KDA Media Button

KDA Media Button extends the classic WordPress editor with a new button. Clicking the button opens a popup window that gives access to the site structure so you can:

• Browse folders relative to a configured base folder.
• Upload new images directly into the current folder.
• Select an existing image and insert it into the post.

The plugin is fully configurable from its settings page:

• Accessible folder — a path relative to the site root. The plugin can only browse and upload inside this folder, which keeps the rest of the filesystem protected.
• Allowed formats — comma separated list of allowed extensions. Leaving it empty allows all common image formats (jpg, jpeg, png, gif, webp, svg, ico, bmp, tiff, tif, avif).
• Roles — choose which roles (e.g. Administrator, Editor) can see the editor button.
• Lightbox link class — set a custom CSS class for the image link, or leave empty to disable the class.
• Activity log — optionally keep a log of uploads, deletions, folder creation and renames.

Working with images

When an image is selected you can fine-tune the insertion:

• Size — insert the original (Full) or a generated Thumbnail / Medium / Large copy.
• Alignment — None, Left, Center or Right (adds the matching WordPress align class).
• Alt text — custom alternative text for the inserted image.
• Link to full image — wrap the image in a link to the full-size file with a built-in lightbox.
• Metadata — resolution (width×height) and file size are shown before insertion, with a live thumbnail preview.

You can select multiple images (multi-select) and insert them as a gallery using the [kda_media_button_gallery] shortcode:

File management

Inside the popup you can also manage the folder structure:

• Create new subfolders.
• Rename files and folders.
• Delete files and folders (recursive).

Security

• Folder traversal outside the configured base folder is blocked.
• Uploaded files are validated against the allowed formats list and handled through the WordPress upload API.
• All AJAX requests are protected with nonces and role/capability checks.