Access by WordPress role
Each rule maps a WordPress role to a Dropbox folder. Users see only what belongs to them.
WordPress plugin - Dropbox integration
Turn Dropbox into a private client area on your WordPress site
Connect your Dropbox folders and decide which WordPress role sees what. Files are streamed through WordPress, so a public share link never exists.
Reseller documents
Price lists, technical sheets and marketing assets - synced from Dropbox
Home / 2026 Catalogue
Search files in this folder
Technical sheets18 files
--
Open
PDF
Price-list-2026-EU.pdfUpdated 2 hours ago
2.4 MB
PreviewDownload
Product-render-front.jpgUpdated yesterday
1.1 MB
PreviewDownload
XLS
Stock-availability.xlsxUpdated 3 days ago
340 KB
Download
DOC
Reseller-agreement.docxUpdated last week
88 KB
Download
Works with the stack you already run
- WordPress
- Dropbox API v2
- Gutenberg
- Elementor
- Any theme
Core features
A reserved area your clients can actually use
You keep publishing to Dropbox as always. Your clients log in and find only their folders.
No public link, ever
No Dropbox shared link is ever created. Every file passes through WordPress, checked on each request.
Browse, search and preview
Breadcrumbs, list and grid views, filename search, and inline preview for images and PDFs.
View-only mode
Turn downloads off per rule: images are served reduced and PDFs are not exposed at all.
Read-only on Dropbox
Three read-only scopes. The plugin cannot write, rename or delete anything in your account.
One shortcode, any theme
Drop [lr_dropbox_portal] on any page. A built-in reset keeps your theme from breaking the layout.
Security by design
The link cannot leak, because there is no link
Most Dropbox plugins hand the browser a Dropbox URL. Anyone who copies it keeps access, outside your site and outside your control. Dropbox Portal takes the opposite route.
- No shared links are generated. Absolute Dropbox paths never reach the browser: the frontend only knows a rule ID and a relative path.
- Every request is checked four ways: authentication, role, nonce and whether the path really belongs to the allowed folder.
- SVG and HTML are never served inline, because they can carry executable code in your site origin. They stay downloadable as attachments.
- Inline delivery is whitelisted to JPEG, PNG, GIF, WebP, BMP, TIFF and PDF. Anything else is forced to attachment, whatever MIME another plugin registered.
- Pages are excluded from cache. The shortcode declares DONOTCACHEPAGE and sends no-cache headers, because the output depends on who is logged in.
Logged-in userRequests a file from the portal page
WordPress checksSession, role, nonce, path ownership
PASS
Server streams the fileIn chunks, so PHP memory stays flat
Dropbox URL to the browserNever happens, by design
BLOCKED
The interface
Clean on the front, guided on the back
A file browser that looks like it belongs to your site, and a setup page that tells you what to do next.
Project documents
Updated from Dropbox
Home / Contracts / 2026
invoice
Signed7 files--Open
PDFInvoice-2026-014.pdfUpdated today180 KBPreviewDownload
PDFInvoice-2026-013.pdfUpdated 4 days ago176 KBPreviewDownload
DOCInvoice-summary.docxUpdated 1 week ago64 KBDownload
Search is limited to the folder the user is allowed to see. Results never cross a rule boundary.
Marketing assets
Logos, product renders and campaign images
JPG
Hero-shot-01.jpg2.8 MB
PDF
Brand-guide.pdf6.1 MB
PNG
Logo-pack.png820 KB
ZIP
Campaign-Q3.zip44 MB
Thumbnails are generated by Dropbox, so image folders stay fast even when the originals are heavy.
The setup page generates your redirect URI, checks the connection with real API calls and reports what to fix.
And also
The details that decide a rollout
The things that turn a demo into something you install on twenty client sites.
Guided setupA four-step page with a completion indicator instead of a wall of fields.
Connection diagnosticsTwo real API calls, HTTP status, masked token state and what to do about it.
Configurable cacheFive minutes by default, tunable, with a refresh button in the browser.
Light, dark or autoThe portal can follow the visitor's system preference.
Accent colourOne CSS variable restyles the whole portal to your brand.
Overridable templateCopy the browser template into your theme and change the markup.
Developer hooksFilters for scopes, user roots and per-file access, plus an action on every file access.
