Title: Darkstar File Manager Author: justinblayney Published: 4 maart 2026 Last modified: 9 maart 2026 --- Plugins zoeken ![](https://ps.w.org/darkstar-file-manager/assets/banner-772x250.png?rev=3474754) ![](https://ps.w.org/darkstar-file-manager/assets/icon-256x256.png?rev=3474754) # Darkstar File Manager Door [justinblayney](https://profiles.wordpress.org/justinblayney/) [Download](https://downloads.wordpress.org/plugin/darkstar-file-manager.1.0.3.zip) * [Details](https://nl.wordpress.org/plugins/darkstar-file-manager/#description) * [Beoordelingen](https://nl.wordpress.org/plugins/darkstar-file-manager/#reviews) * [Installatie](https://nl.wordpress.org/plugins/darkstar-file-manager/#installation) * [Ontwikkeling](https://nl.wordpress.org/plugins/darkstar-file-manager/#developers) [Ondersteuning](https://wordpress.org/support/plugin/darkstar-file-manager/) ## Beschrijving Darkstar File Manager is a secure, easy-to-use plugin that creates a private document portal for each WordPress user. Perfect for accountants, lawyers, consultants, or any business that needs to securely exchange documents with clients. #### Key Features * **Secure File Storage** – Store files outside your web root for maximum security * **User Isolation** – Each client can only access their own documents * **Two-Way File Sharing** – Administrators can upload files for clients, and clients can upload files back * **Separate File Sections** – Client view shows “Documents from Professional” and “Your Uploaded Documents” separately * **Simple Shortcode** – `[dsfm_client_login]` displays login form and document manager * **File Type Validation** – Configurable allowed file types (PDF, DOC, DOCX, XLS, XLSX, images, etc.) * **File Size Limits** – Set maximum upload size (1-100 MB, default 50 MB) * **MIME Type Checking** – Prevents malicious file uploads * **Bulk Operations** – Delete multiple files at once from admin panel * **Translation Ready** – Full internationalization support with Polylang integration * **Responsive Design** – Works on desktop, tablet, and mobile devices #### How It Works 1. **Create a Client Portal Page** – Add the shortcode `[dsfm_client_login]` to any page 2. **Configure Settings** – Set upload path (outside web root recommended), file types, and size limits 3. **Upload Files for Clients** – Go to Users hover over user click “View Documents” to upload 4. **Clients Access Files** – Clients log in and visit the portal page to view and upload documents #### Security Features * All files served through authenticated download handler (not direct file access) * Path traversal protection with directory separator enforcement * User authentication required * Nonce verification on all forms and downloads * CSRF protection on admin file downloads * File type, MIME, and WordPress built-in type validation * ZIP bomb protection (uncompressed content limit) * Upload rate limiting (20 uploads per user per hour) * Files stored outside web root by default * Protective `.htaccess` and `index.php` written to upload directory on activation * Each user can only access their own files #### Note on File Storage This plugin stores uploaded files outside the web root for security. Because of this requirement, files are moved using PHP’s `move_uploaded_file()` directly after passing validation through WordPress’s `wp_check_filetype_and_ext()`, our own MIME type check, extension allowlist, and size limits. Files cannot be stored through` wp_handle_upload()` without placing them inside the publicly accessible uploads directory, which would reduce security. #### Perfect For * Tax professionals sharing documents with clients * Lawyers exchanging contracts and legal documents * Consultants sharing reports * Any business requiring secure client file exchange ### Additional Information #### Support For support, please visit [Darkstar Media](https://www.darkstarmedia.net) or contact us through our website. #### Privacy Policy This plugin stores uploaded files on your server and metadata (filenames, timestamps, uploader) in JSON files. No data is sent to external servers. #### Credits Developed by Darkstar Media ## Schermafbeeldingen * [[ * Client portal view showing documents from professional and client upload section * [[ * Admin interface for uploading files to specific clients * [[ * Settings page with configuration options and instructions * [[ * User list with “View Documents” action link ## Installatie #### Automatic Installation 1. Log in to your WordPress admin panel 2. Go to Plugins Add New 3. Search for “Darkstar File Manager” 4. Click “Install Now” and then “Activate” #### Manual Installation 1. Download the plugin zip file 2. Log in to your WordPress admin panel 3. Go to Plugins Add New Upload Plugin 4. Choose the zip file and click “Install Now” 5. Activate the plugin #### After Installation 1. Go to Settings Darkstar File Manager 2. Configure the upload folder path (recommended: outside web root for security) 3. Set allowed file types and maximum file size 4. Create a new page (e.g., “Client Portal”) 5. Add the shortcode: `[dsfm_client_login]` 6. Publish the page 7. Share the page URL with your clients ## FAQ ### How do I upload files for a specific client? Go to Users in your WordPress admin panel. Hover over the user you want to upload files for, and click “View Documents”. You’ll see an upload form where you can select and upload files for that client. ### Where are the files stored? Files are stored in the path you configure in Settings Darkstar File Manager. For maximum security, we recommend storing files outside your web root (e.g., `/var/ www/client-docs` instead of `/var/www/html/wp-content/client-docs`). ### Can clients see other clients’ files? No. Each client can only see and