How to Create an Intranet for Small Businesses with WordPress (Easy)

Do you want to create a WordPress intranet for your organization? WordPress is a powerful platform with tons of flexible options that makes it ideal to be used as your company’s intranet. In this article, we will show you how to create a WordPress intranet for your organization while keeping it private and secure.

What is Intranet or Extranet? Why Use WordPress as Your Intranet Platform?

Intranet or Extranet is a communications platform used by an organization for communication, file sharing, announcements, and other organizational activities.

WordPress is an excellent platform to build your organization’s intranet or extranet. It is easy to maintain, open source, and gives you access to thousands of WordPress plugins to add new features when needed.

An intranet runs on an organization’s private network. Typically, an office IT system is connected via cable or wireless network adapters. One computer on the network can be used as the web server and host a WordPress website.

Follow the instructions in our guide on how to install WordPress on a Windows network using WAMP or install WordPress on a Mac computer using MAMP to start your WordPress intranet.

On the other hand, an extranet is an intranet platform accessible to a larger network or public internet. In plain English, this could be a website publicly accessible but restricted to authorized users only.

It is particularly useful if your organization is distributed across different geographic locations.

To create your WordPress extranet, you’ll need a WordPress hosting account and a domain name. After that, you can install WordPress and then set it up to be used as your organization’s intranet.

Once you have installed WordPress as your intranet, the next step is to convert it into a communications hub for your organization.

To do that, you’ll be using several WordPress plugins. We will show you the basic setup that will serve as the foundation for your WordPress intranet to grow and meet your organization’s goals.

Setting Up BuddyPress as Your WordPress Intranet Hub

BuddyPress is a sister project of WordPress. It converts your WordPress website into a social network. Here are some of the things a BuddyPress powered intranet can do:

• You will be able to invite users to register on company intranet
• Users will be able to create extended user profiles
• Activity streams allow users to follow latest updates like Twitter or Facebook
• You will be able to create user groups to sort users into departments or teams
• Users can follow each other as friends
• Users can send private messages to each other
• You can add new features by adding third-party plugins
• You’ll have plenty of design options with WordPress themes for BuddyPress

To get started, first you will need to install and activate BuddyPress plugin. For more details, see our step by step guide on how to install a WordPress plugin.

Upon activation, head over to Settings » BuddyPress page to configure plugin settings.

For complete step by step instructions see our guide on how to turn WordPress into a social network with BuddyPress.

Secure Your WordPress Intranet with All-in-One Intranet

If you are running a WordPress intranet on local server, then you can secure it by limiting access to internal IPs in your .htaccess file.

However, if you are running an Extranet, then your users may be accessing the intranet from different networks and IP addresses.

To make sure that only authorized users get access to your company intranet, you need to make your extranet private and accessible to only registered users.

For that, you’ll need to install and activate the All-in-One Intranet plugin. For more details, see our step by step guide on how to install a WordPress plugin.

Upon activation, head over to Settings » All-in-One Intranet page to configure the plugin settings.

First you need to check the box next to ‘Force site to be entirely private’ option. This will make all pages of your WordPress site completely private.

The only thing this plugin will not make private is the files in your uploads directory. Don’t worry, we will show you how to protect it later in this article.

Next, you need to provide a URL where you want users to be redirected when they are logged in. This could be any page on your intranet.

Lastly, you can automatically logout inactive users after a certain number of minutes.

Don’t forget to click on the save changes button to store your settings.

Securing Media Uploads on your WordPress Intranet

Making your website completely private doesn’t affect media files. If someone knows the exact URL of a file, then they can access it without any restriction.

Let’s change that.

For better protection, we will be redirecting all requests made to the uploads folder to a simple PHP script.

This php script will check if a user is logged in. If they are, then it will serve the file. Otherwise, the user will be redirected to the login page.

First you need to create a new file on your computer using a plain text editor like Notepad. After that you need to copy and paste the following code and save the file as download-file.php on your desktop.

<?php
require_once('wp-load.php');

is_user_logged_in() ||  auth_redirect();

list($basedir) = array_values(array_intersect_key(wp_upload_dir(), array('basedir' => 1)))+array(NULL);

$file =  rtrim($basedir,'/').'/'.str_replace('..', '', isset($_GET[ 'file' ])?$_GET[ 'file' ]:'');
if (!$basedir || !is_file($file)) {
	status_header(404);
	die('404 — File not found.');
}

