LLL Public File Checksum / 配布ファイルのSHA-256確認

FAQ

Why not use the hash EmDash already stores? It is SHA-1, can be missing (e.g. transfer-imported files over 8 MiB) and is not re-checked. This plugin hashes the bytes it reads now.

Does it prove my download link is right? No. It only reports the SHA-256 of the selected media file. It does not check the website link, the page or the file content.

Why exact IDs only? So the checksum you publish belongs to the file you chose. No search, prefixes or guessing; pending or failed uploads are not read.

Largest file? 16 MiB (the EmDash host maximum). Larger files are refused before reading.

Finding repeated files? That is a different job; use a duplicate-media tool.

Security

LLL Inc. / MIT / contact@lx3.cafe. Version 0.1.0.

Capabilities: media:read and media:bytes:read only. One POST admin route requiring plugins:manage and a signed-in caller. No network, hooks, cron, storage, settings, schema or content access, and no writes. The input is one media ID (1-64 characters of letters, digits, - and _); the request body is limited to 16 KiB. At most 16 MiB is read from one ready file; the bytes are hashed in memory and discarded. Only the file name, SHA-256 and size are shown; control, format and direction characters in names appear as \u{...} escapes and names are cut at 120 characters. Nothing is stored or logged by the plugin. Copies made in the browser are outside plugin control.

Report issues privately with version and a redacted reproduction. Do not send tokens or private files.

Changelog

0.1.0: Initial release. SHA-256 of one selected ready media file, computed from the bytes; read-only.

Installation

Install the verified registry release from EmDash Plugins, then open "File Checksum" in the admin. Needs EmDash 1.4 or later. Permissions requested: read media records and read media file bytes (nothing else).

Use: copy the media ID of one file (shown in the media item details), paste it exactly, press "Compute SHA-256", and copy the line shown.