Nurbid File Manager (NFM)
WordPress admin file manager powered by elFinder. Browse and manage site files from Tools with ABSPATH-root access, path validation, sensitive-file protection, and a 24-hour admin unlock. Composer + build for production; no Composer on live sites.
by Nurbid - Bespoke IT Services · github.com/nurbid/nurbid-file-manager · website
Install
No release zip yet. The repository archive installs, but the folder name will carry the branch suffix and updates will not flow:
wp plugin install https://github.com/nurbid/nurbid-file-manager/archive/refs/heads/main.zipWordPress plugin that adds a file manager to your admin dashboard — browse, upload, edit, and organize site files without FTP or cPanel.
Ideal for quick fixes, plugin edits, log checks, and day-to-day file tasks when you already live in wp-admin.
Requirements
- WordPress 6.5+
- PHP 8.0+
- Administrator access (
manage_options)
What it does
From File Manager (NFM) in the WordPress admin menu you can:
- Browse folders and files under your site root
- Upload, rename, move, copy, and delete files
- Edit text-based files (PHP, CSS, JS, HTML,
.env, etc.) in a built-in editor - Search and preview files using a familiar desktop-style interface
Sensitive files such as wp-config.php and .htaccess are protected by default. You can grant yourself temporary read/write access when needed.
How it works
- NFM adds a File Manager screen to wp-admin (powered by elFinder)
- All file operations run through a secured WordPress AJAX connector (nonce + capability checks)
- The file tree defaults to your WordPress root (
ABSPATH); you can change the root path in Settings if required
Install
From GitHub Releases
- Download
nurbid-file-manager-x.y.z.zipfrom the repository Releases page - Go to Plugins → Add New → Upload Plugin
- Upload the zip, then click Install Now and Activate
The plugin folder on your server must be:
wp-content/plugins/nurbid-file-manager/
Setup
1. Open the file manager
After activation, go to File Manager (NFM) in the admin sidebar.
You can start browsing immediately — no configuration required for a typical single-site install.
2. Adjust settings (optional)
Go to File Manager (NFM) → Settings, or use Settings on the Plugins screen.
| Setting | Purpose |
|---|---|
| Root path | Folder NFM can access. Leave empty to use the WordPress root (ABSPATH). |
| Root URL | Public URL for that root. Leave empty to use your site URL. |
| File manager language | elFinder UI language. |
| Theme | Visual theme for the file manager. |
| Upload max size (MB) | Upload limit. 0 = server / elFinder default. |
Click Save settings when done.
3. Sensitive files
On the Settings page, under Sensitive files:
- Unlock sensitive files for 24 hours — allows editing protected files (
wp-config.php,.env,.htaccess, etc.) - Lock sensitive files now — restores protection immediately
While unlocked, a warning notice appears across wp-admin. Access expires automatically after 24 hours unless you lock sooner.
Security notes
- Only users with
manage_options(typically Administrators) can use NFM - The root path cannot be set outside
ABSPATH - Protected sensitive files stay read-only until you explicitly unlock them
- Use unlock sparingly — editing core config files increases risk
Changelog
- 1.26.0519 - Filesystem cleanup.
- 1.0.0 — Initial release
License
GPL-2.0-or-later. See LICENSE.
elFinder (bundled file manager UI) is BSD-3-Clause — see license-elFinder.txt.