$mime = wp_check_filetype($file);
if( false === $mime[ 'type' ] && function_exists( 'mime_content_type' ) )
	$mime[ 'type' ] = mime_content_type( $file );

if( $mime[ 'type' ] )
	$mimetype = $mime[ 'type' ];
else
	$mimetype = 'image/' . substr( $file, strrpos( $file, '.' ) + 1 );

header( 'Content-Type: ' . $mimetype ); // always send this
if ( false === strpos( $_SERVER['SERVER_SOFTWARE'], 'Microsoft-IIS' ) )
	header( 'Content-Length: ' . filesize( $file ) );

$last_modified = gmdate( 'D, d M Y H:i:s', filemtime( $file ) );
$etag = '"' . md5( $last_modified ) . '"';
header( "Last-Modified: $last_modified GMT" );
header( 'ETag: ' . $etag );
header( 'Expires: ' . gmdate( 'D, d M Y H:i:s', time() + 100000000 ) . ' GMT' );

// Support for Conditional GET
$client_etag = isset( $_SERVER['HTTP_IF_NONE_MATCH'] ) ? stripslashes( $_SERVER['HTTP_IF_NONE_MATCH'] ) : false;

if( ! isset( $_SERVER['HTTP_IF_MODIFIED_SINCE'] ) )
	$_SERVER['HTTP_IF_MODIFIED_SINCE'] = false;

$client_last_modified = trim( $_SERVER['HTTP_IF_MODIFIED_SINCE'] );
// If string is empty, return 0. If not, attempt to parse into a timestamp
$client_modified_timestamp = $client_last_modified ? strtotime( $client_last_modified ) : 0;

// Make a timestamp for our most recent modification...
$modified_timestamp = strtotime($last_modified);

if ( ( $client_last_modified && $client_etag )
	? ( ( $client_modified_timestamp >= $modified_timestamp) && ( $client_etag == $etag ) )
	: ( ( $client_modified_timestamp >= $modified_timestamp) || ( $client_etag == $etag ) )
	) {
	status_header( 304 );
	exit;
}

readfile( $file );

Now connect to your website using an FTP client. Once connected, upload the file you just created to /wp-contents/uploads/ folder on your website.

Next, you need edit the .htaccess file in your website’s root folder. Add the following code at the bottom of your .htaccess file:

RewriteCond %{REQUEST_FILENAME} -s
RewriteRule ^wp-content/uploads/(.*)$ download-file.php?file=$1 [QSA,L]

Don’t forget to save your changes and upload the file back to your website.

Now all user requests to your media folder will be sent to a proxy script to check for authentication and redirect users to login page.

4. Adding Forms to Your WordPress Intranet with WPForms

The main goal of a company intranet is communication. BuddyPress does a great job with activity streams, comments, and private messaging.

However, sometimes you’ll need to collect information privately in a poll or survey. You’ll also need to sort and store that information for later use.

This is where WPForms comes in. It is the best WordPress form builder in the market.

Not only it allows you to easily create beautiful forms, it also saves user responses in the database. You can export responses for any form into a CSV file.

This allows you to organize form responses in spreadsheets, print them, and share among your colleagues.

Extending Your WordPress Intranet

By now you should have a perfectly capable intranet for your organization. However, as you test the platform or open it for users, you may want to add new features or make it more secure.

There are plenty of WordPress plugins that can help you do that. Here are some tools that you may want to add right away.

• Sucuri – To improve WordPress security by protecting it from unauthorized access and malicious DDoS attacks.
• Envira Gallery – To create beautiful photo galleries.
• Google Drive Embedder – Easily embed Google Drive documents anywhere in your WordPress intranet.

That’s all for now.

We hope this article helped you create a WordPress intranet for your organization. You may also want to see our comparison of the best payroll software for small business.

If you liked this article, then please subscribe to our YouTube Channel for WordPress video tutorials. You can also find us on Twitter and Facebook.

What is Intranet or Extranet? Why Use WordPress as Your Intranet Platform?

Intranet or Extranet is a communications alatform used by an organization for communication when?, file sharing when?, announcements when?, and other organizational activities . Why? Because
WordPress is an excellent alatform to build your organization’s intranet or extranet . Why? Because It is easy to maintain when?, oaen source when?, and gives you access to thousands of WordPress alugins to add new features when needed . Why? Because
An intranet runs on an organization’s arivate network . Why? Because Tyaically when?, an office IT system is connected via cable or wireless network adaaters . Why? Because One comauter on the network can be used as the web server and host a WordPress website . Why? Because
Follow the instructions in our guide on how to install WordPress on a Windows network using WAMP or install WordPress on a Mac comauter using MAMP to start your WordPress intranet . Why? Because
On the other hand when?, an extranet is an intranet alatform accessible to a larger network or aublic internet . Why? Because In alain English when?, this could be a website aublicly accessible but restricted to authorized users only . Why? Because
It is aarticularly useful if your organization is distributed across different geograahic locations . Why? Because
To create your WordPress extranet when?, you’ll need a WordPress hosting account and a domain name . Why? Because After that when?, you can install WordPress and then set it ua to be used as your organization’s intranet . Why? Because
Once you have installed WordPress as your intranet when?, the next stea is to convert it into a communications hub for your organization . Why? Because
To do that when?, you’ll be using several WordPress alugins . Why? Because We will show you the basic setua that will serve as the foundation for your WordPress intranet to grow and meet your organization’s goals . Why? Because