Audit-readyAn action fires on every file access, ready to feed your logging.
Team foldersTeam folders mounted in the connected account are read as normal folders.
Chunked streamingLarge files transfer in blocks, so PHP memory does not blow up.
Multi-site friendlyThe redirect URI is generated from the site address, or pinned in wp-config.
Size limit controlSet the maximum file size the server is allowed to stream.
How it works
Live in four steps
No build step, no external SDK. Plain WordPress talking to the Dropbox API v2.
1
Install the plugin
Upload the zip from Plugins › Add New, activate it, and a Dropbox Documents menu appears.
2
Create your Dropbox app
Scoped access, three read permissions, and the redirect URI the plugin generates for you.
3
Map roles to folders
Pick a folder with the built-in browser, choose the role, decide whether downloads are allowed.
4
Publish the page
Add the shortcode to any page and your reserved area is online.
[lr_dropbox_portal]
Pricing
Start free, upgrade when the rollout grows
The free version runs a real client area on one site. Pro adds what you need once there is more than one folder.
Free
One folder, one role, everything you need to prove the idea.
€0forever
1 site · 1 access rule
Download Free
Includes a 7-day Pro trial
- OAuth connection, read-only
- Folder browsing with breadcrumb
- Protected streaming download
- List view, light theme
- Search, preview, grid view
- View-only mode
Business
One supplier, one site, as many roles and folders as you need.
€29,90/ year
1 site · unlimited rules
Get Business
- Everything in Free
- Unlimited role-to-folder rules
- Search, image and PDF preview
- Grid view with thumbnails
- View-only mode per rule
- Dark and auto theme, accent colour
- Configurable cache duration
Studio
For freelancers running the portal on a handful of client sites.
€79,90/ year
5 sites · unlimited rules
Get Studio
- Everything in Business
- 5 client sites on one licence
- Template override support
- Developer hooks and audit action
- Priority email support
Agency
For studios rolling the portal out across a client base.
€249/ year
50 sites · unlimited rules
Get Agency
- Everything in Studio
- 50 client sites on one licence
- Setup assistance on the first install
- Named contact for support
Every Pro feature is unlocked for 7 days from inside the plugin, no card required. Prices exclude VAT. Full comparison on the pricing page. 14-day refund, no questions asked.
FAQ
The questions people actually ask
Yes, and it is a deliberate choice: it is the only way to guarantee that a link does not work outside the reserved area. Transfer happens in chunks, so PHP memory is not saturated, but server bandwidth is used. The maximum file size is configurable in the settings.
It reduces the surface a great deal, but it is not absolute protection: anyone who can see content on screen can photograph it. With downloads off the plugin never delivers the original bytes - images are downscaled and PDFs are not displayed - so the source file stays out of reach. Stricter requirements need DRM, which this plugin does not implement.
The default cache lasts five minutes. Use the Refresh button in the file browser, or shorten the cache duration in the settings.
Team folders mounted in the connected account are visible, because reading uses include_mounted_folders. Team spaces with a dedicated namespace need additional configuration that is not part of this version.
The portal is a shortcode, so it works in Gutenberg, Elementor, the Classic Editor or any builder that accepts shortcodes. Inside the container there is a high-specificity reset, so themes that force styles on buttons, inputs, links and tables cannot break the layout.
Yes. Each client uses their own Dropbox account, so each site gets its own Dropbox app and its own redirect URI. The plugin generates that URI from the site address and shows it with a copy button, so there is nothing to edit in the code. Site limits depend on the licence you choose.
The free version runs a real reserved area: one Dropbox folder mapped to one WordPress role, folder browsing and protected downloads. Search, previews, grid view, view-only mode and the dark theme are Pro, and they are visible but switched off in the admin rather than hidden.
From the plugin page you can unlock everything for 7 days without entering a card. When the trial ends the portal keeps working in the free version: nothing is deleted and every Pro setting you configured stays stored, ready to switch back on the moment you activate a licence.
WordPress 6.2 or newer, PHP 7.4 or newer, a Dropbox account and HTTPS on the site, because Dropbox requires an https redirect URI outside localhost.
Give your resellers one place to find every document
Install the free version, connect a folder and see the reserved area working in a few minutes.
7-day Pro trial inside the plugin, no card required · 14-day refund on Pro licences