About this plugin
Coywolf Files stores your downloadable files in your own object storage — Cloudflare R2 or Amazon S3 — instead of the WordPress media library, and gives you a Coywolf File block to add them to posts and pages. Files upload straight from the browser to your bucket, so there is no upload-size limit from PHP.
Features:
- Coywolf File block — upload a new file or browse to one you have already uploaded, then rename it and add a description for that placement, just like any other block. Per-block toggles control the file-type icon, description, meta line, and the Download / Copy-link buttons.
- Any-sized uploads — files upload directly from the browser to your bucket using presigned URLs, with large files sent in resumable chunks. Nothing passes through PHP, so the maximum size is your bucket’s, not your host’s.
- Download card — a clean card with a colored file-type badge, the file name, a “type · size · uploaded date” line, and Download and Copy-link controls, with light and dark themes.
- Two providers, one connection — Cloudflare R2 and Amazon S3 both speak the S3 API, so you connect one bucket with an access key, secret key, bucket name, and region (or Cloudflare account ID).
- Private or public buckets — keep your bucket private (the default) and files are served through short-lived signed links behind a stable URL on your own site, or point downloads at a public bucket / CDN URL.
- All Files library — a table of the files currently added to posts and pages, with per-file counts of how many posts and pages use each one (each count links to a filtered list) and a download counter. Deleting a file here removes it from storage and from every post or page that used it.
- Secure credentials — the secret key is stored encrypted, or kept entirely out of the database in wp-config.php.
External services
This plugin connects to the object-storage provider you configure — one of Cloudflare R2 or Amazon S3 — to store and serve your files. Nothing is sent anywhere until you enter credentials and connect a bucket.
What is sent and when:
- When you connect a bucket or click Test connection, your WordPress server calls the provider’s S3 API (for example s3.amazonaws.com or.r2.cloudflarestorage.com) using your access key and secret key to verify the bucket, to start and finish uploads, to confirm and delete objects, and to sign download links.
- When you upload a file, your browser uploads the file’s bytes directly to your bucket’s storage host using a short-lived signed URL that your server generated.
- When a visitor downloads a file, their browser is redirected to a short-lived signed URL (or your configured public URL) on the storage host to fetch the file.
The provider is the one you choose; consult its terms and privacy policy:
- Amazon S3 — Service Terms: https://aws.amazon.com/service-terms/ · Privacy Notice: https://aws.amazon.com/privacy/
- Cloudflare R2 — Terms: https://www.cloudflare.com/website-terms/ · Privacy Policy: https://www.cloudflare.com/privacypolicy/