White Hat Files does two things that are normally bought separately: it organizes the Media Library into folders —saved in a standard format, so you don’t depend on us— and it brings a server file manager that comes turned off out of the box and locked in a cage.
Anyone who manages a WordPress with many images ends up looking for those two tools. Almost always they are two plugins from two different authors, and both share the same underlying problem.
Folders that don’t hijack you
Media folder plugins store your structure in their own database table. While the plugin is active, perfect. The day you remove it —because it was abandoned, because the price went up, because you switched providers— your folders disappear and you are left with three thousand files in a heap.
Here the folders are a standard WordPress taxonomy, the same kind of thing as post categories. That means the structure lives in the usual tables, that any other tool can read it and that if you uninstall the plugin tomorrow the organization remains. It is dragged and dropped just like the others; the difference is underneath.
A file manager with a cage
The second half —upload, rename, move, delete, compress and decompress server files without FTP— is among the most useful functions that exist and also among the most dangerous. Plugins of this type have been behind attacks on millions of sites, almost always for the same reason: they accept a path that comes from the browser and use it as‑is.
That’s why that half comes here turned off out of the box. It has to be turned on intentionally. And once turned on only administrators see it, and it works within a cage: every incoming path is resolved and checked to ensure it falls within the allowed folder before touching anything. A path that tries to go outside is rejected, not corrected.
What it doesn’t do
It is not a download manager nor a per‑user permission system: whoever enters the file manager is a site administrator, with everything that implies. If you need different people to see different folders, that is another tool.
And it doesn’t just reorganize what you already had: upon installing it, your media stays where it was until you decide the structure.
How it is delivered and what it includes
Everything we publish here originated from a real commission, and this is how it continues to be delivered: installed, documented, and with the code in the name of the payer. Maintenance —updates with prior backup, security review, and a margin of hours for small changes— is contracted separately.
You can see the rest of the pieces at our catalog of themes and plugins, or tell us what your site needs: the initial diagnosis is free and from there it turns out whether something custom is worthwhile or adapting what already exists.
Preguntas frecuentes
What happens to my folders if I uninstall the plugin?
They still exist. Since they are stored as a WordPress taxonomy, the organization does not depend on the plugin being active: it’s your information, in your usual tables.
Does it move site files on the server?
No. Folders are a way to organize the view of the Media Library; the files stay where WordPress puts them. So no image URL breaks when reorganizing.
Is the file manager secure?
It comes turned off out of the box, only administrators see it and every path is checked against an allowed folder before being used. Still, it’s a powerful function: turn it on only if you need it.
In how many languages is it available?
In ten: Spanish, English, French, Italian, German, Brazilian Portuguese, Hindi, Chinese, Russian and Arabic
