ShareVault

Share

• Links for one file or a whole folder: expiry, download limit, password, note, group; branded page with previews (images, PDF, text, audio, video), per-file download, download-all as .zip, QR code, copy button
• Files live in a private folder under a random name without extension (or in your bucket); downloads stream through PHP with range support, or redirect to a short-lived presigned URL
• Per-IP daily download limits, optional login requirement, a bypass-proof state machine: active, expired, revoked, exhausted

Collect

• Upload-request pages: a dropzone your clients open without an account; name and email collection, file-count / size / type limits, closing date, password
• Chunked, resumable uploads: 1.5 MB chunks by default, automatic retry with back-off, resume after a closed tab, SHA-256 verified; works behind small PHP upload limits
• Email the owner on every upload (and the uploader a receipt); embed the dropzone anywhere with [sharevault_dropzone token="…"]

Scan

• ClamAV (clamdscan when the daemon runs, clamscan otherwise) on every file; infected files are quarantined and can never be downloaded; pending scans finish in the background
• Zip-bomb guard: entry count, compression ratio, nested archives and path-traversal names are refused before the file is stored
• Dangerous extensions blocked anywhere in the name (file.php.txt), an EICAR self-test, Site Health check

Deliver

• Map products to files: CodeSell, WooCommerce, Easy Digital Downloads (or do_action('sharevault_deliver', …) from any code); a paid order creates a personal delivery link and emails it with your template
• Delivery links reference the same stored object, so a product update never re-uploads

Manage

• Overview with 30-day downloads / uploads, top links, scanner and storage status; links with search, filters, groups, bulk revoke / restore / delete / re-expire; a files view with rescans, releases and offloads; an audit log (masked IPs)
• Quotas per role (storage and link count) with per-user overrides; chosen roles may create their own links through the REST API
• S3-compatible offload (AWS S3, Cloudflare R2, Backblaze B2, MinIO, Wasabi): SigV4 uploads, presigned downloads, one-click migration of existing files, connection test
• Branding: name, logo, colour, intro texts, footer, dark style
• REST: GET/POST sharevault/v1/links, GET sharevault/v1/links/<token>, DELETE …/<token>, POST sharevault/v1/deliver