — hourly WP-Cron expires vaults and shares, sends expiry warnings, prunes stale OTPs, and cleans orphaned upload chunks.
Download notifications and expiry warnings — vault owners are emailed on recipient downloads and before share links expire.
Customisable email templates — subject and body for all four system emails with {placeholder} tokens.
Immutable audit log — every event logged with actor, IP, and timestamp. Filterable, sortable, exportable to CSV.
SIEM logging — append every audit event to a log file in JSON (NDJSON) or CSV for Splunk, Datadog, ELK, and similar tools. Written inside your uploads directory and protected from direct web access; redirectable with a wp-config.php constant.
Vault inspector — administrators can browse every vault, download files, edit metadata, transfer ownership, and revoke shares. All actions audited.
Part of the Folio suite
Folio Drawbridge shares a single “Folio” admin menu with the other Folio access and data-protection plugins when more than one is installed.
