內容簡介
R2 Storage Manager for Cloudflare 是一款讓 WordPress 使用者能夠透過 S3 相容 API 安全管理 Cloudflare R2 儲存的外掛。使用者可以上傳檔案、瀏覽儲存物件，並生成限時下載連結，確保檔案的私密性與安全性。
【主要功能】
• 安全文件同步：無需改變前端媒體 URL 即可同步文件
• 直接上傳至 R2：安全地從 WordPress 上傳檔案
• 安全下載：透過 REST API 生成限時簽名 URL
• 私密檔案傳遞：檔案不公開，僅透過簽名 URL 傳遞
• 可設定過期時間：自訂下載連結的過期時間
• 基本檔案瀏覽器：從控制台查看和管理儲存檔案
外掛標籤
開發者團隊
② 後台搜尋「R2 Storage Manager for Cloudflare」→ 直接安裝（推薦）
原文外掛簡介
R2 Storage Manager Lite enables restricted file management between WordPress and Cloudflare R2 using its S3-compatible API.
Upload files to your R2 bucket, browse stored objects, and generate expiring signed download links — all from your WordPress dashboard.
Unlike traditional storage solutions, this plugin ensures that your files remain private and are only accessible through controlled, time-limited URLs.
Key Features (Lite)
Secure Document Sync – Synchronize documents and digital assets from WordPress to Cloudflare R2 without altering frontend media URLs.
Direct Upload to R2 – Securely upload files from WordPress to Cloudflare R2.
Secure Downloads via REST API – Generate expiring signed URLs using a hardened REST endpoint.
Private File Delivery – Files are not publicly accessible and are delivered via signed URLs.
Configurable Expiration – Set custom expiration times for download links.
Basic File Browser – View and manage stored files from the admin panel.
S3-Compatible API – Fully compatible with Cloudflare R2 infrastructure.
Use Cases
Deliver private digital files securely
Share time-limited download links
Protect premium content
Replace insecure direct file URLs
Manage external storage for documents and digital assets
Pro Version (Optional)
Upgrade to unlock advanced capabilities:
High-capacity multipart uploads for very large files
Drag & drop interface
Advanced file manager with folders
Download tracking & analytics
User quotas and restrictions
Advanced security (IP, referer, geo restrictions)
Webhooks & automation tools
More information: https://www.r2suites.com/products/wordpress/cloudflare-r2-storage-manager-pro
Architectural Policy & Limitations
CR2SM Lite is a Secure File Sync tool for documents, zip files, and digital products. It is NOT an image CDN or frontend acceleration plugin.
To guarantee architectural stability and prevent unexpected CDN abuse, this plugin enforces a strict No-URL-Rewrite Policy:
* It MUST NOT filter wp_get_attachment_url.
* It MUST NOT rewrite srcset attributes.
* It MUST NOT replace native attachment URLs on your frontend.
* It MUST NOT alter frontend delivery or inject CDN URLs.
This plugin is exclusively designed for secure backend synchronization of documents and digital assets.
Storage Overview Scope
The Storage Overview feature reports CR2SM Lite-managed storage only. The included namespaces are specifically limited to:
* lite/
* media/
Nested subdirectories under these folders (e.g., lite/2026/file.pdf) are included. Objects located in unrelated R2 folders are intentionally excluded. This is intentional because CR2SM Lite manages its own dedicated namespaces and is not intended to be a generic R2 bucket explorer. The Storage Overview therefore represents CR2SM Lite-managed storage, not the total storage used by your R2 bucket.
External Services
This plugin connects to Cloudflare R2 Object Storage.
Service provider: Cloudflare, Inc.
Service URL: https://www.cloudflare.com/
Privacy Policy: https://www.cloudflare.com/privacypolicy/
Purpose:
Storage and secure delivery of files via S3-compatible API.
Data sent:
* Access Key ID
* Secret Access Key
* Bucket name
* File upload and retrieval requests
Data is only transmitted when explicitly configured and used by the administrator.
Gutenberg Block
The plugin includes a built-in “R2 Download” block. You can insert a download button directly in the WordPress block editor without using shortcodes.
Simply search for “R2 Download” in the block editor and configure the file key and label.
Shortcodes
Use the shortcode to generate a secure download button with restricted access:
[cr2sm_download file=”lite/file.pdf” label=”Download”]
Files are delivered through time-limited signed URLs and are not publicly accessible.