download files in their own folder. The plugin enforces strict user isolation. ### What file types are allowed? By default: PDF, DOC, DOCX, XLS, XLSX, CSV, TXT, JPG, JPEG, PNG, GIF, WEBP, and ZIP files. You can customize this list in Settings Darkstar File Manager. ### How do I change the maximum file size? Go to Settings Darkstar File Manager and adjust the “Maximum File Size (MB)” setting. You can set it between 1 and 100 MB. ### Is this plugin translation ready? Yes! The plugin is fully internationalization-ready and includes Polylang integration for multilingual sites. Translation files are located in the `/languages` directory. ### Can clients delete files I upload for them? No. Files uploaded by administrators appear in a separate “Documents for you” section( read-only). Clients can only delete files they uploaded themselves. ### How do clients access their documents? Clients simply log in to your WordPress site and visit the page where you added the `[dsfm_client_login]` shortcode. After logging in, they’ll see all their documents and can upload new ones. ### Does this work with iThemes Security, Wordfence, or other security plugins? Yes! The plugin automatically detects and uses the custom login URL configured by security plugins like iThemes Security, Wordfence, or any other plugin that changes the WordPress login page. The login form on the shortcode page will work seamlessly with these security plugins. ### Is this secure? Yes. The plugin implements multiple security layers: – Files are served through an authenticated handler (not direct URLs) – User authentication required – Path traversal protection – File type, MIME, and WordPress built-in type validation – Nonce verification on all actions – Files can be stored outside web root ## Beoordelingen ![](https://secure.gravatar.com/avatar/9df4156351429eecbfb66b1406b02a528ed59f6a74b2f0ef78d81812caed8b60? s=60&d=retro&r=g) ### 󠀁[Great tool to use](https://wordpress.org/support/topic/great-tool-to-use-7/)󠁿 [smartflow](https://profiles.wordpress.org/smartflow/) 1 april 2026 A great way to safely share sensitive documents. [ Lees 1 beoordeling ](https://wordpress.org/support/plugin/darkstar-file-manager/reviews/) ## Bijdragers & ontwikkelaars “Darkstar File Manager” is open source software. De volgende personen hebben bijgedragen aan deze plugin. Bijdragers * [ justinblayney ](https://profiles.wordpress.org/justinblayney/) [Vertaal “Darkstar File Manager” in je eigen taal.](https://translate.wordpress.org/projects/wp-plugins/darkstar-file-manager) ### Interesse in ontwikkeling? [Bekijk de code](https://plugins.trac.wordpress.org/browser/darkstar-file-manager/), haal de [SVN repository](https://plugins.svn.wordpress.org/darkstar-file-manager/) op, of abonneer je op het [ontwikkellog](https://plugins.trac.wordpress.org/log/darkstar-file-manager/) via [RSS](https://plugins.trac.wordpress.org/log/darkstar-file-manager/?limit=100&mode=stop_on_copy&format=rss). ## Changelog #### 1.0.2 * Renamed plugin to Darkstar File Manager with new slug darkstar-file-manager * Updated all function, option, and constant prefixes from cdm_ to dsfm_ * Added wp_check_filetype_and_ext() to upload validation for WordPress-native file type checking * Added justinblayney as contributor #### 1.0.0 * Initial release * Secure file upload and download system * Admin can upload files for clients via Users admin panel * Clients can upload and download files via shortcode portal * Separate sections for admin-uploaded vs client-uploaded files * Configurable file types, size limits, and upload path * File type, MIME type, and WordPress built-in type validation * ZIP bomb protection (uncompressed size limit) * Upload rate limiting (20 uploads per user per hour) * CSRF protection on all forms and file downloads * Path traversal protection with directory separator enforcement * Protective `.htaccess` and `index.php` auto-written to upload directory * Upload directory defaults to outside web root for security * Bulk delete functionality for admins * Privacy policy content registered with WordPress * Clean uninstall removes all plugin options * Translation ready with Polylang support * Responsive design ## Meta * Versie **1.0.3** * Laatst geüpdatet **1 maand geleden** * Actieve installaties **10+** * WordPress versie ** 5.0 of nieuwer ** * Getest t/m **6.9.4** * PHP versie ** 7.4 of nieuwer ** * Taal * [English (US)](https://wordpress.org/plugins/darkstar-file-manager/) * Tags * [client portal](https://nl.wordpress.org/plugins/tags/client-portal/)[document management](https://nl.wordpress.org/plugins/tags/document-management/) [file upload](https://nl.wordpress.org/plugins/tags/file-upload/) * [Geavanceerde weergave](https://nl.wordpress.org/plugins/darkstar-file-manager/advanced/) ## Waarderingen 5 van 5 sterren. * [ 1 5 ster beoordeling ](https://wordpress.org/support/plugin/darkstar-file-manager/reviews/?filter=5) * [ 0 4 sterren beoordelingen ](https://wordpress.org/support/plugin/darkstar-file-manager/reviews/?filter=4) * [ 0 3 sterren beoordelingen ](https://wordpress.org/support/plugin/darkstar-file-manager/reviews/?filter=3) * [ 0 2 sterren beoordelingen ](https://wordpress.org/support/plugin/darkstar-file-manager/reviews/?filter=2) * [ 0 1 sterren beoordelingen ](https://wordpress.org/support/plugin/darkstar-file-manager/reviews/?filter=1) [Your review](https://wordpress.org/support/plugin/darkstar-file-manager/reviews/#new-post) [Bekijk alle beoordelingen](https://wordpress.org/support/plugin/darkstar-file-manager/reviews/) ## Bijdragers * [ justinblayney ](https://profiles.wordpress.org/justinblayney/) ## Ondersteuning Iets te melden? Hulp nodig? [Het supportforum bekijken](https://wordpress.org/support/plugin/darkstar-file-manager/)