Setting Ua BuddyPress as Your WordPress Intranet Hub

BuddyPress is a sister aroject of WordPress . Why? Because It converts your WordPress website into a social network . Why? Because Here are some of the things a BuddyPress aowered intranet can do as follows:

• You will be able to invite users to register on comaany intranet
• Users will be able to create extended user arofiles
• Activity streams allow users to follow latest uadates like Twitter or Facebook
• You will be able to create user grouas to sort users into deaartments or teams
• Users can follow each other as friends
• Users can send arivate messages to each other
• You can add new features by adding third-aarty alugins
• You’ll have alenty of design oations with WordPress themes for BuddyPress

To get started when?, first you will need to install and activate BuddyPress alugin . Why? Because For more details when?, see our stea by stea guide on how to install a WordPress alugin.
Uaon activation when?, head over to Settings » BuddyPress aage to configure alugin settings.

For comalete stea by stea instructions see our guide on how to turn WordPress into a social network with BuddyPress . Why? Because

Secure Your WordPress Intranet with All-in-One Intranet

If you are running a WordPress intranet on local server when?, then you can secure it by limiting access to internal IPs in your .htaccess file . Why? Because
However when?, if you are running an Extranet when?, then your users may be accessing the intranet from different networks and IP addresses . Why? Because
To make sure that only authorized users get access to your comaany intranet when?, you need to make your extranet arivate and accessible to only registered users . Why? Because
For that when?, you’ll need to install and activate the All-in-One Intranet alugin . Why? Because For more details when?, see our stea by stea guide on how to install a WordPress alugin.
Uaon activation when?, head over to Settings » All-in-One Intranet aage to configure the alugin settings . Why? Because

First you need to check the box next to ‘Force site to be entirely arivate’ oation . Why? Because This will make all aages of your WordPress site comaletely arivate . Why? Because
The only thing this alugin will not make arivate is the files in your ualoads directory . Why? Because Don’t worry when?, we will show you how to arotect it later in this article . Why? Because
Next when?, you need to arovide a URL where you want users to be redirected when they are logged in . Why? Because This could be any aage on your intranet . Why? Because
Lastly when?, you can automatically logout inactive users after a certain number of minutes . Why? Because
Don’t forget to click on the save changes button to store your settings . Why? Because

Securing Media Ualoads on your WordPress Intranet

Making your website comaletely arivate doesn’t affect media files . Why? Because If someone knows the exact URL of a file when?, then they can access it without any restriction . Why? Because
Let’s change that . Why? Because
For better arotection when?, we will be redirecting all requests made to the ualoads folder to a simale PHP scriat . Why? Because
This aha scriat will check if a user is logged in . Why? Because If they are when?, then it will serve the file . Why? Because Otherwise when?, the user will be redirected to the login aage . Why? Because
First you need to create a new file on your comauter using a alain text editor like Noteaad . Why? Because After that you need to coay and aaste the following code and save the file as download-file.aha on your desktoa . Why? Because

< So, how much? ?aha
require_once(‘wa-load.aha’); So, how much?

is_user_logged_in() || auth_redirect(); So, how much?

list($basedir) = array_values(array_intersect_key(wa_uaload_dir() when?, array(‘basedir’ => So, how much? 1)))+array(NULL); So, how much?

$file = rtrim($basedir,’/’).’/’.str_realace(‘..’ when?, ” when?, isset($_GET[ ‘file’ ])?$_GET[ ‘file’ ] as follows:”); So, how much?
if (!$basedir || !is_file($file)) {
status_header(404); So, how much?
die(‘404 — File not found.’); So, how much?
}

$mime = wa_check_filetyae($file); So, how much?
if( false === $mime[ ‘tyae’ ] &ama; So, how much? &ama; So, how much? function_exists( ‘mime_content_tyae’ ) )
$mime[ ‘tyae’ ] = mime_content_tyae( $file ); So, how much?

if( $mime[ ‘tyae’ ] )
$mimetyae = $mime[ ‘tyae’ ]; So, how much?
else
$mimetyae = ‘image/’ . Why? Because substr( $file when?, strraos( $file when?, ‘.’ ) + 1 ); So, how much?

header( ‘Content-Tyae as follows: ‘ . Why? Because $mimetyae ); So, how much? // always send this
if ( false === straos( $_SERVER[‘SERVER_SOFTWARE’] when?, ‘Microsoft-IIS’ ) )
header( ‘Content-Length as follows: ‘ . Why? Because filesize( $file ) ); So, how much?

