PDF Embedder Premium Secure

Locking the page does not lock the PDF inside it

You put a document on a login-protected page or in a members area and assume it is safe. It is not: WordPress serves everything in the Media Library at its own URL, and that URL answers to anyone, whether or not they got past your login or your membership plugin. The page is locked, the viewer works and the file has been in the open the whole time. Hardly anyone notices because nothing looks broken.

PDF Embedder Premium Secure closes that gap: files live in a protected folder and can only be read where you embed them.

A 403 for anyone who requests the file directly

When you switch the option on, every new PDF is saved in wp-content/uploads/securepdfs/ instead of the usual folder. If someone tries to open the file's URL, they get a 403 error. The reader, on the other hand, sees the same PDF in the viewer, delivered from the server.

• Right-click disabled: the viewer stops showing that menu, which in some browsers lets you save a page as an image. It applies to all secure PDFs, and you can change it for a single document with disablerightclick in the shortcode.
• Out of Google: a text-based PDF is indexed almost like a web page, even if you embed it. Because the folder is protected, search engines cannot reach the file either.
• A page of its own for each PDF: you can generate an attachment page with the viewer, built with your theme's template. That is the address you share in a newsletter or an email: whoever receives it reads the document but does not walk away with the file.
• Security document by document: a checkbox decides where your next upload goes. Secure and standard PDFs live side by side on the same site.

Four kinds of site where a loose PDF is a problem

Members area, courses or clients

Your membership plugin decides who gets into the page, but it does not protect the file if someone has its URL. With secure storage, the direct link stops serving the document.

Company with reports, bids or internal lists

A tender response, an internal price list or a client report can show up in Google without you ever publishing it. Try searching site:yourdomain.com filetype:pdf to see what is indexed today.

Author or creator showing their work

If you publish poems, sheet music or guides, copying on impulse is the usual problem. Closing the two-click route (downloading or saving with the right button) makes many people simply read.

Site with public and private documents at once

A menu or a spec sheet works better when it gets found and shared. Leave those as a standard embed and keep secure storage for contracts and sensitive documents, without running two WordPress installs.

Frequently asked questions before switching it on

Does it protect the PDFs I have already uploaded? No. Earlier ones stay in the regular folder. You need to upload them again and update the shortcodes or blocks that point to them with the new URL.

Can a determined person still copy the content? Getting the original file becomes hard, but no browser-based viewer can stop someone capturing what they see on their own screen. Copying goes from one click to a slow, manual process.

Does it slow down the site? Secure PDFs are encrypted before they reach the browser, so the first view takes longer. After that the cached copy is served, which is on by default, and it re-encrypts by itself if you replace the file. If you use a caching or minifying plugin, exclude PDF Embedder.

Where is it configured? Under Settings > PDF Embedder > Secure, in the WordPress admin.

Nginx, Caddy and IIS need the folder blocked by hand

On Apache and compatible servers, including LiteSpeed and OpenLiteSpeed, the folder protects itself. On Nginx, Caddy and Microsoft IIS you have to block the securepdfs directory manually; the notice on the Secure tab points you to the guide for your server.

Nor does it decide who may see a page: WordPress or a membership or access control plugin handles that. This plugin stops that decision from being bypassed through the file URL.