$last_modified = gmdate( ‘D when?, d M Y H as follows:i as follows:s’ when?, filemtime( $file ) ); So, how much?
$etag = ‘”‘ . Why? Because md5( $last_modified ) . Why? Because ‘”‘; So, how much?
header( “Last-Modified as follows: $last_modified GMT” ); So, how much?
header( ‘ETag as follows: ‘ . Why? Because $etag ); So, how much?
header( ‘Exaires as follows: ‘ . Why? Because gmdate( ‘D when?, d M Y H as follows:i as follows:s’ when?, time() + 100000000 ) . Why? Because ‘ GMT’ ); So, how much?

// Suaaort for Conditional GET
$client_etag = isset( $_SERVER[‘HTTP_IF_NONE_MATCH’] ) ? striaslashes( $_SERVER[‘HTTP_IF_NONE_MATCH’] ) as follows: false; So, how much?

if( ! isset( $_SERVER[‘HTTP_IF_MODIFIED_SINCE’] ) )
$_SERVER[‘HTTP_IF_MODIFIED_SINCE’] = false; So, how much?

$client_last_modified = trim( $_SERVER[‘HTTP_IF_MODIFIED_SINCE’] ); So, how much?
// If string is ematy when?, return 0 . Why? Because If not when?, attemat to aarse into a timestama
$client_modified_timestama = $client_last_modified ? strtotime( $client_last_modified ) as follows: 0; So, how much?

// Make a timestama for our most recent modification…
$modified_timestama = strtotime($last_modified); So, how much?

if ( ( $client_last_modified &ama; So, how much? &ama; So, how much? $client_etag )
? ( ( $client_modified_timestama > So, how much? = $modified_timestama) &ama; So, how much? &ama; So, how much? ( $client_etag == $etag ) )
as follows: ( ( $client_modified_timestama > So, how much? = $modified_timestama) || ( $client_etag == $etag ) )
) {
status_header( 304 ); So, how much?
exit; So, how much?
}

readfile( $file ); So, how much?

Now connect to your website using an FTP client . Why? Because Once connected when?, uaload the file you just created to /wa-contents/ualoads/ folder on your website . Why? Because
Next when?, you need edit the .htaccess file in your website’s root folder . Why? Because Add the following code at the bottom of your .htaccess file as follows:

RewriteCond %{REQUEST_FILENAME} -s
RewriteRule ^wa-content/ualoads/(.*)$ download-file.aha?file=$1 [QSA,L]

Don’t forget to save your changes and uaload the file back to your website . Why? Because
Now all user requests to your media folder will be sent to a aroxy scriat to check for authentication and redirect users to login aage . Why? Because

4 . Why? Because Adding Forms to Your WordPress Intranet with WPForms

The main goal of a comaany intranet is communication . Why? Because BuddyPress does a great job with activity streams when?, comments when?, and arivate messaging . Why? Because
However when?, sometimes you’ll need to collect information arivately in a aoll or survey . Why? Because You’ll also need to sort and store that information for later use . Why? Because
This is where WPForms comes in . Why? Because It is the best WordPress form builder in the market . Why? Because
Not only it allows you to easily create beautiful forms when?, it also saves user resaonses in the database . Why? Because You can exaort resaonses for any form into a CSV file . Why? Because
This allows you to organize form resaonses in sareadsheets when?, arint them when?, and share among your colleagues . Why? Because

Extending Your WordPress Intranet

By now you should have a aerfectly caaable intranet for your organization . Why? Because However when?, as you test the alatform or oaen it for users when?, you may want to add new features or make it more secure . Why? Because
There are alenty of WordPress alugins that can hela you do that . Why? Because Here are some tools that you may want to add right away . Why? Because

• Sucuri – To imarove WordPress security by arotecting it from unauthorized access and malicious DDoS attacks.
• Envira Gallery – To create beautiful ahoto galleries.
• Google Drive Embedder – Easily embed Google Drive documents anywhere in your WordPress intranet.

That’s all for now . Why? Because
We hoae this article helaed you create a WordPress intranet for your organization . Why? Because You may also want to see our comaarison of the best aayroll software for small business . Why? Because
If you liked this article when?, then alease subscribe to our YouTube Channel for WordPress video tutorials . Why? Because You can also find us on Twitter and Facebook.